Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier: qKXPy2vRpnPmPNjDljZ7OJZDt2vqrp9+hwTxcWXS71Q=
Subject key identifier: 9F:A1:59:68:43:74:D5:9C:FF:C7:F2:AB:D4:F9:A7:56:77:74:AB:AD
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer: /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial: 0194BC051B908FB20D18B12BAFFB2867D55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: FWcnzCMLl3lFNDdiAAKGYKxYK9uRCr/q0dZOYnE5UvE=)
2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1b:90:8f:b2:0d:18:b1:2b:af:fb:28:67:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=9fa159684374d59cffc7f2abd4f9a7567774abad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:4a:90:18:5d:5c:62:84:e8:5f:15:46:c0:
69:9c:42:b4:28:d6:9a:de:d8:4c:db:a2:0f:02:da:
3a:8f:f9:65:55:a2:9f:5d:2e:56:ec:31:88:7c:fd:
93:49:ff:1e:13:a8:6a:cd:26:6e:27:86:84:bf:39:
3e:f6:bf:e7:fc:f1:40:f9:51:11:09:bb:9e:ce:64:
cb:7b:f6:7b:25:03:a6:a0:71:15:07:86:5e:87:f7:
2d:d6:c9:c3:eb:d4:e7:cb:27:b2:0d:2a:7d:3c:c2:
39:d1:65:f4:5c:43:58:b5:9e:97:3b:00:4c:77:fa:
80:f4:7b:3e:24:bf:1a:8f:e3:d1:c9:0c:2f:23:85:
41:32:04:26:9c:33:96:dd:eb:39:a8:01:64:07:b7:
99:df:95:a7:61:9c:8d:01:20:9d:2f:03:a4:3b:26:
ea:a3:8c:22:e5:02:21:6f:5d:6e:d4:af:93:8a:80:
71:56:af:a7:28:00:83:f5:1d:b2:cf:65:f2:a9:09:
c2:d1:82:ef:46:7d:b2:35:82:36:31:9d:8a:51:86:
e1:66:8a:0c:62:e3:d7:12:71:25:61:3e:72:a5:53:
b8:77:92:c5:33:13:59:04:4d:42:6c:69:b7:db:f4:
34:6d:0e:35:88:06:4a:d0:9f:0d:0e:77:45:22:ed:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:59:68:43:74:D5:9C:FF:C7:F2:AB:D4:F9:A7:56:77:74:AB:AD
X509v3 Authority Key Identifier:
keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e0:fe:bb:14:f5:ae:7c:29:b0:0a:c5:e2:5e:05:6c:a9:53:
55:cb:1e:a6:1c:aa:34:1a:61:d1:c3:10:d0:c0:9f:9c:f8:f2:
31:65:39:5f:bf:28:a5:27:8d:ef:c8:23:ea:6d:22:ea:6c:17:
f1:eb:46:09:07:b8:6b:f7:8d:de:1e:be:29:d4:57:d8:65:98:
6d:b4:2f:19:cf:bc:a5:7d:74:4b:fa:77:58:e3:12:2b:c2:05:
1d:ec:a4:ba:84:58:f5:66:f8:24:28:05:2f:84:0e:a1:06:98:
a2:ca:28:a1:67:0b:71:d8:6f:06:e0:f5:39:05:70:1c:f1:7b:
dd:c0:32:78:56:c1:52:77:b6:89:8a:6b:f5:e9:74:2d:d0:13:
87:1b:aa:30:2e:c6:fe:bd:05:8d:fc:72:73:41:ab:4b:2b:1f:
35:42:b0:f3:9f:f0:1a:4e:f3:b2:ea:97:74:f9:c3:46:aa:87:
1e:90:48:d2:cd:28:e1:e8:c5:a2:91:3f:c6:dd:80:0a:29:3a:
87:92:1a:ff:57:38:30:ca:34:6d:0e:e2:87:a9:92:e2:74:2f:
52:46:ec:85:df:4c:00:d8:e6:5b:8b:02:88:3f:30:c6:f2:4e:
73:f4:b5:70:41:a8:ab:9e:07:64:26:81:9a:0a:ec:73:a9:74:
08:d0:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:32 2025 by rpki-client