Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: C4VpPKaKGQCFDdxHn0ifMpS+nG9s9zkS+Slt6Bc4l6M=
Subject key identifier: F9:E9:E7:9B:A3:1E:5E:AD:10:D8:75:05:E7:70:36:FA:E7:8A:A5:99
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 0194BBCDE51DCB8274357F6DE98ABBA5CC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: HckIWldHWwqX0CJ7X-XU88JAoY8.roa (hash: 0kYehz1g3idStzqPQ6DNbC0IwoRnTc8QtqRoQ8JJZs8=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: Qg55aAwHvkAQAXy252Y5oheqwf0gxoU01/np3N4pIB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:1d:cb:82:74:35:7f:6d:e9:8a:bb:a5:cc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=f9e9e79ba31e5ead10d87505e77036fae78aa599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:51:57:b8:26:14:51:57:0f:6c:f9:fa:2e:
7c:aa:6c:9a:3f:9f:5b:d5:89:e5:e7:2d:cf:38:8d:
d1:96:fe:c7:98:d2:b8:d6:dc:95:29:da:bc:56:f1:
8a:f4:5f:bf:8f:b5:67:3d:6e:55:b3:c8:b6:bf:59:
89:92:d1:9e:3e:78:04:b6:59:fc:54:c6:cd:d2:52:
30:89:29:29:ab:5d:36:cb:03:e2:ef:69:60:a3:61:
bc:41:87:a3:2c:db:94:68:79:eb:3d:15:fc:79:7a:
06:33:17:6d:af:be:bc:4c:c8:31:7f:60:8a:57:a2:
33:3c:db:e2:8c:95:ea:95:ee:ec:43:c0:b5:3b:8e:
cb:16:e9:12:de:1e:45:e6:dc:04:80:9f:28:df:ae:
ea:d4:75:b9:89:c2:9d:4a:dc:43:2b:cd:fe:1f:ef:
a6:f8:fe:a0:df:37:4a:83:74:e6:77:5e:6e:dd:98:
fa:fd:6f:b6:43:15:61:27:f5:5d:27:3a:4e:30:0d:
6e:77:18:33:69:3b:09:18:5e:23:1b:b7:06:0a:03:
ce:e4:9a:47:cf:74:4b:75:e7:1b:d9:e9:3f:e9:7d:
63:73:a0:e3:b2:51:f8:b6:2b:f6:77:15:e3:c4:f6:
04:a7:fd:04:41:d9:16:47:1a:c0:42:62:bb:d5:05:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:E7:9B:A3:1E:5E:AD:10:D8:75:05:E7:70:36:FA:E7:8A:A5:99
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a8:8e:c9:c6:9e:cd:61:aa:cf:5d:fa:5a:7f:d4:22:a1:2b:
df:e3:8c:cf:68:8e:b9:0c:a0:83:b8:a3:ba:7f:11:81:d2:93:
f3:48:24:8b:2e:c4:37:30:3a:b1:ee:c1:97:be:f2:da:f5:ad:
ce:31:1c:cc:41:25:cb:cf:05:ae:5a:02:b1:83:61:82:05:e2:
0f:21:df:05:61:ee:f9:cc:fe:54:a6:4a:bc:b0:f1:ab:a7:3a:
50:52:b5:39:99:c4:6a:2f:19:45:38:b3:73:8f:11:a1:8a:6e:
70:5f:fb:04:c7:9f:ef:a7:59:3a:3d:1d:fd:1d:a9:ba:00:81:
58:03:1c:8e:7b:01:e7:6c:16:c8:58:19:66:07:6a:ed:8e:c1:
0a:fb:5b:1a:46:b3:f0:5e:96:8d:8f:0a:4a:67:71:ff:fb:29:
53:85:8a:e3:08:93:ec:d3:7c:45:cb:9a:f2:61:a1:d1:e0:a1:
05:b6:0b:60:12:a2:82:f2:fb:cc:8c:91:2c:e9:7a:62:ed:7f:
f4:6d:bc:15:af:ab:60:6c:51:db:4d:77:d6:46:91:5b:4c:64:
e4:ff:de:97:f8:18:90:89:c0:ae:a0:ba:1e:a8:a6:50:a8:3f:
66:c5:ed:98:6b:0a:79:2f:b2:41:95:89:9a:f4:cd:84:80:a9:
f6:2e:96:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:29 2025 by rpki-client