Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File: Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier: MdT4+XhJ6SLWYn4kYlVk0MqWVXt6iBuc5XoCLrUSFEk=
Subject key identifier: 96:45:CC:D4:7E:14:CE:9B:2E:1D:7E:9C:A2:1A:8B:68:84:EF:E6:A7
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 0194BBCED045395D36E16CFE5AB0E1742869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: K+rasL7mY8dHsMMSJVbo6OHs7d6xGA95WxnDC+ep1Qk=)
2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:45:39:5d:36:e1:6c:fe:5a:b0:e1:74:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=9645ccd47e14ce9b2e1d7e9ca21a8b6884efe6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:30:2a:db:89:fa:e6:a0:4d:47:55:60:2a:
af:13:23:86:ba:1d:20:10:07:3f:34:08:20:5e:88:
6f:0e:72:05:d6:ab:c0:47:da:c3:0d:d6:0b:c0:a0:
f4:64:4d:80:34:de:e6:76:c5:36:94:98:4d:17:57:
77:f4:11:85:ad:4c:51:a6:2e:08:58:fd:7d:6c:5a:
89:79:49:81:db:c7:da:38:76:cc:c9:a0:31:45:c2:
94:59:3e:cf:86:20:42:47:70:91:89:7b:2a:6c:aa:
31:28:6a:6c:82:5d:44:a3:2e:8e:36:b7:4e:73:8f:
9e:82:3e:ad:89:6b:60:8e:8c:09:db:1d:e7:e9:74:
1f:7b:b1:0c:de:cc:fa:1b:3c:31:d5:3a:bb:b4:bd:
66:40:63:4c:07:4a:f7:be:99:66:74:90:50:4c:6e:
fa:9d:39:cc:ab:19:08:cd:9f:62:87:58:7b:ee:7c:
d9:6c:5b:8d:d4:05:e3:86:84:b2:11:95:9b:37:e3:
db:6d:7b:78:35:d3:c4:2b:98:40:61:d5:c4:23:98:
4b:f8:99:6c:1e:67:f4:61:b2:4f:24:73:93:6f:02:
18:54:05:41:a8:0f:c6:c3:77:87:3a:85:d4:64:71:
ee:00:09:4c:43:41:79:52:86:db:ea:6c:3e:50:53:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:CC:D4:7E:14:CE:9B:2E:1D:7E:9C:A2:1A:8B:68:84:EF:E6:A7
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:3d:ae:1c:ef:2a:2c:b0:3d:a1:54:63:7c:1b:e3:80:a4:
ee:ad:13:d4:5c:9f:8f:e2:b5:1d:ba:ed:0f:ee:a3:ab:e2:fd:
b4:e3:a2:56:e4:1d:8d:68:8d:65:87:14:9e:e1:32:58:bc:34:
e3:78:f4:d8:d0:0f:a0:e8:6a:b6:d3:62:07:d8:5e:72:a4:75:
da:b0:c9:d1:27:08:79:cb:9c:f7:44:ca:2e:ca:c2:78:6d:c7:
5c:df:8d:7a:24:e6:d1:f8:fd:2d:16:85:06:53:1b:43:e7:04:
3e:7a:9f:f3:a7:da:dd:4a:83:0c:22:55:cd:5a:73:c4:b4:01:
2f:14:56:f1:b3:fb:20:b7:09:d0:2b:87:56:2c:4a:71:95:49:
f1:5d:e6:37:cb:7c:a8:bb:32:2d:02:6d:85:bb:78:8c:ec:18:
df:78:bc:aa:40:8f:a7:4a:8b:dd:5d:b2:db:a4:4d:ee:7d:a3:
be:77:04:af:c7:c2:b2:0c:96:6e:67:d8:15:82:d1:4d:59:13:
38:9d:f4:3e:dd:fd:28:81:bf:ca:e0:5f:2c:8e:1f:61:e8:2f:
88:b8:d3:8c:b1:15:96:02:ba:d8:d9:39:00:50:c5:4c:5a:71:
78:1e:f7:57:4e:ea:3d:c7:1f:b8:d7:a6:9c:e3:7c:61:df:5d:
50:bf:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:05 2025 by rpki-client