Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: 4CLJaHj3g4V+7uRyI/btweqqgLyir39i/jonYXrJu38=
Subject key identifier: F8:FB:94:F4:C5:53:BF:19:79:F1:01:63:38:04:44:2F:4D:DB:29:09
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 0194BD8556E67BC651E6036D996911DDB4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: qOubkUqOIJIBdeI6uKlw3PxigBEqQgaS6lJHh5fF/5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:e6:7b:c6:51:e6:03:6d:99:69:11:dd:b4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=f8fb94f4c553bf1979f101633804442f4ddb2909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:98:15:f0:b5:19:f6:07:96:0a:b5:25:25:
95:61:5f:92:66:ff:89:d0:e8:85:da:4d:a4:ad:65:
ba:33:44:48:ac:b5:43:3a:e8:e7:ba:4c:e3:7a:9b:
b1:4b:ea:93:f4:c6:f3:37:4c:2e:97:58:6c:57:a8:
99:ef:1f:a9:f4:86:c5:ce:ea:37:30:33:9f:d6:fb:
06:c1:0f:74:6c:3f:12:38:61:9f:03:d8:98:24:b6:
0c:09:37:93:4e:52:e1:cc:ac:5f:6b:7f:b7:4b:14:
4f:45:72:c4:ff:51:79:57:15:1e:79:24:c8:97:00:
cc:b6:32:18:d3:8c:6a:ae:ab:98:f6:82:18:b1:81:
5b:2e:5e:34:e1:91:1f:f6:14:a6:1f:3b:fa:d0:9c:
1b:64:c7:2b:59:c5:4e:76:4e:b9:35:d5:d4:da:86:
02:c6:21:4b:f5:f6:9b:92:fe:03:8c:63:7c:21:d1:
cc:bd:c8:9b:55:59:f8:f1:91:64:63:bd:5f:b9:6e:
11:f2:3e:fe:2b:f9:ac:f7:e4:80:af:36:af:72:48:
17:7f:4b:b6:3b:d1:49:d7:f5:8c:d5:4c:e8:76:89:
65:b1:b8:8e:de:e2:c9:30:b6:ba:98:83:25:09:ed:
61:dc:28:6f:74:c5:09:b4:0f:08:1f:38:ce:48:56:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:94:F4:C5:53:BF:19:79:F1:01:63:38:04:44:2F:4D:DB:29:09
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ef:a0:d4:f2:11:5e:a8:ae:99:9e:87:e8:45:2b:b0:e9:9c:
20:07:b9:aa:9f:85:92:30:16:7c:c9:54:d3:0d:6a:b8:1a:87:
ed:0e:3d:46:7a:ca:46:ba:64:5c:32:93:a3:54:84:31:00:a9:
bb:43:9b:a4:95:76:62:c9:73:73:8e:22:51:df:fd:58:28:8f:
c7:09:2f:14:ba:3b:ab:9e:e4:06:85:47:01:60:02:b4:f0:3b:
30:de:a0:01:a1:79:ff:10:59:fb:c3:24:55:a9:5b:1f:69:a7:
51:71:f9:2e:11:a8:ad:ec:d7:89:63:44:aa:f3:fd:e7:4f:6a:
77:8e:a5:f6:44:5a:72:2a:28:a5:11:b8:07:c0:b1:be:3f:2f:
f1:35:6d:bd:0e:59:18:db:e9:2d:bc:b2:b2:55:06:fa:ce:ed:
fd:e9:03:db:45:42:ae:b0:e9:6c:3b:18:9a:51:40:85:e8:45:
6f:c9:d2:c5:e6:d2:92:f3:33:92:2e:6e:6a:27:2b:a3:f3:0d:
ab:3f:12:e4:80:99:e0:27:9d:53:72:3d:af:42:8e:88:7a:f9:
12:dc:d8:2d:ff:3e:5c:fb:ff:d5:c8:16:9a:ef:34:42:0d:36:
da:15:26:53:bf:af:7a:e4:55:c0:4d:9f:fe:44:4f:df:9c:fb:
8c:dc:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:58:40 2025 by rpki-client