Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
File: G6BsMiNp1EnhdPpzEEezOXI_sB0.mft (raw, json)
Hash identifier: ssfmaPF/IPMkcgQLeDYy7CPG20ll9rdF/fCeygokLvM=
Subject key identifier: 64:42:DC:07:7E:8C:00:77:BA:D3:03:8F:AC:33:93:BC:A0:1F:5C:FF
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Certificate issuer: /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial: 0194BBCE5F9B3C713993A594EEF5BACDB24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: G6BsMiNp1EnhdPpzEEezOXI_sB0.crl (hash: dMDg3RXCxlCH6ZPDaHG6aax0Hopsz64w/TAz5JzH9JQ=)
2: fudzAOYoQEbBVmwmOdYtJovy1uI.roa (hash: QG+JwJM3okPXrIbfWoNTAizNGt25NFUxghJxGtiJeCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:9b:3c:71:39:93:a5:94:ee:f5:ba:cd:b2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=6442dc077e8c0077bad3038fac3393bca01f5cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:a3:9e:26:c1:66:3b:fb:bd:b5:dc:fe:49:
4c:ef:23:bd:59:28:a1:7b:0b:c2:69:69:89:6c:61:
d3:75:b5:24:b3:e9:be:50:22:52:78:0c:55:d2:57:
95:74:a9:80:be:7d:f0:0c:1e:5b:2b:97:6b:1a:c5:
29:8d:f0:54:81:e2:3f:7a:04:d3:51:cf:fb:a3:d4:
4d:1c:db:3e:d4:44:82:ed:cb:17:33:dc:44:03:62:
06:68:c5:eb:2d:27:0f:53:c5:0d:20:83:02:aa:60:
57:ec:2a:23:82:ed:f9:db:36:1f:5e:a0:40:28:6c:
40:ad:57:3f:c3:c6:94:fb:ed:bf:9e:f7:4e:c8:df:
21:36:d5:75:82:db:28:9d:10:96:9a:ed:ff:4e:fb:
df:5a:7c:1b:e4:92:08:c1:b8:5f:4e:cb:c2:00:ff:
69:e3:44:83:7e:b1:ac:95:dc:a9:25:6e:2b:be:0f:
64:3b:8d:56:70:29:77:20:7e:7a:85:9a:c5:e4:1b:
63:19:15:2a:b0:c9:e7:c6:5c:86:10:e5:1d:89:6f:
df:de:71:a8:51:2d:27:6b:aa:00:94:ba:cb:21:ae:
5b:d7:d1:32:2c:a1:88:8f:35:a0:63:6a:a6:70:da:
e1:90:2f:49:ee:73:65:85:79:4b:c5:c3:9e:a9:c1:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:42:DC:07:7E:8C:00:77:BA:D3:03:8F:AC:33:93:BC:A0:1F:5C:FF
X509v3 Authority Key Identifier:
keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:38:4d:73:6f:c1:6c:6f:f1:10:09:35:16:46:18:70:7e:0a:
4a:d2:4c:f1:7d:f5:47:1e:02:11:70:22:3c:a8:b6:d5:71:02:
95:35:ad:06:8f:a2:cd:e2:16:3d:ff:4d:12:e0:63:e7:31:1e:
be:90:6f:41:f6:03:da:86:1b:7f:2b:3c:e9:fe:d0:a7:0a:d5:
a3:7a:bc:02:30:9f:47:fd:f5:f3:f0:f1:8c:9d:18:8f:88:bb:
13:06:33:66:b1:11:d6:78:86:c8:1d:06:bb:2f:6f:74:a9:6b:
23:50:dc:e9:25:9b:1c:47:d7:e2:5e:6c:f9:f6:5b:84:04:74:
79:90:e5:a9:b1:a3:0f:74:5f:0e:78:57:3a:b6:11:ca:e7:d6:
46:cb:27:2b:c3:12:ad:26:5d:92:95:de:9e:dc:4c:10:66:fd:
ed:2b:11:79:22:ef:8b:6f:57:e8:e5:92:f4:f3:24:48:c5:8a:
63:23:4e:8b:a1:d3:3f:c6:5c:24:46:6a:e9:42:45:66:7b:9c:
77:e6:5e:78:dc:8c:26:06:55:6d:c2:88:8a:81:2d:93:a3:44:
9f:ed:c6:6d:92:2d:31:8f:3b:98:8c:df:1e:27:8f:f6:9d:c4:
ec:06:86:c9:da:af:d4:fd:45:5b:b0:12:97:49:a0:69:a0:1b:
85:52:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:46 2025 by rpki-client