Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: +mwUCA30OhLlGMq222aWhNaNkSZQVmX3zgIpMuBWEEE=
Subject key identifier: DA:27:E5:35:22:84:22:B6:21:25:97:9B:A7:84:DA:B4:19:3F:69:66
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 0194BC3BD481C19E7AE1A96B212A7DC7737B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: gThiVMzI_emmGwG6yDvtK9WGkHc.roa (hash: FwvhQ80j7caNFhnzLvqCK7umTsHEt/iQVSc1TL6IsHk=)
2: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: 8NgmdQjn8w1/4XxV33uySY6TnTPaYm4HjjGfqMHvVr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:81:c1:9e:7a:e1:a9:6b:21:2a:7d:c7:73:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=da27e535228422b62125979ba784dab4193f6966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:e2:76:5e:a4:02:59:80:ac:d1:db:06:12:
a4:ef:a9:40:6c:e8:59:74:7e:f8:03:5e:33:a5:48:
d3:2b:b5:ab:77:63:32:47:b6:0b:20:73:78:a3:78:
34:1e:81:f7:7f:74:60:15:be:85:fe:f3:57:d1:14:
e6:37:46:8b:cd:b5:7f:a5:11:82:15:47:11:d7:11:
e4:50:02:f7:81:88:fc:a3:17:69:e0:f1:73:30:41:
bf:7d:ff:b6:ed:4f:e3:5f:ff:3b:02:48:e6:b8:66:
20:66:26:b2:64:54:36:f9:67:aa:d4:c9:dd:8c:66:
a6:47:7b:51:98:b2:7a:22:9a:a6:cc:f0:f7:a6:51:
e0:70:18:24:4f:09:10:f3:80:78:ec:75:8e:0e:3d:
73:37:00:7e:ea:17:32:e5:c7:ec:df:dd:85:d7:01:
f5:f8:8d:2b:67:67:2e:07:59:44:62:66:4c:f0:72:
ff:a0:aa:60:52:62:f4:56:06:21:e8:25:e7:60:b5:
8c:58:64:f6:2c:51:4a:99:06:c6:27:87:e2:e5:fc:
3f:5e:86:e8:7c:98:0c:92:18:d8:23:d5:a7:b8:05:
30:7f:f5:bd:1e:69:8b:fa:ab:24:11:30:d4:d7:b2:
12:75:d6:03:45:f7:1d:93:93:ed:65:bf:1e:97:47:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:E5:35:22:84:22:B6:21:25:97:9B:A7:84:DA:B4:19:3F:69:66
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:24:8b:1d:80:ea:f2:e3:04:27:b2:de:47:85:ce:4f:9d:9e:
07:99:de:68:71:c8:f5:ca:b9:02:97:c4:00:14:18:53:4d:4c:
a3:14:16:c5:dd:19:1d:cf:c1:d2:5c:3b:76:32:33:be:1a:bb:
ab:f6:44:43:05:b9:78:c6:18:6b:eb:5d:89:eb:f9:7a:7f:16:
fb:c7:68:4b:14:32:32:3d:9e:ad:43:20:20:fb:e6:36:6d:97:
57:d8:3a:78:30:83:a9:f3:58:39:82:30:78:e7:40:82:8a:e0:
34:04:2a:8a:f1:80:8e:54:8b:42:e8:de:15:c8:e8:90:6d:ae:
26:86:e2:68:3b:a4:d0:79:34:a7:41:d8:59:dc:5a:2f:19:ba:
73:58:7b:db:e3:6b:c4:f7:d8:9f:8e:08:d1:7c:a9:a9:0a:07:
55:d2:41:c6:85:f1:12:28:b3:82:5a:88:99:c9:bb:24:9b:f3:
a0:80:09:bf:1f:bd:68:c6:5f:90:48:bf:cc:67:7f:d8:02:36:
04:d2:c0:d7:25:09:7a:e5:23:b6:65:aa:34:83:25:fc:31:ef:
66:bc:c2:1a:8a:e4:a6:59:6e:8e:7e:4b:9a:f1:1f:d0:ec:32:
60:8c:85:e9:fe:26:2a:91:40:b0:a1:f7:96:8a:b9:07:0e:3e:
e6:56:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client