Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: ELtRaxhXc4eV/r/uq4m/zlsQY5oR3ejPRJdRvOd2zek=
Subject key identifier: C3:A2:C6:89:17:9E:14:0B:53:CC:3B:B0:39:68:C5:7A:0A:B2:DF:72
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 0194BBCE9938390FAB401B1D1B38A93FF6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: Js8FvaZfA60vW3C/5NyvTUNR9kaA5YT8pKrcuIr/QLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:38:39:0f:ab:40:1b:1d:1b:38:a9:3f:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=c3a2c689179e140b53cc3bb03968c57a0ab2df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:77:3b:e0:b5:65:9d:3b:d8:52:ee:38:df:
49:8d:30:5b:c0:40:2a:de:8c:8c:11:0e:34:da:0f:
e2:bb:bc:d1:66:e5:90:f6:d3:10:de:a4:87:9f:47:
0c:c1:23:58:c0:ca:1f:57:ef:b5:a3:65:27:cd:41:
9f:4f:0e:b9:48:d5:66:ef:7f:90:ad:fa:19:3e:b3:
ab:3e:d7:27:40:fe:be:99:67:c4:9d:cd:20:f2:b8:
fc:2a:a7:6f:ec:39:d3:b4:e6:2b:d6:2a:b3:ec:a8:
05:19:fd:bd:38:79:73:66:67:21:35:25:07:7f:9d:
7b:eb:c4:c1:a4:9b:ae:3b:48:eb:c1:0b:52:57:33:
e0:39:ce:b6:1e:5e:8c:c6:3c:89:c5:76:19:39:8e:
bd:2e:b4:32:b4:da:99:db:5e:7c:31:da:9d:52:c7:
3e:b6:5a:be:65:78:30:72:79:b3:14:2d:5e:ba:cd:
8a:8d:73:bd:4a:92:db:3a:d6:63:94:61:9e:10:a6:
75:8e:5b:77:38:f5:fd:c8:1c:44:fe:ed:f9:dc:7d:
04:84:c5:56:1f:8a:90:d9:f0:9e:6b:b5:dd:2a:cb:
ba:f6:c8:df:22:26:b4:8f:2f:85:b5:9a:44:b1:31:
d1:e2:1a:95:98:db:01:9c:05:46:c9:ba:e5:e5:ff:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:C6:89:17:9E:14:0B:53:CC:3B:B0:39:68:C5:7A:0A:B2:DF:72
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:69:63:b2:b8:04:bb:5f:0f:1f:b6:21:4a:ca:6d:9d:3b:ed:
cd:20:99:50:cf:80:23:38:0c:d1:c1:06:7f:9d:30:b8:87:ec:
d5:c9:4a:99:68:80:6d:a1:19:45:af:da:6d:5d:dd:0d:24:85:
39:52:87:eb:04:d2:ff:f7:bd:ba:b1:30:40:b7:04:83:4c:ec:
f1:27:8d:1a:e2:85:c9:fc:17:5b:16:3e:74:a6:61:6a:97:65:
61:2b:31:5c:41:c3:03:16:7e:fd:9e:15:22:b1:65:bf:a3:75:
7a:89:be:15:9b:32:88:0e:8b:98:43:cd:8d:0b:db:65:9e:97:
76:40:91:72:8f:76:b3:6e:ff:de:7b:5b:da:6c:64:c8:c9:22:
f4:3c:bc:87:6e:4d:ba:25:78:02:bf:33:94:c3:82:dc:b9:06:
53:8a:4f:4e:a8:de:99:2e:5c:4e:b5:54:05:3f:ad:11:59:2c:
e9:56:24:09:66:af:14:a9:56:40:7e:b5:c9:2b:b2:d2:91:c5:
69:42:f5:e7:bd:c4:58:ad:56:24:21:46:d3:f2:be:37:b1:3b:
b3:31:16:19:47:50:6b:2e:7d:92:70:cd:4f:19:81:ca:5d:21:
33:dc:b3:94:a8:49:af:81:61:ff:94:47:ef:1e:ac:6d:c2:1a:
3f:63:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:42 2025 by rpki-client