Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: fdKZUhsCJugFTsQcog2txzpluZKIxcYK8sTRyeNAEwo=
Subject key identifier: 52:65:89:25:26:36:A5:1A:D5:6D:A8:27:F1:DC:62:E8:CE:C3:AB:39
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 0194BC7313EB8106C443B977CBE86F0328BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: b7lwyEE76ecEm6c3sB9QuP+EpHlEu3/h07R4wK/uwRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:13:eb:81:06:c4:43:b9:77:cb:e8:6f:03:28:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=526589252636a51ad56da827f1dc62e8cec3ab39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:39:8d:0c:9e:5c:39:ac:c7:58:96:5c:55:
8f:88:36:2b:69:5d:02:1c:f8:7e:f3:f5:53:a5:c9:
6e:87:ae:c2:22:a5:eb:83:ae:96:6f:6d:d7:90:fe:
c8:94:46:a5:5d:52:a5:51:98:7c:24:68:87:9a:aa:
f8:08:61:1a:00:7a:82:08:88:05:9f:d1:2c:ab:97:
99:ec:a5:c0:f8:3e:b9:1f:c8:22:7f:74:12:19:f2:
cf:b2:5f:8f:1a:10:ec:6b:4d:f6:89:8c:d5:2b:6d:
66:97:06:e4:ab:16:c9:e5:75:50:e0:c9:79:09:97:
6c:5a:87:da:d0:5f:6b:dd:78:2c:d7:51:ca:b8:fb:
9c:c7:f7:08:02:39:82:62:dc:6d:a8:d1:96:a4:59:
7e:6f:b6:5e:ea:e8:a0:b7:d7:01:bb:0f:1f:42:97:
21:69:43:f8:2b:55:dd:6c:24:f2:e0:74:b1:f1:77:
d0:48:44:84:e4:2b:67:b2:6d:b1:76:e1:56:c2:49:
50:dd:72:65:0a:06:37:fb:25:cc:86:0d:eb:00:f2:
57:f5:d7:1b:8a:a2:fe:20:29:f8:86:ae:dd:23:91:
97:96:ea:2c:4f:a3:85:06:e3:d3:7c:d6:8f:10:2a:
dd:f8:8c:d6:5a:86:5d:c5:d6:3e:5f:64:0d:8f:05:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:89:25:26:36:A5:1A:D5:6D:A8:27:F1:DC:62:E8:CE:C3:AB:39
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f9:7c:0b:9d:9c:3f:d8:f2:ad:8c:3b:85:0d:3d:d3:2a:07:
79:38:82:90:5d:17:fa:34:3b:1a:f9:97:17:ed:ab:b6:a1:eb:
00:f4:80:1a:11:91:be:19:94:15:a7:bb:8e:c4:02:25:3a:1b:
88:78:34:13:3f:20:f9:fc:6e:a1:69:50:4e:46:cc:08:c7:a5:
4b:af:17:b3:cb:ad:b6:b3:e1:35:e1:47:57:69:7a:f2:8c:41:
fe:38:b9:15:04:b5:d0:51:2f:df:62:3d:25:19:56:8d:e2:a9:
1b:b8:8b:e2:07:63:71:76:71:f5:0f:97:7a:1e:ac:ab:95:c9:
8d:40:d3:c4:3a:b7:97:fc:37:d1:bf:bb:65:16:9f:5e:f0:d9:
31:2a:7b:cc:ae:46:46:3e:86:8f:39:30:ac:e6:c2:88:1c:64:
fb:33:2a:33:c7:ff:7f:b9:b7:89:b1:1f:e3:ae:b6:6e:1f:a1:
1f:cc:99:31:87:e0:c7:4c:4e:05:24:2a:5d:d4:76:29:09:d0:
8a:f8:bc:c4:81:71:24:aa:05:6f:8e:f3:15:e9:70:92:0c:4e:
03:b3:00:1a:21:1f:04:15:d1:41:c5:19:e0:52:5e:1d:a3:f4:
79:7b:8d:ea:ae:3e:1a:e3:72:40:29:2c:98:c9:8d:f1:07:bd:
71:a3:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:04 2025 by rpki-client