Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier: A9WO24/+kKE3H1nwCeWyR5zlatKaNcDEcXvpE+mgQJ4=
Subject key identifier: BF:D9:43:60:5F:FF:B9:C2:9B:29:E4:DE:9A:F7:6C:2D:55:B8:88:E3
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer: /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial: 0194BD85A1747037FBB525BE9BDC9F57527C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number: 0F70
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa (hash: Bt4aDKGWyvEeRSoxrjAjHWSOknnKJY9L9kMvMSuInRo=)
2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: gCOi7zWCLThZr305Y+K7aBcwchIJ2qXB//Sw01neXcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a1:74:70:37:fb:b5:25:be:9b:dc:9f:57:52:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=bfd943605fffb9c29b29e4de9af76c2d55b888e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:eb:93:5e:9c:d5:b7:51:96:0d:12:8e:9e:
8e:72:4e:65:0d:9c:ea:22:4c:07:76:82:a2:ca:9a:
c7:0e:8e:9c:83:c5:29:f6:22:28:5f:8e:09:84:00:
4a:80:1b:54:10:12:77:fa:8a:c9:9d:53:ad:19:f4:
98:6e:e6:7f:ef:cb:e0:1f:70:70:ab:f8:58:70:26:
40:a0:54:4f:0f:49:69:d3:fd:ac:f9:66:66:bb:5a:
82:07:2d:a3:4a:46:ed:e3:05:9c:13:9a:04:d9:e5:
e9:35:84:91:91:69:ad:b6:e7:04:5d:f5:f5:c8:cc:
ea:73:b7:21:4e:b0:a2:ef:c6:22:d9:f4:9c:4e:be:
bb:23:3a:74:5b:71:de:7f:0f:6e:00:aa:c3:0d:47:
73:85:54:3c:24:e0:40:7b:7e:d2:f3:6d:d6:3e:68:
d2:28:e4:c4:7f:dd:4e:c6:7a:43:75:ef:10:e7:a3:
cd:f5:b8:87:95:55:9d:7b:bf:34:5a:02:a6:77:47:
2b:4f:34:e9:c4:41:e8:73:ae:a8:69:3b:95:9f:c0:
c3:f9:55:4f:3d:c5:fd:ab:f1:5d:d9:a2:e7:52:d1:
00:47:f3:4f:66:5a:87:75:de:8a:13:0f:e4:01:56:
62:0e:14:b9:e7:71:27:73:24:ec:f1:48:05:95:05:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:43:60:5F:FF:B9:C2:9B:29:E4:DE:9A:F7:6C:2D:55:B8:88:E3
X509v3 Authority Key Identifier:
keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6d:39:75:98:b2:ea:37:ab:e4:f8:d9:d4:33:36:fb:e4:c9:
66:6e:7d:7d:bd:7f:04:40:7d:45:87:3e:3d:65:07:ed:c3:28:
2e:2b:d7:71:dc:9c:8d:1e:ce:b7:6a:a2:50:d3:e8:46:b3:23:
e8:77:8f:f3:57:b1:1b:2f:f5:98:66:5c:50:75:8f:f3:46:0c:
54:c3:23:be:35:52:8c:5c:cc:d4:58:92:d5:ca:41:56:92:61:
a6:cb:1c:f6:5d:8a:45:de:6a:bd:36:b7:30:29:a1:bf:9f:c4:
04:5c:de:da:3b:7a:69:f3:42:f0:44:4a:9f:5e:0a:c8:3e:cb:
6e:fc:12:b1:20:16:72:af:0c:93:2c:2e:b8:38:e5:26:f5:4c:
33:8c:85:a0:fe:0e:05:01:27:82:e1:a0:4f:2e:36:a4:e9:14:
0e:fd:c8:98:13:c2:0a:dc:17:c8:47:1b:bd:0b:9b:40:a4:fd:
96:1e:20:96:10:03:c8:e1:14:56:57:0b:d6:3d:9f:a7:50:a8:
f7:c0:91:ec:e4:82:6e:70:0e:c6:4c:ef:8a:3f:77:73:ca:05:
62:29:38:26:38:ab:40:78:c5:19:91:0a:52:ca:ba:9b:8a:33:
f1:c7:7b:5f:99:81:52:21:bc:0f:0b:71:a5:43:ab:36:23:e6:
58:0c:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:15:09 2025 by rpki-client