Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: el+qcgYC4zyR5T1zJLvQIV9289SzLi3/FhcJ4z9iAnE=
Subject key identifier: FD:25:D4:69:17:62:E1:76:24:F0:43:55:76:9F:B8:71:F4:C2:1E:33
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 0194BD4E6F8931713184A25E481ACA46762B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: c78Utb9xgCaavxuFvXYuLrNsoCzTs/+w6V8TzUH0ros=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:89:31:71:31:84:a2:5e:48:1a:ca:46:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=fd25d4691762e17624f04355769fb871f4c21e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:ac:63:12:76:d1:b4:49:fa:09:36:b6:de:
8f:ab:f2:b6:b1:26:35:91:62:00:42:63:6f:d0:2f:
80:26:d6:f3:f9:8e:e5:28:53:fe:89:ee:b7:44:de:
0a:7f:ed:ff:76:75:4c:30:62:ef:3c:e1:b4:60:ac:
50:70:71:a4:10:0e:f8:80:b9:7c:08:b0:00:dc:b7:
c4:d5:31:cc:cd:00:77:36:6b:f7:5c:82:d8:5f:02:
74:6b:35:ec:28:7c:fc:2f:e0:0f:6d:3c:72:a5:1e:
3b:8e:7e:ac:b5:d4:0a:9f:c7:62:bc:b0:6d:34:aa:
d5:d2:e6:79:81:00:cf:ff:63:bd:04:e6:28:e3:fd:
2e:d9:78:5e:7f:66:fa:1a:28:ee:83:35:35:61:18:
29:bd:08:76:c6:97:7f:b4:a7:51:f7:9c:d2:45:f8:
2a:8c:6a:c7:3f:dc:b1:62:a8:9b:74:85:ea:3c:67:
d4:98:07:64:1a:eb:0b:ce:4d:23:ac:62:64:a5:d4:
e8:9f:56:66:8b:10:ac:52:83:ae:c2:6d:5e:1a:49:
d8:56:6c:11:da:c3:56:d6:a1:1d:75:6d:50:27:96:
2c:d4:77:55:33:71:89:d4:32:4b:bc:c6:b2:98:f0:
3f:4f:61:3a:8f:9f:5a:3b:89:2b:e1:2d:43:fc:f8:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:D4:69:17:62:E1:76:24:F0:43:55:76:9F:B8:71:F4:C2:1E:33
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4d:46:26:bc:8f:73:60:f6:c3:a3:fc:57:01:1b:e9:9a:59:
06:c9:06:11:a2:6e:86:76:8c:c8:0d:01:1d:44:55:fc:ca:fa:
07:6f:3b:f1:c5:61:a5:43:a7:ad:6e:0d:4e:63:69:1b:2d:5a:
11:80:0a:59:b2:2d:f6:32:3a:41:45:23:0f:9c:dc:ef:46:76:
67:6b:81:37:e5:39:46:db:d0:d4:d6:dc:4f:51:5a:c9:af:7d:
88:8b:68:9e:bd:e9:3d:cc:4b:81:3a:26:39:6d:5c:07:9e:96:
ab:e1:fa:92:99:ee:53:70:a7:aa:a4:ed:f4:14:2f:28:22:e4:
17:56:d8:e0:51:f1:17:8b:46:20:57:83:c4:e9:f4:b7:88:f8:
15:bd:92:6f:6b:ad:92:23:a2:fc:39:24:30:70:f3:1a:a6:9b:
59:47:51:01:1c:7a:f1:3b:55:90:29:8a:eb:41:a5:ac:3b:1b:
57:98:45:10:3e:08:29:10:6a:51:0d:58:75:30:48:c6:8c:e7:
08:23:ef:37:1a:10:ca:43:23:a1:f6:58:87:06:1e:8e:c2:15:
e7:29:1f:0d:9c:eb:ec:25:9c:09:d5:f7:ef:42:69:88:12:ee:
fe:ad:ca:24:7c:2d:72:59:fe:73:5c:30:d1:c6:9c:8d:cf:e8:
b2:3d:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:30 2025 by rpki-client