Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
File: gq09xArNGFL8dKzdN9jwe7sCXRg.mft (raw, json)
Hash identifier: 3SNmxzC0ebZusSdcHunEqOYIJmiwQ982sVCvxZQ10us=
Subject key identifier: BB:AE:86:01:4F:79:64:68:07:C0:A7:B4:A2:E6:E2:D9:1B:79:68:EF
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial: 0194BD176831CC8F76254882673EAB396E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
Manifest number: 12
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: gq09xArNGFL8dKzdN9jwe7sCXRg.crl (hash: U1Kikt0acOBBpkaJSRCDxgnThjxPMmELnR4yBpdSY50=)
2: moIHrCUIysvqre1db9iG8YhXiD4.roa (hash: 3qmhRdBwt3IbZM/x/JJkjl8tv0bK7oEsrL8A8nVm2tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:31:cc:8f:76:25:48:82:67:3e:ab:39:6e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=bbae86014f79646807c0a7b4a2e6e2d91b7968ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:45:4a:14:39:a5:62:34:d9:aa:be:d8:71:
c3:04:60:67:65:68:a5:fe:a4:4c:14:04:01:47:1d:
e4:37:9a:f8:71:4a:30:0e:fe:27:ef:49:08:1c:a1:
af:9c:9e:fc:68:bc:21:da:a9:fb:ba:5c:9d:78:9a:
e9:a5:2f:70:53:6f:f1:a9:d3:4d:83:41:95:32:d1:
8f:a1:cd:ca:39:55:5e:e4:0d:eb:90:6d:98:f1:1c:
80:db:7c:9e:2d:c6:d6:39:aa:e1:48:cc:37:35:17:
b1:11:d1:c8:54:3f:2a:69:31:88:b7:26:44:47:fd:
f5:0c:8d:45:e2:a8:70:f2:87:88:28:21:64:f1:06:
ab:c3:c2:b3:80:eb:f0:b8:33:18:86:59:3f:17:e5:
ad:92:f3:54:8d:59:af:41:74:70:b3:1f:ad:36:6d:
23:3e:35:07:17:8a:93:84:e7:8e:f5:af:e0:09:c2:
22:6d:df:9c:29:7c:d5:0a:13:f0:72:39:bf:02:c7:
c4:06:ff:2b:2d:49:46:41:a1:aa:ca:a1:20:24:e8:
9d:00:03:1d:82:d1:38:7d:1a:ca:27:39:d5:ca:f7:
cb:2f:6d:81:62:a6:14:91:54:68:2f:3d:aa:07:6a:
47:96:23:00:2b:80:b7:1d:44:ef:b6:85:22:78:4d:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:86:01:4F:79:64:68:07:C0:A7:B4:A2:E6:E2:D9:1B:79:68:EF
X509v3 Authority Key Identifier:
keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c4:24:85:f4:69:5a:4e:0f:32:5e:76:11:41:d3:d0:84:5a:
01:fa:6d:fa:0e:6e:ca:b9:85:ae:8c:30:94:95:2f:5c:6d:0a:
ca:54:8b:27:ce:79:86:bf:22:13:3e:1e:52:f1:ca:83:e2:37:
d8:0e:d2:c8:e7:41:87:73:01:c6:b6:23:e0:c0:b3:c5:4e:34:
4f:93:24:1d:33:5c:2a:90:9c:52:b3:d5:cd:66:b7:d2:7f:9d:
32:06:ce:73:74:5a:20:e1:7a:db:9d:42:71:58:56:de:d5:dc:
97:98:70:1b:8a:e6:12:12:8f:d8:85:43:4a:ef:54:e9:b9:4d:
47:34:b5:4e:d9:39:37:5f:3b:7f:55:e6:e4:2a:93:08:ca:2b:
44:8c:79:82:3f:7d:5b:16:e9:82:3c:2e:89:66:73:3d:29:99:
0f:ab:66:15:30:8c:26:c2:4b:9a:8b:23:5d:f7:21:f5:30:35:
cf:37:f8:1c:ee:28:ba:3a:8c:89:d2:6d:d0:b8:07:dc:87:07:
c5:2a:a8:b0:9c:bc:d8:60:7f:ea:7d:9a:50:a6:b5:96:c4:49:
c8:42:d4:7e:6c:ed:db:a4:fb:0e:2e:09:b7:ce:53:82:7d:a3:
03:c6:34:fe:ed:36:9b:be:f5:30:de:f9:62:8a:04:62:72:19:
da:84:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:27 2025 by rpki-client