Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: gV+OdLTa2GqpfPj56L0G57WsTFvSw5cz0naEbQA1ooU=
Subject key identifier: E9:7E:0B:A2:D5:3F:A8:D6:9C:0D:73:0B:1C:34:DF:C9:B7:30:B3:36
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 0195DFD8C5527B37C39FB903A98B51C49C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0A46
Signing time: Sat 29 Mar 2025 03:01:20 +0000
Manifest this update: Sat 29 Mar 2025 03:01:20 +0000
Manifest next update: Sun 30 Mar 2025 03:01:20 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: dHV91ud6UVYm71oglVJ/+1ieGoC5kLFzhwP0OBqZaWE=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:c5:52:7b:37:c3:9f:b9:03:a9:8b:51:c4:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Mar 29 03:01:20 2025 GMT
Not After : Mar 30 03:01:20 2025 GMT
Subject: CN=e97e0ba2d53fa8d69c0d730b1c34dfc9b730b336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:04:ed:f5:6e:ab:a2:3b:9d:fe:f3:37:f2:
60:30:56:51:f8:78:39:38:88:55:e2:18:c5:0a:09:
d3:56:ee:97:92:d9:e1:4a:43:d4:83:4f:13:fc:c3:
1c:b5:a4:51:25:ab:8f:df:f4:df:0c:72:4f:21:93:
b2:ca:b9:e6:90:b3:db:e4:01:bb:c1:c4:d3:8c:ae:
aa:11:b5:0d:63:d9:bc:b7:c5:6b:ea:f4:a6:6e:e9:
df:d9:3e:9c:f4:5f:e1:13:57:1a:25:ff:fb:9c:8d:
65:e2:90:df:d9:35:90:ab:b0:e5:13:1f:0e:ea:5d:
b8:33:6a:89:18:09:5e:eb:c6:f6:d0:61:ae:62:ad:
ce:1e:f1:b8:bc:41:4d:28:10:88:3e:c7:12:4c:3c:
0b:9c:06:35:70:e1:3b:d6:e9:ee:cd:97:b0:5f:fd:
01:90:75:eb:d6:24:1e:ab:63:d4:68:0d:d3:59:5b:
ef:d8:5d:2e:d7:ec:92:d0:29:c1:8e:bc:df:83:6b:
92:78:ee:46:8f:fc:6c:41:73:58:fb:1a:6b:ea:f7:
df:63:86:dd:8d:74:7c:cf:f4:21:a3:b8:9d:cb:25:
22:00:ea:24:44:09:a3:e2:6d:01:21:a1:22:c1:1d:
86:07:c5:bb:bd:e9:87:b1:af:4a:4d:f8:5b:5c:68:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7E:0B:A2:D5:3F:A8:D6:9C:0D:73:0B:1C:34:DF:C9:B7:30:B3:36
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:62:9b:70:d3:6f:dd:08:42:46:5a:a9:e3:d7:02:bb:6f:79:
b9:c0:36:ac:04:bd:25:a6:16:89:ca:12:cc:fb:84:9f:83:09:
24:5a:6a:52:ea:0b:63:87:1e:d6:b7:8a:59:ec:1a:40:be:af:
8a:ea:d6:f7:0d:e6:6f:17:fe:fd:98:40:c7:6e:e7:db:d8:9d:
59:96:2a:7f:4a:d3:88:44:3b:58:de:76:2a:80:cd:d4:f2:a5:
8c:eb:cd:0f:78:9c:aa:4c:12:dc:d3:98:75:74:00:c5:b3:af:
30:75:31:38:20:e4:d7:f0:c2:67:a8:bf:24:e0:49:e8:6e:ce:
46:ec:8e:c9:e0:37:58:78:a9:83:7f:0a:b4:c5:01:15:f2:59:
d5:ef:6b:2a:f5:de:28:12:e6:24:63:3e:02:77:26:a9:ac:34:
92:c6:6e:87:d5:4b:8e:d8:95:8d:3e:88:e8:f9:e7:5d:9a:41:
a8:9b:33:3d:8c:4b:a1:fb:03:ca:5f:2e:bb:e8:8f:c6:a8:84:
2f:de:60:e4:96:20:7d:0a:25:e6:19:8a:8b:34:e2:21:43:1b:
0a:20:82:8c:c3:ad:95:df:aa:96:af:b5:e9:92:d2:51:82:aa:
0c:18:62:ca:f6:9b:3a:b1:a6:08:05:2a:8b:a3:2d:96:fb:09:
0f:7c:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:27 2025 by rpki-client