
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: 3bG+G5vN4Sg7jOYXoyMQY0jWRzeciCRyjFufinuQ1ho=
Subject key identifier: 75:98:C3:BF:4F:28:86:DE:69:63:86:38:C5:66:07:4F:3E:7D:26:93
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 01962F74BA568D8D3C3A9437D8727B88BCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 1230
Signing time: Sun 13 Apr 2025 14:01:41 +0000
Manifest this update: Sun 13 Apr 2025 14:01:41 +0000
Manifest next update: Mon 14 Apr 2025 14:01:41 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: aPhHIUlsEdzCF8yyA3nIu2C9QnEjRbQbl9r9ZeEmqQA=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:ba:56:8d:8d:3c:3a:94:37:d8:72:7b:88:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Apr 13 14:01:41 2025 GMT
Not After : Apr 14 14:01:41 2025 GMT
Subject: CN=7598c3bf4f2886de69638638c566074f3e7d2693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:03:7a:07:03:20:a4:49:89:33:fb:99:56:bd:
83:a1:63:bb:32:fd:0b:eb:37:29:a7:79:b2:e0:2a:
f2:6d:58:19:96:fa:0e:0a:d6:1d:b9:5c:da:b7:10:
8b:53:09:70:f2:86:db:e5:c7:cc:92:25:67:05:0c:
81:cd:c9:e5:77:e0:ac:b4:27:6a:d8:4e:83:2c:35:
96:cb:ad:43:10:96:ae:aa:bf:e3:1f:89:b6:dc:18:
f0:b5:db:dd:91:fd:04:fe:f2:48:9b:fd:b9:b1:aa:
25:83:25:3e:7d:fc:af:5f:7c:3d:e2:4f:48:fc:69:
0f:34:2f:19:3d:73:45:04:e3:37:15:5a:83:ee:42:
45:3b:8e:54:87:f2:cd:70:cc:90:6d:e8:ab:45:f6:
57:14:09:7e:64:19:e4:0c:af:da:03:bc:0f:7a:07:
a7:36:4a:4e:1d:c2:aa:87:05:7f:db:a5:fe:5c:43:
d9:23:6e:00:bd:63:b6:75:98:4d:f2:50:30:39:27:
f2:c9:30:93:d9:f1:33:01:ca:bb:4d:40:60:b5:e0:
43:f2:ec:86:95:82:71:6d:1f:5d:59:cf:00:a8:73:
9a:a1:57:73:55:a7:61:2a:bb:f7:46:2c:dd:0c:bd:
98:f8:cc:80:e3:0a:8a:99:7b:83:d5:f0:85:2a:3c:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:98:C3:BF:4F:28:86:DE:69:63:86:38:C5:66:07:4F:3E:7D:26:93
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bb:49:bf:d8:8e:98:0a:dc:db:90:7b:ef:6f:f9:a0:86:52:
9f:35:1e:d0:c6:b2:06:92:b6:aa:26:14:bf:bd:6d:64:91:ab:
8b:d4:b1:05:0f:37:e0:12:08:4b:a5:68:e5:7a:51:62:a9:ee:
c1:17:70:bc:a0:e3:81:53:29:24:45:4c:a2:b9:98:54:f7:82:
88:10:61:ab:da:20:d7:f2:a6:40:83:9c:37:1c:5f:36:6c:cb:
e1:e3:5f:18:a6:cc:64:dc:74:3e:cc:47:bf:b5:f9:50:9b:19:
9a:63:45:00:a4:4b:89:f9:6d:38:fd:88:da:79:12:02:b4:05:
6d:c3:86:a8:30:1e:12:48:be:22:ee:4e:74:f1:ec:27:b9:1c:
54:3e:87:f3:1c:91:70:56:fa:6b:f2:6d:27:c7:0c:47:6d:d4:
6d:f0:f6:d0:ef:7a:c5:fd:c1:d1:7e:53:da:0e:21:1d:c9:2b:
12:f2:65:9f:db:6f:18:2e:ac:30:9e:1b:aa:8a:fe:cf:a9:58:
17:46:22:36:fd:be:eb:1f:c0:f2:d1:6d:ff:c3:9d:f6:1d:33:
e7:b3:98:a6:b4:82:de:59:87:f7:fd:82:0f:93:7d:89:f6:a5:
69:6b:aa:71:0a:b7:fe:2b:a1:6c:b3:db:ba:c9:f6:b0:00:cc:
35:14:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net