Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File: g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier: BRQNqY9CE+PncfQOS/QrczrZVoC8jhJoheCRFWx4cjI=
Subject key identifier: DC:89:E7:3A:EE:E8:9D:91:12:1B:A6:52:DB:47:24:0B:9D:C1:5F:A9
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 0194BBCE61F4D29D8DB84791A6606CB41E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number: 04C4
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 4kR89sLAqkPwhn_ralqMLx5vnmw.roa (hash: aW/S/miakzFOlENse9MXKWvU/sKShiO+PJNe9e/OxYg=)
2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: jvHXgIMivXkmGx/savPYNUd1RelAloIkSJF6LGXCszU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:61:f4:d2:9d:8d:b8:47:91:a6:60:6c:b4:1e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=dc89e73aeee89d91121ba652db47240b9dc15fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:98:6e:4e:80:d3:df:d9:a6:9f:e3:ae:66:
dd:9d:3b:4b:c5:c9:8e:64:37:f1:29:b6:68:d5:60:
04:bc:82:2b:a3:ea:6c:a4:27:66:c3:f4:09:77:9e:
af:61:c5:f0:e8:11:56:3e:6f:f0:24:bf:7b:88:79:
64:61:4e:37:6b:c0:24:9e:0c:75:41:de:ce:cd:5f:
e0:ab:02:36:01:6b:bd:b0:1b:5a:c5:33:86:67:c2:
23:6f:fe:2f:2b:1f:13:8a:13:92:3b:f9:bf:41:7d:
4c:e3:4e:f9:05:53:ea:8c:0d:b2:32:33:45:b1:9b:
bd:1b:10:96:6d:1b:5a:cf:71:cf:58:d8:73:88:68:
57:72:0d:d7:5c:18:e9:be:95:da:9f:11:c8:77:23:
83:17:26:f3:85:19:d4:1e:fa:cf:83:37:7a:8d:87:
b0:7b:3a:d2:ad:ba:0e:50:8b:80:c6:60:e0:42:9e:
c8:c3:32:4a:35:fe:60:fc:f7:50:b1:72:8a:85:d5:
a6:91:9e:f3:48:a6:05:32:df:6b:2d:74:2c:86:e6:
83:9c:d2:db:26:35:eb:29:e5:64:b8:cb:04:ec:4d:
dd:cd:03:ec:a3:03:37:fd:a8:9f:66:bf:d1:b7:6e:
0d:b4:1d:b5:54:01:03:b4:c9:c1:8b:91:d9:9b:56:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:E7:3A:EE:E8:9D:91:12:1B:A6:52:DB:47:24:0B:9D:C1:5F:A9
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:42:61:91:ac:d6:9e:f9:8a:7c:ab:9c:cb:e7:51:6b:9d:24:
a5:7a:84:79:21:0f:74:a7:78:89:48:aa:eb:d6:52:20:7f:bf:
c3:1e:5e:15:35:ec:7f:80:46:c5:4d:0c:cc:6f:78:31:ff:a8:
f5:a3:98:f6:0e:bc:bf:07:0b:b5:01:e0:9b:04:4a:bb:f6:31:
1d:6e:a2:44:cd:ed:0d:12:0a:d2:45:a0:a5:fd:7e:0b:5e:0b:
28:ee:40:d2:df:47:d1:ca:10:9b:90:ae:30:06:98:c1:af:e5:
8d:66:c9:a1:bc:2a:f2:05:ab:7d:aa:8d:15:94:cb:71:e5:2c:
59:a4:99:5f:66:9c:5e:d5:98:1c:87:a8:c8:5e:67:ed:de:66:
61:18:f0:e6:66:0a:29:e9:9b:2d:13:a7:a0:94:fc:60:08:fe:
17:33:11:96:b3:cc:ec:8a:2b:e0:77:ec:99:9c:ac:66:70:a1:
c4:37:54:aa:87:55:eb:c3:f4:0a:83:ed:ab:11:2f:01:99:ba:
8c:8b:bd:52:5d:39:41:4c:75:1a:d0:96:33:9d:4e:59:ab:4d:
c6:7a:0c:b6:98:6b:0b:e6:02:53:bf:53:84:88:ed:e3:e4:f6:
0e:2a:0d:59:76:dd:b6:eb:7b:47:16:7e:67:42:8c:d6:12:7b:
df:4c:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:47:24 2025 by rpki-client