Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File: g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier: dEzkX9sEcJwOX7OfHeQjzTPQ217z/nSUKs8x7Uf8Eow=
Subject key identifier: 14:53:7B:D5:4F:D6:3E:D0:00:FC:D4:31:F8:BE:44:FD:AF:FB:C4:40
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer: /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial: 0194BCE0E3981A9C316B5A74C9549D5CE892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: ug+TG9It5X/bJnmOMaadr6qdN3EqQUaJ/sSiP6x84EU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e3:98:1a:9c:31:6b:5a:74:c9:54:9d:5c:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=14537bd54fd63ed000fcd431f8be44fdaffbc440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:e9:b8:9d:86:fa:60:59:84:28:ae:d7:b5:
dd:db:8a:e6:6a:89:a7:31:9b:48:08:c7:a2:cd:7f:
7b:36:41:93:37:a1:a2:12:5e:f8:30:c1:d4:17:b4:
e8:5b:70:ed:9d:88:68:30:d3:48:7b:f1:1d:74:39:
38:20:6c:c3:15:4a:7a:7f:fa:6e:89:79:62:04:4d:
74:03:ce:ce:7c:18:09:15:4d:1c:f8:28:00:57:d3:
d9:86:9d:75:89:51:63:0e:4e:db:18:79:6a:f4:3e:
fd:b8:76:77:02:e8:c4:3b:cf:62:f5:1a:1b:f3:4f:
73:23:59:97:b5:a2:d9:77:ed:68:ba:6e:5e:5b:7c:
6f:a9:65:13:b8:ef:1d:41:fc:a7:67:4a:4b:2a:5d:
cb:f8:44:10:ac:e4:e1:16:27:26:d1:d6:e9:de:6c:
31:68:d6:c6:d0:c5:eb:01:f0:3c:9e:0f:a4:9e:bb:
2f:a2:9b:35:c6:0e:b3:e4:a8:26:c7:f5:ca:35:f2:
a0:52:d3:d7:33:61:d4:7b:89:7d:97:26:f2:c9:31:
8b:0a:f9:7a:a8:48:f0:94:97:ea:91:cd:c0:f4:17:
6c:9d:33:94:9e:77:a1:a0:92:35:21:0f:9b:81:8b:
b0:1d:97:5e:91:61:17:88:be:c1:7b:88:ec:14:2a:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:7B:D5:4F:D6:3E:D0:00:FC:D4:31:F8:BE:44:FD:AF:FB:C4:40
X509v3 Authority Key Identifier:
keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f6:77:76:ab:cf:7d:e9:2c:3a:14:36:b2:27:eb:a8:64:2c:
10:99:3b:a9:7f:b6:13:1b:00:97:6c:c9:70:7e:4a:7a:8f:77:
21:65:fc:1d:a3:7a:b5:e3:52:3e:23:41:75:45:6a:4c:53:e5:
c8:69:3b:e3:2a:ff:97:86:8f:46:60:e8:73:9b:3f:6a:90:37:
ab:34:7e:2c:f3:2e:f2:8d:1e:91:14:ef:b5:45:23:79:2b:b6:
f5:72:76:2c:1c:e6:d7:e4:f9:9a:4f:51:12:32:c8:8a:39:51:
da:b2:dc:41:c3:a9:23:5c:fe:57:e8:f9:f4:90:cd:c4:e2:94:
d1:b9:36:da:8a:4d:16:5a:16:2b:62:15:2a:54:4b:0a:ba:d7:
2f:77:f1:03:b7:43:cb:4e:12:58:92:14:73:68:c1:5f:d7:be:
2f:e0:e9:d9:dd:d8:00:c8:8f:af:c4:0a:26:cd:4b:b5:d0:d4:
07:ff:1c:82:df:45:13:9f:61:fb:7a:bd:57:e5:6e:fb:f0:63:
67:f2:cf:0e:e4:88:34:0c:86:a6:15:47:24:f6:65:56:eb:c9:
0d:92:a4:03:0b:a8:61:62:ad:3c:c0:00:7b:0a:65:db:6e:34:
35:c8:a6:0c:4a:3d:c7:e5:f6:88:fd:8c:ef:4e:de:e5:9d:13:
61:91:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:51 2025 by rpki-client