Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: GJrnb7GOSttUpuYAQS3sFMwyrPE5b2chx5VYS+zp5lQ=
Subject key identifier: 19:68:02:5D:B1:63:48:89:16:BB:15:7E:D0:65:90:4B:EB:D0:CC:2E
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 0194BCAA3A38F4F3F3C8E43F127DAFB9AA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: PAyP74iDESg96EaUjrPfUGb3Z63vPSWVepSX6xOLhCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3a:38:f4:f3:f3:c8:e4:3f:12:7d:af:b9:aa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=1968025db163488916bb157ed065904bebd0cc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:e7:ca:40:ef:2f:a2:b5:31:8d:fb:6a:9c:
63:26:46:26:27:8b:35:c3:02:6f:65:63:24:4f:44:
17:6c:7e:61:13:ce:e3:92:bb:c4:ca:ce:aa:38:0e:
fa:5b:57:ab:e1:e9:02:c1:d2:af:a2:cb:07:96:c9:
31:76:62:02:25:81:a3:41:fb:9d:d2:01:58:54:ba:
88:ad:f8:58:28:d3:3f:fe:10:17:35:98:c0:7b:ab:
67:fd:4f:83:79:a8:cb:fa:18:7c:5b:75:3a:83:72:
ea:d3:45:b4:f7:48:39:14:73:73:0c:57:77:c7:72:
7f:f4:fd:77:d9:2b:45:c9:5a:49:ae:5b:4b:0f:31:
07:94:5f:b4:e6:28:9e:f7:9a:62:52:e8:9a:6f:9c:
49:e8:30:dd:e7:ab:80:02:c6:8e:61:f9:83:ca:b8:
2c:9b:a6:e7:ab:79:88:a0:16:5f:3e:55:e7:e7:93:
9b:61:c4:7d:9c:67:47:7e:cb:d5:2d:c3:f4:66:fb:
39:7d:84:22:2e:94:fc:bb:50:a7:0e:6d:59:76:8f:
07:52:c7:8f:11:f3:cc:a8:4b:d9:9a:ea:0e:ce:d6:
f1:ab:55:65:02:00:ea:21:38:07:45:e7:ef:01:1b:
29:ba:af:23:cf:8b:83:65:e9:d3:e7:30:96:58:b6:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:68:02:5D:B1:63:48:89:16:BB:15:7E:D0:65:90:4B:EB:D0:CC:2E
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5e:c2:96:8c:ef:07:02:64:e4:60:db:ce:94:03:7b:7e:56:
bd:56:b8:b2:7d:2a:bf:40:2d:00:77:e3:34:19:cb:e1:4e:cd:
52:a1:10:e2:f9:f2:28:f6:16:75:48:4e:69:8a:51:15:23:e0:
3b:2f:12:e5:16:74:a9:8a:a0:5c:94:b6:2d:9a:1c:b4:36:ac:
2a:ef:49:3e:22:7c:1c:05:99:c7:5e:31:40:27:39:80:47:37:
58:ad:4a:79:42:10:9f:58:34:3d:d5:b5:44:5a:7b:b9:c7:63:
98:a9:87:67:0f:f9:07:e0:2a:3e:48:99:7a:ba:f6:f9:19:fe:
cd:c0:cc:65:93:f8:b1:d0:ca:3b:91:f6:8b:1e:cc:f6:ad:68:
c3:3e:dc:d4:86:a1:c9:50:95:cc:57:2f:d3:54:6d:89:e1:eb:
6e:5d:2e:dd:a8:94:dd:fb:cf:87:13:9e:91:62:3d:25:4d:a5:
ab:6b:e6:30:67:ae:8c:99:8f:06:af:eb:82:45:40:e6:94:be:
f3:82:a4:cb:f9:fe:92:12:45:34:33:96:08:0f:cb:6d:33:d9:
53:25:dd:f5:0f:b5:97:d2:00:6b:97:8f:11:94:07:81:4a:39:
64:05:c5:3c:ac:89:ec:52:e8:d6:95:ee:93:a4:5c:b3:91:26:
f1:34:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:15 2025 by rpki-client