Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: kfk7CnCQO/Ivs24vjwC2XM4CD6hfbHZCI9IYSQZJ36o=
Subject key identifier: 7F:20:25:E0:05:DE:54:17:74:65:E7:12:68:D1:A2:E4:D2:97:1F:21
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 0194BC3BD9F5492396FCC775968BA4A90F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: K+Y0qwR7BS94ayXLHEiWXNKvdH2dBEvUjkaLs2s0qis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:f5:49:23:96:fc:c7:75:96:8b:a4:a9:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=7f2025e005de54177465e71268d1a2e4d2971f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:7a:ed:8a:05:f4:03:49:70:6b:b6:c9:8d:
ee:a0:88:87:09:e7:71:23:c0:a6:64:be:6b:0e:50:
e8:7e:2c:eb:47:ff:c3:f2:a0:03:29:60:9a:a2:ef:
c2:99:83:0f:46:54:45:30:6d:31:d8:72:cb:7d:59:
0b:fe:77:d1:6e:c4:74:a9:ae:93:60:1c:41:fa:d7:
99:58:42:2a:40:a0:d8:33:95:dd:06:8c:c3:dd:a9:
af:e7:b2:ab:4f:a3:22:97:1e:04:83:64:3f:0f:b0:
ea:e2:09:d9:a9:b6:19:47:ad:aa:6c:9e:94:f7:19:
1a:8a:8f:60:ad:9a:45:a5:41:55:18:64:fc:75:6c:
df:b4:2f:6d:50:68:ef:a0:3f:eb:5c:d7:60:34:cc:
60:de:bb:6b:47:9b:df:03:ba:15:2f:3a:03:6f:d5:
10:0b:77:73:fa:b7:7e:ee:67:a5:72:85:92:c5:a2:
f6:e0:62:9e:c5:62:23:32:c3:37:b7:38:fd:2a:61:
7e:16:28:9e:48:84:29:ae:60:81:36:bb:2d:bf:d6:
f5:03:3b:98:8c:c2:cf:05:35:b0:5f:28:e4:ad:33:
bd:f4:ce:e3:67:cb:97:fd:80:ca:63:64:59:7f:72:
76:e5:2e:04:c2:24:cd:55:12:80:92:b0:53:2c:ff:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:25:E0:05:DE:54:17:74:65:E7:12:68:D1:A2:E4:D2:97:1F:21
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:03:22:9f:d9:14:f9:11:99:46:be:20:b3:d2:20:3f:d1:
6f:78:51:40:da:1e:01:dc:62:eb:43:de:0c:12:b5:40:fb:30:
5b:ad:bc:02:38:0c:22:c6:b8:a2:21:77:6c:f0:bf:11:65:3c:
9e:32:ae:ff:e3:dc:14:9c:7f:30:3a:53:b2:a4:6d:ed:cc:7f:
0a:fe:c1:1b:d9:e4:c6:9c:96:ad:34:0f:fe:96:46:91:7d:e9:
c4:87:e4:47:5d:e1:41:5f:39:7f:c6:b7:ff:08:bc:e8:54:aa:
96:b5:69:21:a9:99:f5:dc:78:a5:a7:35:21:26:11:5c:b1:a3:
9d:29:c9:a2:38:30:06:af:44:a6:41:2c:4f:82:42:bf:05:1b:
63:fb:b3:72:df:2f:5c:e8:25:6d:e4:93:6b:4a:d6:f5:b3:cb:
b7:b3:a6:6a:90:55:5e:1a:6c:18:ff:30:53:99:e1:7e:d3:c9:
39:4a:a0:09:37:3e:ae:ea:88:3c:f8:b5:12:c1:89:be:ac:b9:
a4:d9:8c:05:83:71:63:e6:bb:2f:ed:b2:e2:17:9b:22:d3:76:
9b:7e:59:fa:fc:5b:ba:61:53:5a:ed:03:e4:6e:db:ad:c2:c2:
86:f6:61:c3:e2:ba:b8:53:5b:58:60:3e:12:3b:f5:4e:53:98:
65:9e:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:11 2025 by rpki-client