Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
File: goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json)
Hash identifier: tmi1jAJluuNUrCSb1W67HiSACwS1qH3TOmmUZnLB3to=
Subject key identifier: A7:AF:33:AE:66:5F:52:5D:94:E6:19:F3:E1:C4:18:B3:EA:0E:FE:0D
Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
Certificate issuer: /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Certificate serial: 0194BCE07543E7E05C51D2257671ABD2A2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: f-v99B7kzDMwcYPXZ1yHUB7PuHk.roa (hash: PLEFeVBVmPy00pfwBVn43bz19/5DH4Ktxjb7rCdDKxc=)
2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: fRXwwsmsnHFn8GD6jRqxwzcXOEu/7d4CF7hmmVnLAdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:43:e7:e0:5c:51:d2:25:76:71:ab:d2:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=a7af33ae665f525d94e619f3e1c418b3ea0efe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:ab:22:99:9f:a3:90:85:c7:d6:af:a6:de:
21:93:df:3c:59:81:43:32:9f:6b:22:94:b5:ac:22:
22:7d:6c:9b:1c:4f:4b:4e:10:5c:52:47:d6:66:51:
79:b2:47:bf:6b:b2:27:78:71:a1:8a:51:ca:99:45:
f3:0e:12:06:0b:07:bb:32:c5:e9:66:b8:87:13:c4:
38:ec:ca:92:6c:b1:7e:a6:a7:2d:82:ae:1f:fd:38:
3a:f5:24:8b:05:bd:fc:43:64:9a:40:8a:64:ae:1d:
91:ee:89:3a:4a:ae:9b:0d:aa:47:61:dd:4e:ea:45:
bf:76:7b:a5:ae:b9:a1:96:ef:f9:10:89:36:d2:24:
66:91:7b:9e:82:59:3e:eb:5a:c3:04:bf:59:c2:2a:
3e:18:05:04:1f:0b:1b:bf:d6:23:39:fe:76:51:5a:
18:9f:00:33:96:4b:80:05:3a:76:b6:5b:52:a9:45:
5f:f1:21:f4:c4:13:c4:9c:ce:a9:36:ed:6f:48:1f:
9e:c5:c8:17:c1:69:76:c9:2b:8a:52:c8:10:7d:07:
a3:79:54:6a:19:79:1e:df:d4:70:71:07:9c:1a:af:
f1:58:59:3f:d6:74:a7:72:c8:44:64:18:c5:b9:a6:
11:dd:05:eb:b6:02:87:86:a3:64:86:24:ab:0c:53:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:33:AE:66:5F:52:5D:94:E6:19:F3:E1:C4:18:B3:EA:0E:FE:0D
X509v3 Authority Key Identifier:
keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:af:f6:29:0d:a4:4c:ab:da:94:ac:fd:47:26:5b:ad:d6:8d:
1b:91:22:77:8f:22:83:50:a6:41:b9:83:9a:c0:35:49:17:3b:
64:ce:09:9b:7c:45:0c:d5:07:28:1b:b9:15:a8:4b:22:28:54:
8f:cf:a9:3d:f3:aa:b5:17:c5:7d:3c:ae:d1:66:76:44:cf:87:
fe:ae:e2:62:fd:bb:9f:25:d9:63:2c:da:76:fb:71:fd:78:15:
2b:f3:f0:a1:ff:1d:23:82:df:81:74:58:4d:17:7e:37:94:21:
5d:54:f8:d5:53:7a:bf:f3:ec:a8:06:fe:e2:19:01:ab:db:07:
58:b1:2e:dc:9b:40:a5:b2:af:89:03:d8:66:82:16:ae:1b:b1:
7a:8c:7f:71:aa:47:cf:08:5e:c8:2d:20:f4:a4:81:71:b1:d6:
d8:54:3a:23:68:42:f8:29:1d:23:54:88:eb:64:4e:af:8a:fc:
4d:16:31:80:ca:dc:f3:95:68:58:ac:4d:c4:1a:61:e5:95:1b:
27:bb:0c:0f:1d:da:19:0e:b1:5f:c8:31:df:40:59:c6:82:67:
de:f3:7d:d7:66:22:b2:e7:d9:51:c1:f4:ea:91:dc:e3:a2:7b:
a8:36:72:ea:a2:1b:e3:d9:5e:99:36:57:7c:a1:48:a2:c9:16:
d6:b7:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:31 2025 by rpki-client