Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: t56klYvqM6b4zF58Y39v/QvaUmbLQYyVfj8OxqxYXBg=
Subject key identifier: 19:91:B6:E4:D0:78:E3:FF:04:4C:BF:C4:C2:05:60:82:4F:31:B3:AE
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 0194BD17C233A1B67D3425F2EEE06EF325D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 0DC5
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: ZqfD2GShIL/1YeAn3yS6PH+Vm5rWdsa4uyVrTvGZ1do=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:33:a1:b6:7d:34:25:f2:ee:e0:6e:f3:25:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=1991b6e4d078e3ff044cbfc4c20560824f31b3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:3c:3a:2f:93:b7:e3:6a:fd:d7:dc:19:f8:
d2:02:28:58:61:b0:ff:f5:4f:ad:b7:2d:d1:a8:3c:
bd:6a:4a:dd:bd:60:05:a3:77:13:65:2e:22:07:b8:
5f:80:5d:ee:c9:a6:46:2d:aa:32:66:7a:c3:c9:e3:
56:bd:c1:1d:ba:a5:e4:a3:45:34:23:c2:3e:40:c6:
45:20:7c:56:49:67:46:f8:58:12:6a:0e:5f:15:b8:
58:67:7b:38:90:9b:52:c7:4d:25:31:6b:7b:eb:d0:
e9:7a:39:35:f6:09:4e:56:70:e1:64:7d:d2:f4:5c:
e9:a7:62:fa:e2:ef:af:ea:3d:37:27:e9:ae:73:1c:
34:7d:72:f4:f6:21:b1:39:bd:99:28:a2:82:ef:89:
fa:09:39:ed:8e:44:bc:d7:76:fd:6f:48:92:fa:ff:
d6:92:25:8d:75:f3:de:aa:f4:ae:87:79:31:ae:94:
30:84:7e:4a:5b:e9:cb:5d:b0:94:f5:53:76:08:52:
80:55:02:a9:80:38:0f:bc:b0:87:f9:df:db:bb:2f:
79:53:13:b9:8e:3f:20:a5:6d:03:23:c6:69:f5:9d:
3e:ea:fa:0a:1e:ab:ee:fb:f9:ab:16:3c:c5:24:29:
7c:70:e5:87:e9:6f:e8:87:f0:59:99:3d:76:95:57:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:B6:E4:D0:78:E3:FF:04:4C:BF:C4:C2:05:60:82:4F:31:B3:AE
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8b:64:ea:12:19:34:34:6b:e5:aa:f1:85:73:14:63:76:df:
db:f2:9a:a3:76:cb:4c:f2:8d:10:d5:59:7b:f1:a9:c3:88:f3:
32:1b:35:10:d8:62:f7:c0:54:dd:a5:32:d6:87:d3:20:94:a5:
ca:5d:b4:98:1d:48:03:31:82:cb:71:d5:4c:85:1c:76:6c:c3:
cf:1d:ed:46:4d:d7:d0:3d:ae:10:c3:40:b9:f5:5a:05:87:54:
75:65:2c:95:de:31:22:58:e1:39:ab:3c:8f:44:50:ab:fd:53:
2f:a6:1b:1d:03:ca:5e:d0:f4:91:4b:3f:91:57:6e:81:dd:63:
13:be:85:e7:64:4f:e4:7e:2c:d6:fb:40:62:17:e5:1a:2d:48:
1a:83:b9:43:5b:9a:03:b5:46:68:e1:f8:3e:3b:e9:da:e6:32:
7d:f9:05:4f:19:dd:36:12:9c:52:e6:84:d5:41:b0:e9:b5:8d:
fc:a6:6b:72:8c:e2:64:c9:48:e0:f8:84:e1:82:93:cb:6f:48:
f9:8b:f7:f5:fe:f3:4c:a0:1d:85:04:a1:0b:4c:c5:db:e4:a4:
ea:a8:69:b4:3f:23:8b:bd:7e:61:5a:4f:41:0a:63:bb:48:cb:
06:55:09:57:50:15:87:e5:f3:c1:c0:12:a7:cc:97:ef:87:2c:
82:7f:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:56 2025 by rpki-client