Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: kU6V97YWZvcPJxiUG9psa2xkbHlj3oCrfWE3mFoVRrU=
Subject key identifier: DF:C9:51:34:25:0A:FF:F0:8F:F6:58:F9:DB:F2:10:69:9E:2B:43:90
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 0194BCE0A0EB9B10D0DD7B225935BB010BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: Sr7QiYa0IbxExQsg7Sz9e5Pq8KdF2mgmrGmXJ5b78HI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:eb:9b:10:d0:dd:7b:22:59:35:bb:01:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=dfc95134250afff08ff658f9dbf210699e2b4390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:14:ee:4f:ab:66:9f:48:10:b4:d5:65:45:
af:e1:64:fe:d4:eb:ec:f7:03:57:cd:ae:b8:31:04:
19:68:d9:03:62:dc:43:c8:cd:9e:9f:69:67:8b:4d:
6e:0d:1a:cc:17:ad:44:cc:1e:73:5b:e8:1b:02:d3:
ca:3a:35:c4:d3:77:a2:e4:0c:98:8a:bb:5a:97:0d:
eb:cb:ec:af:8c:9b:2a:a2:3a:e4:5e:e4:cb:5e:c6:
1c:d7:71:1f:6f:bd:0b:97:67:0e:64:7a:8e:98:68:
67:37:6f:0d:d7:af:8e:e3:c3:81:b3:e9:e2:45:9d:
fe:d8:90:f8:50:d4:d1:af:c1:d2:38:9a:67:1e:c6:
ec:c1:fd:54:53:c8:cc:60:f5:39:f3:30:9e:b8:9d:
62:85:12:40:b5:f5:8b:59:47:10:77:5a:02:a5:a6:
c5:d0:71:ae:a6:56:28:be:41:12:a0:bf:b3:81:e6:
61:df:73:ed:3e:54:1d:83:9a:88:09:75:07:cd:95:
2e:47:57:1b:46:bd:5a:c0:ac:b6:c0:93:0e:83:91:
c0:1c:3e:e0:a6:4d:7d:e7:4d:fa:e2:02:bb:2a:eb:
13:f0:7a:4e:0a:c9:cd:86:06:4c:1d:26:55:b1:e1:
ac:c0:fe:58:e5:7e:37:b9:b2:3e:bd:60:1e:81:dd:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C9:51:34:25:0A:FF:F0:8F:F6:58:F9:DB:F2:10:69:9E:2B:43:90
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d7:97:95:0a:02:ca:f1:f0:7c:a9:c3:05:98:26:dd:31:c5:
37:1a:74:09:2c:aa:60:9c:f5:62:55:66:0d:aa:d7:9d:46:8d:
66:62:25:48:21:d3:5d:1b:eb:55:78:0b:ad:43:36:9b:5e:a8:
11:62:2d:02:50:b9:dd:2f:de:b9:e5:d7:18:e7:5a:53:00:42:
7b:3c:82:b8:26:db:bb:c3:31:94:4e:92:74:6b:76:95:97:22:
47:97:24:96:94:f6:7a:3f:f3:26:88:21:37:72:58:ae:a6:e7:
69:3f:d7:57:85:ac:ad:43:be:b2:95:1c:f8:a1:ab:44:8d:ed:
b8:6f:31:b8:b3:13:31:74:60:0c:30:56:69:7f:ed:94:44:77:
07:6e:07:07:e9:53:aa:c9:e6:72:c9:35:95:ac:9f:28:e2:dd:
84:a1:6c:cf:bf:f2:bd:c5:eb:03:90:45:94:f1:82:3c:55:6b:
03:81:40:67:fb:ce:80:83:8d:24:f2:a6:e4:a3:16:37:36:81:
8f:9e:09:60:5b:fa:f3:74:60:ef:d4:78:c6:23:6c:f7:e8:bb:
29:a2:df:99:dd:ac:1c:5e:52:d7:f7:68:18:9a:66:48:c5:19:
2f:4a:fe:f4:ab:ad:dc:b3:76:53:48:52:04:f4:1c:82:8c:36:
62:ce:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:56 2025 by rpki-client