Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: W2bVXNJ9s69UfxSOXZm1OLdYBcCsNx85RxgpQv6JMqY=
Subject key identifier: 80:1A:4F:45:F0:D5:F2:17:2E:6C:08:21:31:FD:42:B5:9C:EA:E2:B9
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 0194BC72BB67460FAF3D0970823E024763A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0722
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: LaBocmClkzjTkNcUeVJHhKHKQgAASW3s+lYHkeK4D1U=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bb:67:46:0f:af:3d:09:70:82:3e:02:47:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=801a4f45f0d5f2172e6c082131fd42b59ceae2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:02:f5:9f:55:a7:53:bf:59:5b:c5:04:e7:
2f:39:dd:40:59:f3:e0:9f:ec:fe:5d:f3:6f:86:6b:
06:92:9e:42:4c:f6:0c:f9:ba:41:9a:79:71:40:34:
bf:80:a3:a5:1e:ea:b6:e2:a9:3d:c7:e5:d7:a7:38:
27:22:9b:20:3e:d7:39:a4:6a:41:8c:b5:12:79:de:
af:50:c3:f6:d2:5e:f8:95:b0:ca:5e:09:2d:3a:bb:
8a:ca:96:f0:a0:14:e1:e1:3c:ba:1e:66:c2:fb:49:
8d:26:9b:80:4c:b5:eb:d5:af:61:36:de:20:98:be:
2e:9b:b3:33:8e:c5:b6:9c:1f:d4:35:2c:13:ca:ca:
0b:44:a7:be:a6:e6:6e:db:10:bd:2e:ff:8a:17:05:
2b:17:33:74:8c:d6:bd:a5:ac:86:fb:e8:a4:7f:5c:
07:be:58:92:a3:dd:2e:6f:f9:8b:f4:c3:38:91:ad:
ec:cb:87:be:a4:cf:d3:33:6d:c3:5a:34:91:61:4c:
39:26:0d:64:08:9b:a6:2a:56:fb:45:8c:21:2c:02:
3b:2f:3a:59:bd:a0:15:71:1f:8c:1a:61:74:a6:31:
bc:1f:a4:ca:b4:5c:af:83:78:af:00:dd:3a:74:9b:
be:fd:03:22:fb:df:38:68:a8:d9:2a:0d:3a:7d:47:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:4F:45:F0:D5:F2:17:2E:6C:08:21:31:FD:42:B5:9C:EA:E2:B9
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:bd:0f:a6:00:f4:8d:37:77:db:7c:a1:86:33:1d:e9:93:
2f:cf:cb:3f:a8:8d:2a:1c:37:d6:3b:b1:06:1a:e3:81:ea:80:
fb:38:c8:ad:1b:20:d6:cf:d5:37:e8:ff:0e:0e:31:a2:6b:61:
24:ad:c6:95:e4:99:4c:46:7b:49:16:32:17:7e:4d:20:f4:fd:
22:a8:74:21:cc:68:30:28:25:f9:15:3c:b3:ea:16:77:f0:d0:
b8:6a:ca:a6:45:f2:52:1d:17:13:13:8c:15:2b:d0:19:e8:68:
e7:81:0a:7c:d2:75:4d:5d:45:63:0f:25:56:63:ee:72:56:55:
7c:2e:43:6b:31:b8:b0:fa:4c:0a:24:33:09:3e:a5:6a:6b:dd:
c0:8e:c5:85:3b:fd:96:da:7d:59:3d:96:4a:09:de:16:79:e8:
32:56:f3:0f:dd:2d:47:27:73:aa:ac:5f:8c:b3:86:da:74:ec:
c8:5f:aa:06:d7:09:64:f0:34:78:9a:5e:85:95:b1:26:b6:24:
52:d7:63:c1:9c:20:32:f3:37:c4:77:d2:65:f8:13:74:ee:98:
7f:62:7d:48:ce:03:32:37:55:de:33:30:8b:b8:79:59:da:2e:
54:64:b9:f8:39:1b:2e:44:b0:f3:dc:a6:64:c3:16:ec:d9:ed:
b8:85:87:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:48 2025 by rpki-client