Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier: qEVDxmEBLMsHahR7QaCMupq8QUtvbQyrJRifpcTg+3I=
Subject key identifier: 17:7B:1D:7A:9E:BC:FE:29:62:CD:4A:0B:37:92:3F:4F:4C:B0:2E:BB
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial: 0194BC3BE2092BD4E365036BA67C597FF45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number: 4C
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 0otUjOmrbrE-UtuXVDDSBPTMgt4.roa (hash: /6O4kder5Q4c9HIL3TM9q/fRb3AXNbQJDsO22/m8/9o=)
2: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: QrEhi3I0w/WZFywlBaSQxizBMAUEw1YTAYclIbvPbBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:09:2b:d4:e3:65:03:6b:a6:7c:59:7f:f4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=177b1d7a9ebcfe2962cd4a0b37923f4f4cb02ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:83:8a:84:5f:60:ad:8e:41:04:bf:36:63:
a9:48:db:55:77:c1:60:ba:f7:6a:69:33:e2:35:70:
fe:15:e0:d3:10:6e:7b:92:dc:27:97:5a:50:e7:38:
d8:0e:11:c3:92:8d:b7:3b:84:0a:04:cb:d8:e2:89:
37:71:4c:76:22:7e:b1:7e:70:1d:e1:13:fb:9d:46:
b7:ba:a5:57:ca:bd:4e:11:7e:1e:07:48:d6:8b:03:
88:0d:f1:e6:7a:05:52:8a:90:2a:54:00:ef:b3:bd:
99:3d:24:6c:ef:23:fc:d6:be:c1:58:5b:7a:c0:0c:
23:37:52:ea:f3:f1:3d:4e:70:d9:4b:68:cf:29:68:
1d:3b:4f:7b:1c:5d:07:5e:77:73:51:0d:9b:7d:f5:
37:41:41:62:74:98:e7:0a:75:85:a1:24:38:bc:31:
76:90:83:45:68:6b:cd:85:04:7d:c1:aa:5c:f8:fd:
cb:a3:8f:5b:a5:ac:dc:7f:90:9d:21:cb:f6:b2:f5:
e9:03:49:72:3c:77:99:01:ad:7b:65:eb:5c:40:6a:
68:7a:9c:1d:36:cd:b9:d9:a5:4e:e3:ee:34:b1:ba:
d0:95:eb:57:04:03:bb:b9:d5:ec:67:28:47:9e:92:
99:cf:0e:59:ca:85:e2:59:a4:6f:c7:6a:b1:36:47:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7B:1D:7A:9E:BC:FE:29:62:CD:4A:0B:37:92:3F:4F:4C:B0:2E:BB
X509v3 Authority Key Identifier:
keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:04:f2:74:8f:e6:79:85:98:d5:a5:fb:b6:71:a1:53:b4:f8:
dc:86:e8:f9:03:94:fa:07:dd:86:93:6a:2f:81:e2:fe:b6:f2:
48:41:17:cc:c1:75:f0:aa:f8:9a:c9:67:76:01:e7:9e:12:c5:
00:c4:75:e9:5f:26:7b:3f:33:c8:16:e5:da:a9:00:03:6c:92:
8c:df:05:6f:54:f9:7b:fd:3f:2a:e6:f2:ec:9c:22:c1:a2:fe:
64:09:7d:77:b3:0d:c4:bd:52:09:4a:a8:6d:bd:4f:4c:48:14:
51:9d:e5:1d:83:c9:d4:ae:6c:6a:c1:34:a9:70:a8:fa:c3:40:
5b:cd:af:2a:a2:1e:1c:27:95:56:e0:3e:94:4d:9b:d2:73:bd:
0f:b3:32:c3:47:82:8c:0c:68:f6:32:7a:08:86:e7:5e:8b:25:
2f:25:23:6d:91:25:2a:58:87:3e:11:a7:02:d7:e8:b7:e8:4f:
b3:0f:26:d9:72:51:7f:2b:05:30:cb:99:a0:63:8b:ba:90:e1:
fd:48:94:d4:8c:ee:65:e2:91:98:28:64:f6:e4:a3:15:b1:88:
44:85:ea:43:7b:a5:26:89:50:6f:1d:9c:26:2b:21:8b:29:c9:
4d:c4:b5:e8:d0:61:52:df:2c:bb:65:ae:90:df:30:3f:a4:82:
0b:5c:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:42 2025 by rpki-client