Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: SISFiVzyoz7xztEAdw0s61A9p7xFs4fmbOiNVJpG7HA=
Subject key identifier: 85:BD:32:3F:7A:CC:10:F0:93:24:2A:FF:A0:82:EE:92:60:B6:D6:93
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 0194BD174D40B5501CC85C54DDCBB32EBDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: AKDJAp896AzdU73ePzNEsZHyd9IDePX2Sp0GcpqLD6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:40:b5:50:1c:c8:5c:54:dd:cb:b3:2e:bd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=85bd323f7acc10f093242affa082ee9260b6d693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:ed:5e:d5:2a:49:9f:3f:18:6c:19:b0:eb:
04:8a:90:da:96:2b:3c:b7:0f:71:cd:9a:c2:cd:7a:
0e:3c:e9:2c:9e:65:ce:f3:0f:f9:d9:6e:11:01:64:
84:63:ad:0b:84:c4:01:4c:a7:16:4f:f9:a6:06:f1:
e9:82:3f:3c:7f:c1:4f:86:dd:98:ac:33:0a:eb:c9:
a8:2f:0c:1d:ba:eb:b6:91:5b:63:1a:72:8c:2a:ae:
bb:0d:cd:6b:dd:40:f9:6a:c3:ce:e1:04:e8:39:d1:
60:5d:b4:f5:d0:98:56:c0:5f:28:80:36:1d:22:96:
70:73:40:5b:13:05:6f:ad:b9:2d:eb:a1:b0:ad:da:
4b:ea:3c:b7:6e:6c:60:eb:66:9f:78:b9:d5:93:ec:
91:bf:08:0d:17:c3:20:a9:3e:5d:61:c8:74:77:11:
cb:fd:78:cc:fc:14:24:9b:87:ec:32:4f:5a:bc:c4:
96:ec:37:c8:e6:11:e5:a4:aa:b3:b0:5b:f2:3b:6f:
12:1c:e5:71:fa:7e:67:7a:02:c8:f4:3a:11:94:d1:
cd:f0:5e:80:af:aa:3f:8b:4f:f9:b6:96:2e:e2:5e:
6d:db:c2:2b:51:a3:fe:b8:6b:64:22:43:45:bb:7c:
02:28:0e:49:26:5d:49:12:c2:62:76:e1:45:05:f0:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:32:3F:7A:CC:10:F0:93:24:2A:FF:A0:82:EE:92:60:B6:D6:93
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:38:d0:75:73:69:fc:0d:ce:d2:d4:35:7e:ae:f2:74:61:
14:af:f9:7d:6d:60:29:b2:62:f3:2e:f9:fd:1d:07:fc:6e:0d:
8d:e2:37:13:b4:d3:70:c0:09:02:61:0c:a1:1e:9a:41:56:77:
13:6a:f9:9a:a1:27:d8:03:0c:f5:55:1a:7c:5e:e2:39:a0:f3:
b4:a0:25:2f:d5:a9:1d:b7:96:31:a1:37:1e:e9:98:42:a4:90:
83:14:4d:f8:b6:88:0d:4f:80:76:54:cb:f0:7a:fe:57:b0:6f:
2c:bf:27:28:88:8f:87:20:84:80:93:91:31:66:d7:e0:6d:48:
37:21:6a:cc:9f:7e:ca:7b:d8:c6:e3:03:eb:c7:92:9e:46:17:
3f:61:4b:af:0c:d0:b3:23:06:6f:19:79:29:4b:e3:42:38:06:
53:cb:0e:fe:a4:5e:77:73:64:02:ec:3d:6c:f8:4b:a7:9f:8b:
00:ad:49:1a:c6:16:d7:b4:ac:02:6a:26:40:83:73:d9:5c:00:
6b:92:38:e2:e6:ef:6d:d9:d1:17:c3:3b:2e:04:43:f3:13:9e:
ac:fe:98:5c:bc:55:1e:6e:ec:4f:f6:32:f0:21:47:60:87:6c:
3b:e9:aa:87:60:56:85:95:86:72:8e:25:28:89:71:a2:7a:91:
b6:28:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:38 2025 by rpki-client