Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
File: ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json)
Hash identifier: DZIPSfgO5ukyDpfN8ZgWXwBg8SSoC8nSMhx/y4fhw1I=
Subject key identifier: FF:7F:4E:04:2F:66:AA:39:AA:91:32:39:F3:5A:75:8E:AE:A7:B2:7A
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Certificate issuer: /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial: 0194BBCECCBDA1E98798B46CB3AEADEFA038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: fdOHadbduUc9htmWTS-jPq_zv2U.roa (hash: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=)
2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: 3JeEYt6XT7R9sl1LZZnQh23usDKQp+eZ7LWt/Y2H8Kc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cc:bd:a1:e9:87:98:b4:6c:b3:ae:ad:ef:a0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=ff7f4e042f66aa39aa913239f35a758eaea7b27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:f6:96:a4:dd:ab:19:1c:73:af:5a:7d:c5:
d3:e5:09:d9:2c:b5:bd:2c:52:c2:34:40:d3:ad:66:
25:13:e7:f8:6f:2e:cf:d7:a8:ad:35:8a:ec:c2:9b:
4d:ff:30:11:5a:04:e4:fa:77:16:6f:3b:4c:a3:e5:
c5:9c:41:e5:42:df:4b:0d:a1:ae:82:91:7e:0b:86:
80:73:ed:b8:59:c0:d7:3c:f4:a4:59:4b:60:46:fb:
40:45:51:f1:2d:16:a2:8d:59:c4:54:76:78:7f:b9:
20:a3:c8:f4:fd:56:07:e0:81:ca:e6:12:9b:e2:ff:
9c:69:0d:15:bb:af:9e:2f:39:3f:a5:90:32:e6:92:
50:f7:d3:ce:ff:2a:c0:be:b6:9d:bc:06:27:22:63:
05:5d:51:c5:f3:9a:1b:4b:f4:1f:e4:5a:94:88:26:
2a:bc:66:53:ff:36:fe:4e:c7:d1:c9:76:08:96:93:
1c:3a:a2:e5:08:7e:a5:02:ba:53:85:50:7f:8c:e4:
bd:e6:66:ed:94:62:a6:dd:e2:2c:cd:54:f2:b2:6a:
19:47:64:1b:37:74:d2:6f:51:65:7b:44:58:d4:85:
31:51:f1:c9:df:47:18:46:f2:c5:56:44:8d:c7:28:
19:54:0d:35:5d:73:85:3d:1e:4a:9e:5c:cd:c1:a4:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:4E:04:2F:66:AA:39:AA:91:32:39:F3:5A:75:8E:AE:A7:B2:7A
X509v3 Authority Key Identifier:
keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:df:49:8a:24:98:b8:3d:a8:d9:b5:cb:7a:48:f1:a7:54:df:
a1:22:38:43:6f:38:22:d3:4f:9d:0f:cc:a3:53:85:08:35:8b:
ef:45:4e:27:95:62:6a:e7:23:2e:55:87:fa:de:a4:14:fb:68:
92:7f:ea:51:03:a3:72:39:d4:c3:f1:23:a1:5a:69:8b:b5:bc:
e7:60:25:b8:ff:98:58:87:dd:88:50:7d:3f:98:bd:6d:42:0e:
9d:b6:0e:2a:4e:40:88:d5:07:64:95:95:33:87:8a:34:ea:73:
ce:e4:c1:65:5f:72:4c:cb:eb:35:25:77:76:88:bb:cd:6d:db:
d6:f1:c3:16:62:6f:fb:be:6f:bd:42:ed:2e:28:f9:e9:23:42:
32:2e:fd:97:47:94:80:16:2d:80:26:d9:f2:86:49:7d:55:89:
46:14:9f:5c:49:b8:87:b6:19:d6:fb:33:41:92:d2:69:63:79:
2e:47:e2:d1:d8:e3:c8:3a:3a:af:ea:a7:7f:7c:e1:cd:06:3f:
e1:46:71:81:8c:72:39:8c:db:78:e9:c8:05:8c:c0:65:9b:a5:
61:e7:ee:07:2e:73:cb:9a:cc:f7:1e:94:b4:94:08:4a:29:4d:
2e:6d:c1:85:71:7e:82:b3:6c:9b:1a:7f:85:05:b9:d7:bd:79:
c0:8d:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:17:56 2025 by rpki-client