Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: nLMRB0joDPORbAEt0rVeLRjvuQ1G1lzJ5rSfsM8i5Rk=
Subject key identifier: 67:7F:2A:C5:5C:99:0D:5C:64:32:72:B3:CA:84:80:87:B5:C0:AC:AF
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 0194BCA9DD1CFB95BC8AF3FCF7DB23506000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=)
2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: 9rTeQ5kZpP0hP9u4qyJn15grZwkXqL4ZIv9TjcIBqao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dd:1c:fb:95:bc:8a:f3:fc:f7:db:23:50:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=677f2ac55c990d5c643272b3ca848087b5c0acaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:e6:a7:9d:69:81:be:68:61:21:e9:06:96:
8a:40:e2:03:97:99:90:07:48:cf:18:ed:16:b3:7c:
ee:10:d3:99:1d:59:0f:fd:79:e2:93:5d:fa:74:4d:
3e:74:c8:13:bc:9a:ab:b7:55:43:3f:9b:ed:a5:2a:
34:3c:10:74:28:f5:f3:f8:da:34:48:be:ec:68:5a:
4c:27:b5:8a:63:e7:d3:2e:9c:05:b4:14:aa:20:3e:
7b:09:68:71:5a:4e:d7:0a:3e:77:07:f3:a4:b2:ad:
8d:92:9e:05:ea:59:7f:a0:db:51:63:ba:2f:aa:8d:
54:fd:7e:af:4c:5d:21:7b:a7:5e:24:b6:36:77:1c:
6a:3f:44:cc:d0:b3:51:1e:97:c3:46:b0:e6:db:6f:
b3:a4:d2:3a:ba:1c:a8:41:e8:6c:cc:88:f5:d7:ac:
04:3c:fd:e6:c2:25:de:06:29:fb:e8:1a:26:3e:ca:
9f:42:d1:8e:04:ae:c4:f9:8f:73:58:bf:a7:14:a7:
1c:4c:00:15:c6:19:ee:a1:5b:4f:56:b6:db:a2:36:
f3:59:47:19:d8:cf:88:b0:78:d7:e4:8b:43:0e:63:
ad:3f:8b:0c:86:4a:e2:3d:cc:23:7a:f3:c0:48:37:
9f:f2:66:7e:aa:37:50:9e:79:c2:39:fc:91:1f:e2:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:2A:C5:5C:99:0D:5C:64:32:72:B3:CA:84:80:87:B5:C0:AC:AF
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:37:53:fc:b9:ad:6a:3f:29:d1:51:9e:e0:6f:f5:8f:af:84:
15:8c:b2:b7:73:1e:93:85:e0:7c:84:4f:fc:7d:2d:88:6d:05:
44:b0:8b:a1:e7:1d:b2:ac:58:7f:11:bc:58:60:23:55:1e:90:
bd:ea:ee:a7:e3:f6:85:6b:b5:c9:e8:ab:0d:72:23:84:4e:ee:
4e:2a:c0:71:fa:f7:e2:8f:89:7a:cd:05:02:a5:c5:70:13:54:
1d:5f:0e:b7:85:ad:b0:2f:06:23:15:ad:66:78:96:38:1e:ce:
ca:66:ec:60:2d:42:9e:75:f6:62:c5:a7:e0:13:04:53:d7:04:
97:e3:24:df:99:3d:88:88:6b:65:c2:af:75:5b:0c:e8:87:b4:
ab:5c:da:b7:be:df:24:c9:91:6c:b5:5c:ce:7e:26:f2:46:38:
51:19:83:a4:22:12:c5:43:79:ee:ac:34:b1:a3:33:cb:d1:e0:
66:8e:b2:e5:61:62:d1:d3:bc:d8:00:98:59:47:8b:21:37:c3:
79:ec:6a:e7:75:52:f2:0b:46:43:0f:cf:78:b0:80:4d:0a:7b:
68:e4:08:14:f4:8c:b8:81:70:0b:fe:85:e7:9b:88:c0:b6:4e:
9c:b9:19:95:39:4b:1a:f5:dd:1d:37:6a:a4:25:ea:98:91:de:
1e:a0:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:04 2025 by rpki-client