Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: swAQePOD+GPw81V37+MPt4yXn5PKiTF9UOJ5c9yu5rU=
Subject key identifier: 84:4A:B5:E8:BD:35:12:8F:47:F5:2D:F4:D2:C3:90:61:1E:51:58:64
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 0194BC3BE41E96566B1D4C2ECBD7500A88F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0CC1
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: xZOj+lFjCptcQVaVmatwDbuy08je42fMWiNLZmdVW04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:1e:96:56:6b:1d:4c:2e:cb:d7:50:0a:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=844ab5e8bd35128f47f52df4d2c390611e515864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:23:c3:d6:e4:6f:8f:45:c4:f6:d0:5d:17:
97:05:53:d9:c4:c7:30:15:de:35:90:c8:2f:e6:6f:
f7:1f:ea:05:c6:93:03:da:a5:7f:2e:52:1a:d6:fd:
78:67:c5:02:9a:02:1d:5a:17:22:51:ca:bb:16:4a:
c7:71:ae:ac:a7:75:3f:d4:55:1d:f4:73:6c:31:49:
16:d5:67:06:71:db:df:12:5e:1f:41:60:9d:ba:1c:
ab:36:dd:89:88:e6:6d:50:2c:b9:e2:6e:6f:7c:5f:
24:ac:fc:40:9d:d5:b9:c7:ca:0d:a3:34:87:76:e0:
9c:7f:13:27:ed:41:7b:96:3d:f6:16:4c:4c:c8:25:
51:c8:87:f9:c3:cc:64:cb:fd:8a:4f:4f:a5:e7:64:
5e:12:3a:46:d6:02:ff:40:92:db:e5:3c:95:ed:41:
0c:46:d1:d3:46:05:26:b0:84:96:9a:3c:19:84:5b:
5a:28:98:df:4e:02:70:9e:ce:51:f1:f4:e1:a5:f3:
8d:c4:ca:1b:90:f0:c3:9e:3c:55:10:17:24:88:4d:
c0:58:8c:02:7e:64:39:43:a3:57:6b:01:c6:93:1e:
6a:f9:bd:cc:ae:f9:28:71:ec:2f:ef:4a:60:7b:9e:
e2:04:f4:a1:df:e6:8f:e2:fe:d0:39:46:d8:7a:1c:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4A:B5:E8:BD:35:12:8F:47:F5:2D:F4:D2:C3:90:61:1E:51:58:64
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:49:5e:42:22:dc:54:b6:94:00:df:6f:a2:6e:a7:c5:a5:f9:
f8:c6:95:36:54:89:14:3f:de:57:d3:26:5d:6a:91:1e:83:6e:
da:43:88:c9:67:18:81:66:22:49:62:41:a8:16:ff:63:64:24:
40:16:c0:5f:50:e8:af:96:bc:fd:5e:a0:52:3b:0b:78:56:9a:
f2:57:0e:45:c8:a6:86:ec:6d:03:d2:f8:36:e7:f2:17:34:d7:
6f:15:21:52:32:70:32:13:40:29:4a:5f:70:93:b4:ec:a4:06:
1e:f2:44:bf:fd:0c:7d:35:8c:dc:98:7c:f0:b8:2b:87:56:6e:
c3:b7:4c:6d:9e:c1:9c:68:9c:4d:17:5c:42:9f:f6:ea:79:c2:
5a:8a:3c:36:ab:8b:12:b9:24:32:8b:d7:bc:a9:18:71:57:ad:
6b:7a:3e:7f:b7:06:f9:be:cc:31:63:b2:e9:3d:18:a5:8b:00:
3d:0d:ac:eb:85:cf:3b:40:c3:fd:49:fa:cb:c1:55:90:1e:4b:
f4:4e:07:59:65:4f:9c:69:dc:2c:cd:24:7c:29:1a:09:ce:61:
6b:ba:93:81:4d:06:bc:c0:85:48:f4:9b:40:9d:70:df:58:1c:
fb:05:2c:d9:73:13:1c:3a:e3:46:19:95:d8:7f:b7:bf:c8:b8:
d6:85:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:20 2025 by rpki-client