Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: oyl/IzmTZdpXMQSQLSHEzAJdxEIZtuLM1qWt6OjpLqQ=
Subject key identifier: 59:CF:60:DC:17:F0:28:DC:7F:5C:40:C5:1C:CC:E6:2C:6F:2E:73:8E
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0194BCA9ABA98B6DB2972E05251E91AE8217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: KyRw/s4qbbL8nNAXnwLljt6xY0GqnDqBLCtEwfjiPDs=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:a9:8b:6d:b2:97:2e:05:25:1e:91:ae:82:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=59cf60dc17f028dc7f5c40c51ccce62c6f2e738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:68:25:88:26:49:9b:19:fa:b6:bb:ea:3e:
1d:f7:8d:ae:8b:10:85:59:e4:70:63:9b:15:94:9b:
e3:35:d4:e5:8d:c5:97:5b:50:0e:ce:ac:76:ff:a3:
6b:94:08:61:93:26:be:29:31:58:a0:27:ba:41:bc:
54:f5:ee:06:a1:b2:ec:2a:59:25:2d:f4:08:2d:a9:
d7:30:55:19:ab:e5:28:75:c2:11:04:90:df:87:7e:
83:11:2f:75:11:08:33:48:b0:df:d3:4c:1f:e7:0b:
8e:d7:50:a0:47:3b:e7:ea:6e:a8:8e:3f:93:1b:a4:
9d:39:db:af:38:bd:29:90:6a:4f:85:a9:25:bb:a4:
04:e5:a4:3b:cd:71:95:56:9e:d7:11:8f:cb:4c:a1:
87:8b:91:52:0f:0a:d3:83:d4:a6:03:35:af:67:94:
2f:00:95:70:e9:17:e7:11:3b:57:b3:7c:c2:96:7b:
1e:62:ed:59:aa:1f:6d:c0:01:c2:1b:1d:df:c6:bc:
a2:7d:19:40:cb:fb:ca:97:f5:4c:39:fa:7b:0c:8a:
e3:15:fa:f1:06:a8:1f:3f:11:2e:ae:b1:91:01:6e:
e7:ee:82:7a:00:cd:e4:a0:33:cc:a8:9b:b8:ad:02:
84:71:c1:6c:c1:bc:1d:3d:17:c8:36:ae:4a:cd:6b:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:60:DC:17:F0:28:DC:7F:5C:40:C5:1C:CC:E6:2C:6F:2E:73:8E
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a8:e5:02:04:9e:cd:a9:3a:be:ec:53:7d:11:cb:ad:68:e4:
05:fe:c2:99:14:c4:95:9c:d1:76:af:08:a5:f6:18:c3:78:55:
f5:3a:c2:84:fc:7b:47:78:71:3c:9f:f9:dd:dd:13:49:9a:e8:
05:9b:1b:25:b0:2a:82:63:83:df:2e:f6:81:9d:11:2e:db:0f:
d9:b4:ed:67:16:7c:33:89:48:35:8b:7f:73:36:84:53:e8:ed:
ef:e4:09:65:c7:25:23:e9:b5:d6:10:d2:d7:fc:12:a1:c4:ab:
24:d0:06:c3:be:d3:b0:f5:ad:f7:8a:5c:bb:39:4b:97:23:ee:
93:4f:8b:fc:63:67:6a:4e:ce:79:6a:03:54:7c:fc:bb:bf:99:
b4:2f:05:17:64:c9:c1:72:de:46:a2:92:e8:2e:79:c6:d9:db:
aa:dc:e9:7a:0b:18:2d:e6:6b:38:02:16:a4:64:6f:ad:e7:87:
46:5c:73:af:79:1d:c8:37:c0:67:7e:de:a6:db:1f:71:5e:56:
09:23:52:9b:14:1d:31:b0:0b:99:38:88:13:49:35:a6:2d:6a:
ef:ec:94:9f:fd:42:93:43:bd:45:10:d6:20:91:de:4d:03:35:
81:9d:3f:b7:c4:0d:a4:1e:a4:d8:b6:a1:de:94:69:f6:dc:96:
4e:9a:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:30:28 2025 by rpki-client