Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: JxVFHpT/qPBDw9Rwc9ILzo6Rt3X/wSbqeETN1NPw/HU=
Subject key identifier: 37:A6:D6:5D:7C:0C:8F:D8:B2:4C:A2:DF:85:47:0E:EC:20:60:C3:E0
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 0194BBCEB7EE283D1F6AB605BC40A4EB29BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: HBT3ebsdi9RfH/3++sQKGMJ9Md43qi/kU3lbFWrF2nY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b7:ee:28:3d:1f:6a:b6:05:bc:40:a4:eb:29:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=37a6d65d7c0c8fd8b24ca2df85470eec2060c3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:ea:97:14:7f:87:6c:a4:82:b9:69:4e:da:
d0:20:e6:1d:24:bc:a3:19:f3:76:16:88:da:e2:a2:
0a:23:78:e0:c7:b9:d4:02:13:12:4f:60:1d:ab:19:
ec:9b:2e:12:94:1a:f2:13:2b:66:62:b0:0c:68:67:
95:21:ed:30:3f:9b:3d:ab:b3:6e:86:60:07:3a:0d:
57:a8:b9:8f:db:17:03:b9:c8:d4:49:c6:ad:1e:f0:
41:be:d3:80:df:ff:1e:71:e5:ca:d7:8b:65:77:ad:
75:fe:e7:e2:74:97:f4:f1:b9:51:51:d8:f3:9b:95:
15:08:b7:a4:5e:38:1b:0a:be:0d:89:95:ae:b0:a1:
74:f4:f4:62:64:d0:86:73:a9:16:96:ab:e5:3c:78:
dd:bb:4f:fe:6f:b2:39:1a:ce:0d:b4:41:6c:41:a3:
b0:e4:b8:b6:86:65:d9:76:17:1a:84:f5:37:29:99:
4b:4c:78:14:b1:53:b1:a1:af:dc:d3:31:5a:ca:2c:
f2:63:8c:6d:27:e7:e8:df:26:7a:f5:72:2c:a4:15:
cf:95:a2:e2:3a:e3:81:13:56:a6:c6:83:da:aa:e7:
5a:e6:bb:f7:0d:10:66:81:e0:d8:43:12:65:36:17:
61:0d:f6:3a:06:b2:bd:24:bf:a2:e3:55:82:4f:0b:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:D6:5D:7C:0C:8F:D8:B2:4C:A2:DF:85:47:0E:EC:20:60:C3:E0
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c8:ae:b1:8e:87:97:ff:80:90:2e:d7:9d:0a:b0:55:b3:91:
86:79:f3:96:17:cc:74:b0:22:d4:c3:c6:c3:cc:1e:c1:4c:23:
45:4e:78:31:8e:8e:31:71:06:00:75:8c:9f:53:26:fa:1e:67:
09:3d:56:77:b3:78:81:e2:64:e1:5f:07:bd:a8:c0:d2:86:e7:
84:c8:5c:d5:53:53:ec:ac:43:a9:86:31:33:31:d9:77:1d:ce:
5f:48:5a:af:76:fb:ac:6c:e9:31:3a:6a:3d:30:2c:c2:d6:0b:
f6:e7:db:44:da:91:d5:ee:23:a1:b7:a5:0e:65:a8:9b:87:d7:
25:03:46:fc:64:80:12:48:84:e2:c6:08:ee:3f:bc:b8:ad:80:
87:f9:52:85:5d:98:b9:66:b4:21:30:01:d6:45:4a:7d:47:91:
5b:6f:75:cc:d9:31:37:17:28:d0:34:5a:6b:3a:5f:6a:88:71:
ce:18:1c:3e:14:4e:e8:a2:0d:d4:5c:4e:68:6e:2b:6d:6f:d8:
50:a9:b3:b1:f9:f2:44:f4:60:4a:46:d2:24:0c:50:39:6b:82:
50:ff:1e:08:2a:46:92:2f:0b:b6:77:5b:49:62:d1:e2:ac:50:
d4:18:87:51:f2:aa:aa:13:a9:ac:f0:59:f8:7e:3b:2c:c7:af:
41:ca:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:47 2025 by rpki-client