Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: JYyWGAwRvxwWE5xkjySngEP5ysrGVmA6u4VeLkpd+9k=
Subject key identifier: E2:19:80:28:AC:79:06:48:A2:9F:61:67:72:4A:79:4F:A2:A2:C4:7F
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 0194BCA9F82E75F4218E2BDF5BCE6077A7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: LveoojhhIPMiz+PLLF5dZtTYJLwsHxlwDEePK39NA4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:2e:75:f4:21:8e:2b:df:5b:ce:60:77:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=e2198028ac790648a29f6167724a794fa2a2c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:53:b1:22:84:bb:0a:d2:df:7b:16:54:ca:
20:6e:b6:6a:ed:0a:49:62:81:3c:84:fc:0c:dc:ef:
2e:c1:0e:89:a8:ce:ee:72:57:5d:b0:03:37:4a:04:
f9:d9:48:a4:d5:30:10:5d:31:12:43:21:6b:e7:74:
f0:da:55:5e:42:f5:38:f5:4f:56:d8:06:59:a1:71:
a7:3c:4c:19:2f:66:79:29:bf:2d:4e:43:c9:7e:0c:
d8:76:b0:97:8e:30:a1:02:4f:e8:7b:c3:65:e8:e1:
f0:f5:bf:f7:4e:e2:f7:8b:dd:d3:8a:09:8e:89:13:
30:44:75:df:ff:30:14:e1:d2:78:16:5e:77:4d:8e:
fe:2b:d4:70:e7:33:15:4a:af:8d:ef:93:6a:4f:84:
ed:2d:25:cf:c6:ab:bd:8b:ac:fe:b6:c2:20:1c:83:
75:b4:4e:dc:5b:77:d2:4f:c6:bb:e9:75:8f:d2:cd:
7f:d1:67:ee:07:3e:aa:41:12:a4:2f:4b:6e:4c:11:
e2:2e:3c:b7:ef:74:a8:15:a3:db:3d:80:f4:df:6b:
f3:81:f2:fe:31:3f:0e:a0:31:ab:a6:fa:c8:ac:96:
c4:df:5c:57:21:73:56:6e:f8:fc:d5:f7:2d:3b:f0:
70:ba:4a:66:6b:54:2d:c6:d5:25:ef:17:86:87:56:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:80:28:AC:79:06:48:A2:9F:61:67:72:4A:79:4F:A2:A2:C4:7F
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:15:cd:b0:ed:70:97:7d:8e:28:ae:55:4c:5e:f9:5a:a2:c3:
e0:a4:56:65:a9:01:8e:ad:7c:87:9a:a6:6d:cf:0d:d9:e1:29:
7f:6c:3c:d3:d8:d1:dd:ef:38:32:1d:25:d0:69:42:e1:ba:1a:
75:54:f9:a9:42:b3:c8:22:e7:df:75:a0:88:5a:40:67:c9:56:
e0:95:08:cf:c0:19:74:2b:8f:c1:6f:61:5f:70:a2:33:ec:ec:
96:23:66:3b:a5:e9:78:d8:3f:cb:45:ba:cb:56:52:6e:7d:9f:
4c:03:25:a8:68:ad:73:54:6c:95:af:61:ac:e1:74:e1:f2:09:
55:19:4f:28:f6:5a:75:22:2f:0b:15:e1:28:a2:fa:3c:b0:73:
3a:3c:6d:0a:4b:df:da:ee:f9:7a:16:91:d5:fd:e4:10:8e:c9:
e6:86:d4:dd:53:f3:c4:e4:b9:1f:34:42:2f:74:50:4a:75:9a:
c4:21:1b:6a:91:89:ce:5f:1e:9c:2c:c1:e9:88:14:b0:9d:7d:
3b:5f:ea:d8:c5:9b:de:e4:9e:54:43:d0:7c:38:92:79:c1:39:
0e:ba:7c:59:d5:2f:22:c7:c5:9f:b0:5d:40:b9:2f:ec:e8:93:
82:e9:9a:d5:60:64:9d:33:92:04:42:b2:f8:11:14:90:34:8b:
81:39:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:01 2025 by rpki-client