Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: e99QA0Ev0XnNG4URgbO7j4iZV2KVTiNErOpSbWXj3BE=
Subject key identifier: 6E:EF:F7:1F:47:AB:5A:6A:6D:56:8C:BE:D1:50:F3:D4:F6:BE:E6:DA
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 0194BC72D8B511EEC1E9B187A79C25C3FBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1175
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: Dn4FyLcCjx+EPx19gOsJmOBNf3lfec/L04GLluAbiKU=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:b5:11:ee:c1:e9:b1:87:a7:9c:25:c3:fb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=6eeff71f47ab5a6a6d568cbed150f3d4f6bee6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:bb:f3:72:ce:78:c7:18:f4:4c:61:1c:56:
f9:59:72:33:eb:78:fa:ce:ba:e5:a1:e0:87:da:a1:
7c:3c:8b:72:3e:0d:75:92:f3:12:d2:4e:62:b5:7c:
69:d1:b8:98:ca:94:09:af:de:f6:fa:70:b1:71:16:
91:3f:14:b5:a8:6e:01:11:5b:55:fe:df:6c:8d:43:
4e:9b:4c:e4:50:88:a3:a9:7e:96:95:7b:a0:e0:b0:
a9:b6:b6:bc:9c:ed:4f:4c:c8:30:ee:9a:11:be:32:
88:f2:b1:a1:be:b7:61:d0:4c:0e:87:a9:df:92:61:
5e:ac:e2:56:df:3c:75:47:47:65:7d:dd:ed:13:08:
66:83:f1:08:bc:ff:aa:88:84:2d:50:e7:a6:78:38:
05:95:d2:ca:b7:11:1d:d0:07:22:ea:31:0f:92:9e:
2c:d0:c5:43:f0:84:b5:61:ee:50:23:9e:45:69:db:
f3:d0:7d:35:0c:c8:c4:ae:ac:a8:c3:98:01:e8:37:
18:8b:d9:8b:81:59:0d:d5:b9:96:ca:a0:82:ba:b0:
da:50:be:c5:da:de:2a:c6:43:d7:23:8a:61:8e:f5:
e4:ff:d9:e8:12:16:1c:e9:a5:c4:2c:c4:06:03:b3:
ba:9e:0f:88:ff:e6:70:cc:d1:85:8c:e6:7b:45:17:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:F7:1F:47:AB:5A:6A:6D:56:8C:BE:D1:50:F3:D4:F6:BE:E6:DA
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2a:05:b2:c1:e4:f5:f7:cb:f1:a5:bb:cd:17:41:52:57:a9:
48:12:36:70:f3:35:66:5c:e9:bb:0a:9c:33:54:e4:45:1e:ad:
be:da:fa:52:c9:22:0b:35:5a:e1:56:0b:d8:37:ee:d8:d2:f9:
bf:09:6d:cf:b7:1a:0b:46:42:2e:83:a9:e5:84:4d:a5:d8:63:
d8:96:e5:80:1c:e9:a7:e0:d4:38:06:a2:83:94:e8:03:9c:ab:
2c:1e:77:a9:de:6e:d9:aa:00:b2:ab:36:e6:5e:1d:e5:71:9f:
62:cd:ff:9c:4e:d3:ec:d2:53:f7:e6:4f:21:8a:37:38:02:5b:
fb:98:74:ce:b8:f8:00:2d:c1:68:46:c5:d3:02:1f:b6:c2:5e:
a8:cf:b2:e7:24:ca:31:a7:3e:d0:75:93:b0:ac:12:b2:ff:af:
c6:5d:26:9a:70:b8:e2:89:9a:f9:2e:e8:bf:02:bd:ca:b1:e0:
1c:54:af:88:b2:7e:5e:3e:b0:16:7c:c6:1d:54:fd:a1:f1:12:
6c:d1:0e:83:31:26:72:d7:37:dc:45:8f:07:eb:5e:fb:f7:c9:
f4:71:a3:d4:02:b2:ff:a2:5c:54:74:38:25:1c:23:09:dd:bb:
36:07:2f:59:40:8b:12:30:52:01:d9:3e:9c:a4:5a:9f:b1:5e:
7f:dd:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:23 2025 by rpki-client