Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier: GpT+SsKVZIxbO6RtMVOEu7/E26UOiNz7uWjhgZPKBp0=
Subject key identifier: 1A:0D:97:8B:3E:68:94:56:6F:B6:60:51:75:9E:06:77:E2:69:12:0A
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 0194BC04C8E8C38EF2FFFC7C4D65E4A18331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: 5CXo7tF6EfftEGVAvyXODphrzRmN3hwl5WXhxyA5ktg=)
3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:e8:c3:8e:f2:ff:fc:7c:4d:65:e4:a1:83:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=1a0d978b3e6894566fb66051759e0677e269120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:f0:12:98:5a:28:9f:83:af:97:19:97:b9:
f8:89:f4:14:93:24:2c:68:f6:6b:ec:7f:25:95:3a:
74:2d:80:38:e9:17:6b:5c:71:7d:e5:33:f3:07:a3:
48:c2:37:1a:f7:bf:5a:39:f6:b4:1e:41:40:75:1d:
c5:0d:2c:5b:70:df:68:f1:a7:46:09:11:f8:89:ec:
be:a6:55:b6:db:b3:b7:72:69:f5:a6:a2:19:dd:0f:
a1:77:4d:c7:85:e1:b7:56:ab:28:dd:95:de:d8:e0:
06:26:7b:69:8d:1c:cf:79:02:3d:77:86:40:99:12:
e8:8f:90:86:f5:21:49:74:4e:f3:44:24:93:77:62:
68:f2:4f:d3:ef:d7:99:cd:43:51:7f:e9:1b:5b:a6:
7b:ed:3d:3d:fd:04:0b:cf:0b:14:92:d1:25:0d:d8:
2c:07:c8:28:dc:c7:65:5d:b5:28:9a:79:fd:a5:01:
af:74:64:33:0c:89:30:5e:48:d9:ce:38:df:db:c5:
00:ca:16:2b:c7:f2:1f:77:b0:7c:45:32:1d:4e:d7:
2d:86:cf:6d:97:4c:c1:fc:cd:d0:55:8c:2d:c8:70:
e7:19:77:15:69:ca:41:0f:b0:ca:3b:09:dc:d0:58:
c8:d7:68:86:4c:aa:28:9e:12:a2:bd:f2:ea:73:41:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:97:8B:3E:68:94:56:6F:B6:60:51:75:9E:06:77:E2:69:12:0A
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ae:96:7e:5f:9b:a4:a1:2a:26:3f:47:76:d1:1e:8e:04:80:
49:68:ec:2a:1a:c3:91:d9:e3:fd:51:89:6a:03:2b:e5:a6:85:
d0:e9:f9:e8:96:a9:ef:02:7f:8a:ec:1c:ed:ce:91:dd:21:8a:
f9:32:cc:31:8c:1c:c6:b0:cc:4d:82:46:67:00:38:80:54:47:
58:18:c5:fe:23:14:02:4c:ab:e2:24:b4:8e:50:3e:b2:a0:b6:
19:21:1f:a7:4f:26:5d:d8:e9:39:79:da:04:db:f4:6c:25:19:
3c:3f:1b:f6:bc:f3:76:2b:f1:bb:bc:8f:2d:8e:3c:75:b0:04:
1a:79:6f:70:b5:d3:6e:a4:99:b3:f9:0a:8f:1c:b3:95:a1:f6:
53:b1:0d:85:1a:32:aa:8b:86:ad:a3:a7:13:d8:6c:ff:4b:f2:
d6:e1:eb:c1:c8:3a:7c:ed:d2:a7:52:80:58:3c:57:d5:33:0b:
4a:63:9a:91:4a:d4:25:32:04:1b:8a:39:4e:22:ba:f4:6d:e8:
99:e0:87:79:59:fe:37:14:dd:6f:64:71:9c:5e:79:37:7d:63:
2e:da:58:30:14:8a:23:5a:05:9b:39:21:b0:38:c5:96:c5:ae:
52:30:52:34:3b:a2:2c:80:b7:8a:02:8d:40:b0:2f:20:06:21:
27:5e:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:18 2025 by rpki-client