
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File: g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier: Io1JAPsShalJVEv6A9N1FVsYo2fl1xuozQvP1vBwcfw=
Subject key identifier: 75:FD:1D:80:FD:F2:94:46:A1:D0:A7:33:E7:AF:77:99:85:E5:F0:94
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 0194BC04BC080BA98838FA6774A181D4A361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: WQyaf/vKXAm2MpB7m20GtcYBlTnX1tqCRl4R2kkNaBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bc:08:0b:a9:88:38:fa:67:74:a1:81:d4:a3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=75fd1d80fdf29446a1d0a733e7af779985e5f094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:3c:9c:8f:ea:21:7b:71:ae:42:de:b1:84:
99:e8:3d:0c:31:d3:a8:a5:f7:53:2d:eb:28:5a:aa:
bb:a2:0d:05:0c:e9:9a:92:17:8f:fe:30:a1:e2:80:
a1:8f:71:ee:ea:cf:b3:18:4e:7d:2d:86:43:81:d7:
94:e4:ae:1a:af:89:ee:54:53:4f:db:50:d4:53:85:
20:4f:92:c2:c8:ef:16:ec:7d:29:31:f8:f9:d9:b8:
4e:7b:13:30:a6:6a:d5:4c:24:e7:fa:33:cc:a8:8b:
f3:30:bd:9c:ea:bc:d9:43:50:b5:a2:bf:9e:7b:5c:
ec:9d:b2:29:5a:85:6f:9d:b7:eb:4f:51:0f:11:46:
bb:dd:11:c4:f0:26:ca:9c:d2:86:86:a9:ec:39:e3:
d7:84:ee:d9:5f:d6:22:93:1f:96:a7:79:ed:d4:d3:
fd:6a:54:12:1d:3e:19:56:5c:40:b6:4c:37:1e:6a:
ce:ac:1a:61:e1:27:3b:9b:06:e7:25:ca:c7:d7:4d:
77:7f:f1:57:d7:2f:67:e7:f4:5f:c7:1b:9b:4c:49:
d9:3f:bf:8c:03:32:14:59:ff:0f:55:6f:fa:fe:02:
c5:b0:9a:8a:9f:f2:8d:6e:2a:32:ae:af:bb:a3:e4:
ae:47:78:1c:ee:9b:90:0b:7e:39:ac:5e:68:19:9c:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:1D:80:FD:F2:94:46:A1:D0:A7:33:E7:AF:77:99:85:E5:F0:94
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c0:28:b7:72:f7:d3:b1:79:8c:71:6a:76:00:bc:73:c9:6f:
60:ed:f8:a0:17:82:03:7f:80:66:76:4f:fd:cc:b8:2f:ba:d0:
9d:0d:75:19:e0:40:3a:66:f2:a0:f2:07:b4:d5:ad:c1:a5:bd:
dc:5e:65:d2:ad:0f:aa:db:31:9e:4c:c1:02:89:4d:7f:34:d1:
27:11:c8:3f:6d:e7:70:77:d5:8d:ad:cc:3d:df:ed:4c:76:6e:
3a:1c:e6:8c:6b:16:ce:d0:af:94:16:2b:ae:44:b8:71:19:3e:
1d:e5:b1:d5:ed:28:78:ec:88:cd:21:e6:7f:37:b2:cb:be:b8:
d6:13:1f:d9:b2:14:f2:44:7f:b6:d0:d3:13:6b:52:2a:8b:76:
9b:01:05:57:d2:2c:4f:03:80:6a:9a:5e:42:ab:4b:3c:6c:49:
29:fb:0d:d0:47:1c:4e:7a:9a:21:ba:35:c0:49:a7:1a:a3:26:
83:10:1e:2c:a6:5b:c9:4b:fb:19:51:b8:cb:3c:c4:db:e2:70:
76:4d:3e:b2:b8:b5:9a:b9:d3:04:f6:ac:fd:be:87:a1:e5:5c:
00:dd:c6:64:e0:06:06:f4:46:b6:90:bd:9b:15:08:31:1c:2f:
e9:3d:b0:b9:d5:72:b5:9e:ed:7e:91:a7:b7:f9:f7:47:7e:f1:
c6:53:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:43 2025 by rpki-client