Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: wWYz6LzPEQQhDRHVirf1WAgxKy8g7Cy5v4bTgAWmmrs=
Subject key identifier: 62:DB:6C:7A:82:C4:A3:2A:F2:E2:BB:7D:95:7D:7B:3C:12:0F:B6:90
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 0194BC3BF6DE35F1AAB78BF002D9AB7EDEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0D43
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: KxiFdRGtnYZ9nydgE4gY8h9GcGBe0Tk/Uur9ZRdD4aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f6:de:35:f1:aa:b7:8b:f0:02:d9:ab:7e:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=62db6c7a82c4a32af2e2bb7d957d7b3c120fb690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:f0:e2:0d:ce:0b:49:bd:8c:c3:c9:97:48:
61:b0:ea:2d:22:23:e6:48:63:56:06:3f:55:90:91:
39:d0:4a:a7:b5:ea:ed:4f:55:cc:67:17:ba:3f:e8:
f5:f2:0d:36:e1:f6:a4:25:d6:7b:53:ae:fa:83:a7:
d1:3b:02:7b:b4:18:8c:9a:cf:b5:55:08:27:0e:96:
f3:9c:e7:89:50:b2:64:e4:35:8d:fb:02:b9:41:93:
14:96:cd:d6:38:e4:a2:c2:ea:d0:59:2d:45:0f:66:
2b:27:f9:b0:77:7e:23:07:1e:bc:01:86:bd:3d:44:
62:96:34:bd:49:66:37:d8:67:4d:89:30:8a:ea:d8:
d8:30:9a:f4:01:c3:5f:d8:0a:fd:e6:78:54:67:17:
6e:29:9c:7e:67:83:74:87:e8:0b:43:ec:69:10:b2:
1f:c7:18:b4:ac:a6:30:bc:54:6d:f9:ca:d4:bb:01:
0c:dd:21:7b:b7:9c:ef:86:28:f5:4e:7a:4b:3b:01:
af:f4:48:84:1a:27:af:30:92:36:91:f9:f7:ad:05:
4b:74:80:c7:c7:eb:58:51:f5:49:5e:f1:8e:8f:91:
fe:dd:87:7e:62:74:12:c6:c3:a1:20:8e:54:41:24:
45:b3:2a:a4:98:07:bb:70:e2:92:35:93:b2:01:70:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DB:6C:7A:82:C4:A3:2A:F2:E2:BB:7D:95:7D:7B:3C:12:0F:B6:90
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:f3:be:df:fd:e1:51:5b:65:e1:3a:fb:d4:bd:26:71:71:
a5:f6:d1:68:7c:b2:cc:28:27:d4:c5:15:ed:28:98:5f:5b:a7:
25:1c:3a:72:27:20:be:46:1f:c2:4e:fc:36:e9:c3:a1:c1:6f:
8a:c1:39:df:67:ca:f8:12:7d:bb:65:d7:d3:08:d3:72:5e:f6:
96:a6:f5:2c:2a:48:df:f3:2f:95:22:76:6f:8d:fe:cb:a8:4e:
d4:93:98:3f:ed:e0:62:ea:ba:5d:42:2a:b8:5c:76:c7:31:b5:
b3:c4:16:aa:0d:7f:51:af:4c:0c:01:7c:73:1b:33:3e:af:a8:
06:d7:39:1b:a2:29:99:eb:c3:1a:6b:73:92:80:ad:d7:4c:31:
30:5c:09:e9:97:d0:83:b5:f9:94:ee:d5:2f:9b:93:fa:49:bc:
97:be:c0:9a:a5:c4:ca:e6:b4:fb:82:03:c7:ba:dd:bc:83:40:
04:1f:1a:7b:29:aa:ce:67:fe:3d:07:7e:af:16:89:e6:fc:04:
e1:db:0d:4f:66:f3:e4:3b:48:16:8d:61:75:48:39:9d:60:54:
af:43:97:e1:7a:08:11:9f:a6:57:b8:d4:e3:9e:08:34:11:1c:
33:11:4b:6c:3c:ba:8b:5b:c9:a7:6f:42:bf:66:38:33:86:d4:
a2:39:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:54 2025 by rpki-client