Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: 3lFYYc4DpffAv9L9Z7iNqWe0kBDCAaDNh1rhiyUfLu0=
Subject key identifier: 82:41:53:67:AB:3D:DA:4B:7A:1F:A3:5D:04:EB:9A:8A:44:EC:C0:35
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 0194BCA9AE7E20C785FA647B98A767A4EF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: W2AIOuIz+Ilnvf4L3sUQy9cfQO4o0lR8ISZklhvmLPw=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ae:7e:20:c7:85:fa:64:7b:98:a7:67:a4:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=82415367ab3dda4b7a1fa35d04eb9a8a44ecc035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:9b:9b:5f:16:37:0a:e9:f4:de:1f:97:6f:
47:c8:5f:38:8b:a6:6c:67:3d:62:2a:bb:2a:97:bd:
22:35:72:ca:c5:bf:5e:f4:a9:98:f2:0c:13:55:83:
99:a1:25:0d:64:71:bf:6f:37:c3:79:c9:3d:92:09:
85:c1:36:6a:2d:a5:07:cb:bd:c4:5c:59:4e:fd:57:
5b:7e:9a:f4:e5:e1:5a:df:ce:d0:ec:cd:05:c5:82:
88:7e:f2:91:c6:ff:00:ea:f4:f9:8b:62:92:bf:fa:
e7:ae:a4:f6:78:d9:5a:02:8f:fe:0a:ca:6c:75:6a:
b6:32:ef:45:a4:ba:9a:a9:5c:8f:e1:5a:ca:dd:27:
50:ef:1e:8d:16:ae:b3:de:6c:7e:c5:cf:75:c6:73:
36:e9:1a:32:a6:dd:7d:e7:fa:01:41:ab:b8:a8:48:
29:d4:01:c8:0c:f8:a9:f7:c4:c9:57:17:9a:c2:82:
22:92:7a:96:7e:61:79:e8:5b:ab:40:4b:d0:df:8e:
00:73:7a:88:9e:b8:4a:54:28:93:82:b3:a5:45:99:
1b:05:48:9e:80:02:a1:89:80:b1:a2:10:b0:61:d8:
32:b5:8c:38:33:6f:2e:3d:7d:49:9b:a4:02:a7:59:
8f:14:a9:f7:e9:a8:08:70:19:25:df:02:f5:3f:9d:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:53:67:AB:3D:DA:4B:7A:1F:A3:5D:04:EB:9A:8A:44:EC:C0:35
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ca:ae:74:b9:c9:08:b6:8a:99:49:e0:3d:33:70:2a:22:30:
21:59:52:2e:ef:5e:3b:36:1c:5d:40:67:0c:45:14:51:2a:1b:
fc:ee:0f:6c:5a:17:20:77:40:e0:43:e6:22:0f:00:5a:ec:ae:
3b:4e:48:32:2b:d0:2a:c7:5b:c7:b2:8d:92:5f:f3:09:df:59:
af:09:47:76:5e:10:78:35:a1:88:81:a3:08:8e:07:d8:dc:16:
3d:c7:f5:1e:fd:67:a5:dd:7c:9e:b3:41:75:3f:ff:cc:6d:b1:
c2:07:35:88:62:9d:34:e8:9c:c5:18:80:e0:c0:46:46:89:21:
6b:cc:74:2c:a8:c0:39:fb:02:a5:6f:5e:fe:8e:b7:cc:d5:dd:
5f:d0:5b:e3:d9:9e:09:e1:c4:01:fb:b3:62:a1:8b:e6:06:04:
87:68:66:dd:58:2c:92:4c:0b:02:cc:e1:60:8b:e0:98:3a:6e:
ed:34:ed:1d:00:40:66:0a:fc:0f:96:4a:b8:db:e2:fd:bf:f6:
10:1e:59:30:b8:09:f1:80:bc:65:2f:52:b1:a3:6c:70:44:b5:
5b:55:5e:34:e3:54:e7:5b:a6:4e:fb:6e:07:77:7d:56:73:93:
0f:df:a0:22:f6:5d:ab:77:51:69:0c:1e:ba:15:17:dd:cf:01:
74:2e:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:47 2025 by rpki-client