Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: 1ues+TM2mMnEb7VYlUzWd4yHeumvLO2zOQkq2A+tIzU=
Subject key identifier: 5C:2A:46:B3:F5:C0:37:37:55:CE:9B:B4:E5:8B:75:C5:A7:59:6E:8A
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 0194BCA96BFDFCB6F7E35B93BEDD29D49083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: zMtpYtecZ+fgB7a7hTbVMf4+0az1R4zlHwlBdfI0l4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:fd:fc:b6:f7:e3:5b:93:be:dd:29:d4:90:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=5c2a46b3f5c0373755ce9bb4e58b75c5a7596e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:dd:d3:d8:ce:ae:88:d8:82:72:16:37:5d:
2b:1c:72:86:23:cd:37:21:a6:6c:1a:ca:58:61:3b:
d1:ee:83:00:c7:d9:46:a6:68:26:f5:0f:2c:5d:26:
c8:aa:d6:49:f0:d4:c1:53:83:e9:f6:2c:0b:ef:da:
15:4b:1c:88:ea:e9:bb:cf:8f:5f:93:a3:22:4c:7d:
9b:49:f9:8b:1a:0e:7c:de:ad:f0:82:9d:5a:83:f2:
79:c7:8b:fb:0e:56:08:b2:90:ec:51:33:70:2e:67:
05:20:ea:cd:00:6a:8f:3d:5a:7b:f9:30:96:40:1d:
3f:b8:71:e5:7b:fd:f9:37:98:78:d6:ac:9e:f0:ef:
22:17:e0:a8:27:e6:77:7e:f6:de:b5:b3:e9:ff:ee:
e1:78:d4:31:44:35:b8:9c:84:e1:5c:5e:c5:80:15:
32:79:0d:c4:39:fe:2c:a3:20:15:74:de:a5:ab:34:
dc:69:4e:57:a0:4a:dd:01:a4:42:f4:5d:13:47:9c:
d7:c3:bb:42:5a:17:44:c9:49:a4:ee:e0:75:ac:87:
88:f4:a5:7a:1c:07:08:f2:bb:f6:9f:e6:5d:09:65:
70:a4:2f:6f:7b:1e:63:68:59:ff:08:89:e7:ad:db:
74:ea:37:ba:a0:66:96:1c:24:18:0f:c5:b8:ac:1f:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2A:46:B3:F5:C0:37:37:55:CE:9B:B4:E5:8B:75:C5:A7:59:6E:8A
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ce:93:1f:c0:6c:1d:68:b9:73:03:62:1a:dc:df:eb:ed:d2:
6e:9d:49:08:9a:cd:e4:94:d9:63:96:23:cb:b5:25:ee:2c:bc:
c1:c0:26:99:e5:b8:15:a3:99:00:d9:95:dc:52:33:89:d8:44:
bc:1e:c7:09:1b:52:37:64:38:15:a6:b5:03:fd:60:fe:75:27:
6f:b7:4d:06:49:ec:19:0f:64:20:74:da:27:62:ca:ba:33:58:
a0:64:47:79:c9:4b:ba:f8:9c:66:a5:f2:4a:1d:d8:9e:f0:86:
37:db:10:8e:7f:71:b9:a4:a9:22:6c:dd:db:28:5c:6f:c6:39:
c8:00:af:bd:e2:8f:28:26:e9:f6:2a:3c:79:83:43:1f:76:be:
71:92:9f:0f:55:d0:e3:40:9c:98:cc:bd:fb:22:0e:08:ac:ea:
da:89:0a:a7:65:bd:1d:29:54:9e:d2:c2:1f:a9:ea:b3:c7:93:
b7:e1:8f:03:7b:ac:16:da:7e:08:39:09:ef:97:b1:9b:60:2e:
05:bb:cb:44:07:22:bd:79:57:a4:19:58:cb:44:65:ff:22:41:
c5:a0:45:c2:07:65:60:c8:e1:86:b2:45:ae:23:12:79:43:84:
5c:23:9a:55:22:3b:10:79:b0:44:92:f2:fc:82:0b:38:de:e1:
a9:a9:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:56 2025 by rpki-client