Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: kGENVA5Ad6uFYGdjfqcCfG939/xzCbpGzioPON8k9yA=
Subject key identifier: C8:BA:85:A0:FA:40:C3:3D:8E:FF:AB:D0:E7:F1:6E:A3:8D:40:61:F6
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 0194BBCE492B3110861C32723C2C2A916763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: rHtAVPJ+CqK8Dtu2fV7PEoqgLmzx0ejWMnoxImwweCo=)
2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:2b:31:10:86:1c:32:72:3c:2c:2a:91:67:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=c8ba85a0fa40c33d8effabd0e7f16ea38d4061f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:6b:6a:b5:70:0e:82:8e:7a:f0:64:ea:a9:
cb:a8:88:26:b7:dc:76:29:78:4c:13:97:c1:05:cb:
ab:a7:2a:91:00:78:a9:17:4f:58:19:9c:ff:cf:d2:
b5:db:82:5b:e6:06:ce:6f:4f:9a:bf:7c:c3:4f:a6:
72:15:b0:74:d0:f6:ca:5a:2f:06:8c:8b:e6:a3:8b:
f4:6e:5f:d6:4d:a2:cc:bd:27:94:0d:a5:a6:d4:0c:
ac:ee:70:0f:79:b0:84:47:1b:56:52:52:a1:32:59:
a3:37:07:3d:91:6b:ef:ae:01:fc:6b:61:7b:e1:51:
0f:75:49:e9:49:1d:79:b2:db:48:41:17:8e:a4:a0:
e6:d7:cd:7f:61:be:34:68:56:81:d4:78:c3:fb:45:
ee:ef:8d:c5:39:7c:54:8c:ce:11:80:11:41:1a:77:
d8:61:20:c5:50:32:28:32:f7:fb:ee:ef:73:45:07:
bf:a9:8a:23:de:9e:55:20:32:58:e8:50:b6:e0:95:
4d:48:f6:ff:9b:b0:69:c1:8c:0e:47:65:8a:e7:bf:
54:eb:55:fe:1e:1a:9c:73:fe:60:df:8d:45:73:e8:
fa:80:e4:89:1b:ad:22:5b:8f:67:51:30:8a:19:da:
7e:65:d8:b1:5a:1d:4c:4f:fd:bd:f7:4c:95:0b:8c:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BA:85:A0:FA:40:C3:3D:8E:FF:AB:D0:E7:F1:6E:A3:8D:40:61:F6
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:eb:d2:27:0e:a4:a0:40:0e:65:6f:bd:ab:fa:f4:60:df:
be:52:10:7e:18:37:3b:4f:2d:75:f8:da:85:77:dc:e2:8a:8c:
74:51:3d:ca:6f:63:95:2d:28:10:e6:b5:cb:13:38:12:5a:21:
15:df:dd:5e:9e:cf:1c:74:c1:3f:74:45:88:5d:63:2e:de:f0:
08:3f:f9:fd:58:50:80:b9:0b:fa:ae:64:89:e3:2c:c5:77:84:
0c:fa:bb:18:cf:be:55:9f:3d:5f:6c:e6:02:c9:cb:30:e6:8c:
51:a6:6a:22:92:91:97:5c:c8:95:ca:57:44:ba:5b:1a:f1:2e:
00:5f:e2:67:75:e7:9c:7b:53:a3:96:d4:fb:d8:70:dd:8c:b0:
a1:ba:01:a7:53:3d:9c:d3:87:ed:d8:e4:7a:6e:c5:97:f7:58:
64:05:d5:f2:ae:50:c7:81:fc:68:a2:40:54:3f:6f:90:a9:b1:
dc:8e:e9:e2:5c:41:95:19:8d:c8:d5:a1:33:0a:32:b8:ee:a6:
3d:8f:af:60:17:5b:bf:ac:b9:72:27:af:07:4d:d5:d2:85:0f:
18:e3:c6:e7:c7:a6:77:1d:9e:6c:65:cf:78:36:d9:c8:3e:14:
65:a2:11:72:3b:6d:4c:99:b8:06:6e:43:1c:b2:79:e2:36:ec:
02:b9:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:09 2025 by rpki-client