Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: HJgTKq06A6WJ3dzZspBrX8rNi9mfstvMyosTc+ccYjo=
Subject key identifier: 8F:34:7D:50:4C:B0:2D:60:51:88:03:B3:D1:E4:B6:EA:EB:02:E6:CA
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 0194BC72E5E0F06FADF8B28CF875E498E9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: y+gSG9RYpk6xbuazL+Gcdoi0DAZ0oV9EFx7hmkxGPfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:e0:f0:6f:ad:f8:b2:8c:f8:75:e4:98:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=8f347d504cb02d60518803b3d1e4b6eaeb02e6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:fd:ad:c0:f5:0c:a3:da:ec:d2:0d:e4:9c:
b2:07:09:13:fa:e8:34:9b:ea:01:8c:78:1c:10:95:
70:c3:36:27:5d:cc:2d:64:9c:e1:3e:eb:fe:20:56:
45:13:80:b1:2f:d0:72:4d:57:da:6e:df:3b:f6:ec:
50:26:f0:5c:e9:ef:a6:90:f0:06:41:66:1f:4f:59:
8a:7a:eb:8f:99:78:49:22:f1:11:62:53:f0:36:30:
2a:2f:0d:d8:9a:5f:45:57:82:0c:3e:c1:db:a3:f8:
38:ef:2b:09:f6:75:56:dd:77:41:4c:93:5b:ed:15:
83:3d:02:59:b8:f2:b6:7a:a9:86:c8:ad:fc:bc:a7:
d9:74:76:b4:6b:23:b3:75:c5:3a:7f:d2:3c:fe:28:
8a:7c:a7:1e:97:b8:db:d7:1f:cc:a1:86:57:1d:52:
7e:e7:f1:78:25:bd:9c:a9:43:cc:c3:05:d1:36:f3:
28:02:f9:e7:f0:2f:ea:9b:4c:a9:d7:00:5e:b7:35:
83:49:36:40:99:17:de:06:98:5f:4b:e5:54:9f:9f:
f4:19:6d:d5:48:46:c7:5a:b6:44:47:34:7c:0d:94:
1f:6c:1c:84:d4:86:88:b5:84:6d:81:d4:9c:fe:76:
f0:ca:3a:2a:d4:ed:88:fd:fa:ef:ff:c0:6a:a1:e0:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:34:7D:50:4C:B0:2D:60:51:88:03:B3:D1:E4:B6:EA:EB:02:E6:CA
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d7:50:14:5f:15:cb:90:8f:0d:c4:fb:39:d2:07:48:1a:a3:
41:95:31:d4:9a:3c:49:a3:87:19:92:2a:d3:8a:d6:d4:fb:cf:
ff:cd:25:d0:3d:e5:ef:4e:93:db:55:ad:6e:24:5e:b0:4c:a0:
e8:49:ed:cf:1f:80:5e:6d:a0:19:19:91:e4:98:3a:0d:47:8d:
b7:c9:8d:a8:55:3c:84:e1:8b:a4:8b:06:21:56:f6:c5:5b:1d:
3a:33:da:b7:d6:ec:7d:df:df:61:14:7c:8b:5c:4b:d1:52:40:
e1:60:1d:3e:19:b6:8a:f5:2b:a7:aa:cf:03:c2:bf:99:a6:48:
f9:9c:89:7f:4f:c4:25:6a:1a:eb:02:e2:e3:00:cc:32:3e:80:
6d:a2:6f:08:92:c2:af:2b:f7:ef:6b:09:99:60:5f:3c:38:20:
da:c0:bb:b0:91:6d:99:d2:51:28:35:2f:7e:05:6e:a3:08:d5:
d5:00:b0:ae:fd:c2:8b:68:82:54:36:40:78:68:00:2b:95:70:
4d:21:10:5a:b4:8b:47:b1:e9:71:23:b9:3d:0c:fe:c6:17:a4:
4c:c9:7b:de:77:b1:c9:06:18:f8:9c:60:88:bc:26:8b:17:a9:
16:c6:af:1b:ec:c5:5f:be:d4:9e:f2:c4:0c:c8:4d:6a:c4:56:
0e:db:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:31 2025 by rpki-client