Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: +sLoRne+V/+K2M1hl5cCno7vu3whSuXEXpqsGT4pLkM=
Subject key identifier: 73:36:B6:26:C3:AA:D2:63:7C:ED:65:5A:AC:8F:05:94:64:7B:58:8E
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 0194BC72AE08CF2F9CFCC9FF68438001340F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: zz3KmjtJJlc2jxn49Jn4vQ9tUYD7FjpbEGHX6kHhIOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:08:cf:2f:9c:fc:c9:ff:68:43:80:01:34:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=7336b626c3aad2637ced655aac8f0594647b588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:7d:21:59:4d:65:62:7f:8c:12:0c:3b:b4:
02:aa:17:74:81:f6:4c:30:4b:54:5e:b6:36:81:22:
ab:99:48:13:ef:70:d3:6a:86:32:8d:82:9f:55:71:
ce:ea:12:a1:78:8f:07:d7:5b:29:be:b6:5b:3e:c3:
a9:da:a6:09:77:59:80:4e:f8:b1:f8:b9:96:0c:07:
03:8d:49:8b:6c:f8:38:ab:e2:5e:af:b1:7b:5d:0a:
9c:b1:d1:09:00:27:18:b7:26:41:ee:42:91:d4:94:
ae:af:5c:31:9f:66:98:a6:ad:f3:27:bc:d9:64:76:
59:31:8f:aa:c3:bb:cb:cb:22:59:9b:72:0f:f5:0c:
49:2c:ae:d8:8c:48:40:e9:f3:c5:29:c0:e8:7b:ca:
71:aa:28:7d:15:4b:c0:f9:ba:57:13:0d:62:9c:e3:
7e:90:26:47:0f:49:70:91:d7:34:28:df:53:0c:37:
a9:f0:86:89:1f:24:66:5a:d3:f8:a4:c6:ab:17:b9:
2b:4c:ad:af:fd:cc:47:55:89:e2:f5:e3:4a:25:d7:
e3:f0:73:38:3c:75:78:28:99:47:bb:09:d9:e4:9d:
e0:79:80:a5:55:3a:cd:a0:21:8a:14:d9:50:c2:db:
30:f1:6d:57:d4:f1:a8:bf:ab:f8:0b:5b:db:56:75:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:B6:26:C3:AA:D2:63:7C:ED:65:5A:AC:8F:05:94:64:7B:58:8E
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3c:94:2f:ce:a6:11:52:b2:6c:91:8b:fb:17:63:fc:43:5f:
99:3f:91:a3:f7:46:b1:e6:6b:96:8d:69:35:0e:bb:2e:09:3b:
30:20:9c:29:38:3a:95:1c:16:53:d3:c8:25:de:93:5d:6c:40:
e4:66:ed:0a:74:8d:c3:7f:3c:69:a5:51:78:24:d9:d8:87:09:
b5:20:fe:22:2c:a7:81:e1:d8:1b:90:52:08:2f:e5:a8:b9:7c:
70:f6:b7:a7:7f:1f:18:f0:62:26:4d:5e:6b:25:57:fe:db:6a:
5b:16:1d:b0:ca:87:89:eb:03:ef:90:10:c3:dd:76:e7:3c:ab:
96:a0:b7:74:48:5e:90:42:dc:ca:a4:38:0f:d2:35:f4:90:67:
05:97:2e:38:ed:25:f1:e1:53:82:20:3f:25:d7:9e:73:da:2f:
d2:4d:48:a5:99:ce:b8:45:ae:49:de:53:1c:00:1f:17:9f:95:
04:1c:0f:07:03:b7:08:0e:60:d1:ac:e6:81:b8:f7:ae:97:17:
ae:4c:66:05:ee:a1:18:75:58:31:59:b4:a4:cf:3f:2c:78:b6:
4d:46:11:a0:e5:e5:62:f6:64:41:75:43:31:ac:dc:db:d4:b4:
22:49:fd:20:73:f0:45:2f:06:8e:f6:6b:72:68:e5:c1:ce:fe:
cc:76:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:38 2025 by rpki-client