Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: qDWajTCTjirIwQFzmurhkOX+3GBBzdax+u3h7ph5feA=
Subject key identifier: 05:17:BD:F1:E2:48:89:B6:C4:E2:21:40:DD:B9:FB:51:A4:2F:A0:11
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 0194BD17BCA288935215E10171090E7E7DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: g86RttZsMMd/WHVvGc2Hpn0mtCYYX38pJe769nM5w3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bc:a2:88:93:52:15:e1:01:71:09:0e:7e:7d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=0517bdf1e24889b6c4e22140ddb9fb51a42fa011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:16:99:ca:df:3c:e4:ae:22:64:e0:4a:61:
4f:c3:e5:12:3a:85:6f:20:79:60:6d:96:88:aa:f5:
d6:41:07:11:f0:df:77:1d:42:e0:24:99:f7:0b:61:
2a:fb:e0:49:d3:0b:66:32:15:b0:f8:b9:42:a8:78:
bb:18:19:ae:c1:6b:f0:9d:e5:43:df:2f:05:f4:d1:
3b:51:83:32:0a:c3:79:94:b7:68:9c:b8:28:c2:f6:
84:ae:9a:e8:3d:0e:35:6d:51:84:f8:0c:64:96:eb:
16:ef:62:39:6d:3a:3e:6d:43:b6:31:39:33:24:91:
b4:37:19:8c:7c:bf:61:27:e8:fa:24:2d:d6:32:4c:
66:06:2a:f5:65:77:7b:25:20:18:ed:98:f2:8c:56:
a6:e2:c7:79:d2:f0:d2:10:95:67:9a:f7:fc:d3:ec:
c4:4c:6e:0c:4a:93:be:3b:81:5c:95:fd:8d:47:a4:
57:d3:a8:1e:53:99:dd:6b:7b:f9:83:1f:b8:4d:9a:
52:45:cf:32:54:26:68:ba:ac:f3:5b:3d:06:c7:d1:
a1:1b:ea:d6:6a:07:b5:db:de:ac:4f:50:cb:62:9e:
9b:43:5b:56:f2:4a:00:a1:bc:f3:cf:f7:b0:97:85:
1c:a1:93:d7:77:67:87:8b:44:40:f8:96:31:d1:aa:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:BD:F1:E2:48:89:B6:C4:E2:21:40:DD:B9:FB:51:A4:2F:A0:11
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5c:f6:63:f2:cd:4b:ce:80:9b:b0:dc:05:93:9e:ed:c2:d7:
df:62:36:22:70:8a:48:6e:00:55:66:c2:dd:e4:18:6d:68:a0:
63:ef:8e:9b:67:a2:d2:b2:00:47:ae:d9:d1:67:eb:9a:4c:15:
b3:2e:ba:06:c6:04:f4:4b:e9:f2:91:19:ca:91:1a:8c:8d:d2:
e4:70:67:66:82:de:53:e0:d1:a8:bd:c8:ce:82:de:64:bb:b9:
2e:ca:d2:25:49:1b:4e:59:75:00:69:2a:aa:ae:3f:0e:6c:58:
91:6b:f8:d0:02:d4:8f:51:ae:9a:b3:66:79:26:fa:17:24:bd:
49:50:7b:1c:cb:dc:df:d8:24:5a:dd:f6:da:8d:40:bb:7c:9f:
6a:df:01:d5:0f:a0:00:91:6e:dc:5e:57:a5:09:6d:54:8a:69:
8a:b8:c5:22:f4:6e:93:2f:2f:c2:6d:f6:64:b1:32:21:a1:33:
77:72:a2:af:24:8b:52:c5:a2:0b:b7:9c:de:9f:c0:4e:00:e3:
c2:16:19:3a:2c:ce:f2:bc:65:47:8e:3f:65:ff:48:aa:1e:9b:
70:de:6f:de:a0:5d:60:88:6a:ae:70:f6:a4:d7:c1:99:96:e5:
dc:5f:1a:9b:88:9a:05:dd:ca:d3:1f:10:6c:60:69:65:2f:38:
ec:19:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:02 2025 by rpki-client