Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: 1sIfLxdgoo+A4Di7jzfEEN4O8m8wfRi0I/lBzRjKP6I=
Subject key identifier: F6:2A:C5:03:94:F7:F7:43:CC:4B:41:EA:FD:C4:FA:A6:35:B0:1F:94
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 0194BBCE81D00C0B1F91CC6CB27B6EF02588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 104E
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: MuyT5ZMaL6FnavHuddeyzn/dC7VTs478j00avoZiWDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:81:d0:0c:0b:1f:91:cc:6c:b2:7b:6e:f0:25:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=f62ac50394f7f743cc4b41eafdc4faa635b01f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:75:07:1b:c9:e2:07:21:9d:18:b9:83:0b:
f1:45:45:cf:0c:3a:f8:17:b5:24:2f:2a:57:c2:57:
50:43:bb:9a:39:3d:e7:e3:5c:a1:b8:bb:3c:99:67:
3f:6f:86:a6:24:47:2a:85:d2:f2:1b:2a:45:ce:34:
51:af:92:b4:4d:f5:bd:ac:0e:ef:ae:12:87:ab:71:
2e:95:fe:0c:88:1c:c9:bf:28:12:96:d9:fb:15:08:
a2:f1:63:9d:d6:95:21:9e:4f:9b:8e:e7:06:1a:9b:
7f:7a:1d:cd:d5:75:ba:ad:66:c2:46:7e:dc:da:b1:
ae:cc:bb:41:f9:b3:30:ad:3d:36:9b:06:4a:6d:7f:
23:7f:97:45:64:c1:a5:83:fe:46:59:63:b0:6f:fd:
f9:47:a1:be:fe:a6:ac:e0:e8:ab:04:d1:df:ba:cc:
72:ef:34:df:86:fa:29:08:e2:d6:66:76:cd:31:e7:
49:d4:41:0b:fd:d0:b8:91:58:ae:38:2d:bc:12:53:
7f:c0:3a:07:43:59:95:a5:ec:45:a4:13:a2:e0:ba:
4e:77:a6:11:c1:16:7f:3e:1f:5f:9e:df:18:5e:16:
a8:6b:e4:50:3f:58:72:01:50:e0:bb:d0:65:64:7b:
2d:ab:55:42:0f:20:48:cc:60:64:b4:b4:c3:43:d1:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:C5:03:94:F7:F7:43:CC:4B:41:EA:FD:C4:FA:A6:35:B0:1F:94
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d7:d1:56:43:60:43:8e:53:ad:df:2b:44:8b:51:1a:48:e9:
78:a3:87:be:e1:7c:5c:6d:f4:56:4b:24:89:40:59:6e:27:85:
3a:5f:f2:7e:b2:65:f5:e7:f8:f3:02:4a:e0:61:70:38:8c:1c:
37:1a:f4:a6:66:33:8d:53:8a:cf:76:35:7f:36:25:e6:42:09:
4a:37:40:9f:74:30:b0:c3:37:09:84:6b:35:af:c3:63:e4:1d:
2a:b3:a4:51:bb:d8:ed:49:34:98:a2:fa:b3:76:a1:cb:af:e9:
6f:e7:ce:6b:06:74:5c:63:62:22:10:49:44:cc:f1:2d:cc:84:
62:9c:ca:14:12:c2:75:28:7d:04:ca:70:47:e2:4a:fd:f6:ec:
2b:c1:9b:5d:9b:43:6a:6e:6e:ba:56:87:23:48:e0:43:a6:98:
a5:a5:37:e0:2b:34:b3:a7:f2:b0:57:c4:dc:ce:0b:2c:3e:37:
20:69:f2:67:65:67:64:a9:ce:6f:89:29:e1:7e:a2:47:f5:eb:
53:6c:05:81:67:75:c9:88:c1:4f:80:91:9f:af:bc:f5:f9:c0:
93:64:b9:72:d3:a7:7a:7d:e4:eb:c0:bc:b4:c5:dd:1b:cf:ea:
b1:84:8a:69:80:5f:78:7a:6b:49:2b:78:3d:11:76:37:58:4e:
ad:5b:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:58:59 2025 by rpki-client