Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/gBSfQ_7raZ_6QKhw5e19_CJfEz8.mft
File: gBSfQ_7raZ_6QKhw5e19_CJfEz8.mft (raw, json)
Hash identifier: TCPd35C4rdWGFI9tufajyEzLJIiX9om7RpEW4YnfcOA=
Subject key identifier: 58:9F:67:08:3F:6C:6B:94:D0:EC:85:BB:B8:EB:8C:FA:6D:E9:3B:37
Authority key identifier: 80:14:9F:43:FE:EB:69:9F:FA:40:A8:70:E5:ED:7D:FC:22:5F:13:3F
Certificate issuer: /CN=80149f43feeb699ffa40a870e5ed7dfc225f133f
Certificate serial: 0184EB2C8860E4126DAA0A39653A2A23D0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBSfQ_7raZ_6QKhw5e19_CJfEz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/gBSfQ_7raZ_6QKhw5e19_CJfEz8.mft
Manifest number: 0360
Signing time: Wed 07 Dec 2022 06:01:14 +0000
Manifest this update: Wed 07 Dec 2022 06:01:14 +0000
Manifest next update: Thu 08 Dec 2022 06:01:14 +0000
Files and hashes: 1: 94gFaua267n82FV8HM59juceEkQ.roa (hash: mdr7v+TD5ntyleA+dYIHROCb+hHxyqCFD8QIVdbji6c=)
2: gBSfQ_7raZ_6QKhw5e19_CJfEz8.crl (hash: HzqQmxZDSwtiDSqUebRP1XGqwIUFge+hoP7Av2B5FpU=)
3: rpJQLwGR4MNKRE5tH1WH4wJBl44.roa (hash: Y/5vRqXI+ecruCu4gzgUV+x56sdEoHB9LsrFiCPTUsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:2c:88:60:e4:12:6d:aa:0a:39:65:3a:2a:23:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80149f43feeb699ffa40a870e5ed7dfc225f133f
Validity
Not Before: Dec 7 06:01:14 2022 GMT
Not After : Dec 8 06:01:14 2022 GMT
Subject: CN=589f67083f6c6b94d0ec85bbb8eb8cfa6de93b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:55:31:03:08:d7:22:7d:b8:a5:a6:da:b6:
7f:22:23:c1:ec:e6:20:43:63:85:df:bb:2c:e7:d6:
ee:51:2f:9e:c3:ef:10:67:f8:97:82:47:94:1c:70:
04:c9:14:bd:47:bf:d4:9f:d4:5c:0c:95:74:d1:af:
d7:4a:0a:ce:7e:49:67:62:41:34:f9:a7:27:0e:27:
a6:85:7d:5d:66:d2:f2:f6:f0:a6:58:2e:fa:b5:97:
0f:93:8a:97:94:e4:2c:5c:a6:e8:bf:33:d0:7a:21:
e1:79:e0:00:0d:85:cc:19:54:9d:15:5e:ea:bc:6c:
73:c1:23:f7:09:d6:c7:32:bb:b1:54:d0:7c:11:43:
53:db:c2:b2:a1:b9:db:09:c5:9c:43:5a:ec:18:88:
1d:86:b4:18:a8:2b:7a:ec:38:f9:4c:24:f6:eb:90:
89:25:0a:87:70:fd:6c:17:a1:34:fe:c3:ff:48:19:
92:51:23:fd:5c:22:5b:d8:27:51:2e:2a:5e:6b:6d:
48:83:39:2c:c7:58:cf:53:a8:4f:45:43:d4:0e:b9:
e1:d5:f3:34:87:9d:6d:e7:ec:04:44:aa:d6:40:7b:
e2:b1:63:7f:7b:6c:84:64:5e:48:69:9f:1f:0c:8f:
26:f2:a9:71:58:8c:c3:58:6d:41:e9:08:be:7b:e2:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:67:08:3F:6C:6B:94:D0:EC:85:BB:B8:EB:8C:FA:6D:E9:3B:37
X509v3 Authority Key Identifier:
keyid:80:14:9F:43:FE:EB:69:9F:FA:40:A8:70:E5:ED:7D:FC:22:5F:13:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBSfQ_7raZ_6QKhw5e19_CJfEz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/gBSfQ_7raZ_6QKhw5e19_CJfEz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e0caff-28cd-4c6b-b675-e263cad7beba/1/gBSfQ_7raZ_6QKhw5e19_CJfEz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:41:c1:fe:42:33:b2:17:97:cf:75:a8:d6:64:7d:63:96:aa:
ec:61:5b:66:da:ef:75:1b:50:73:43:0b:00:0e:9a:cf:c5:cd:
cd:bc:59:dd:89:b9:1b:e2:07:b0:24:af:0a:85:61:6c:94:9e:
d4:1e:ba:19:fe:50:fc:64:6f:c9:30:cf:9e:df:a8:56:db:83:
99:40:da:77:e0:c5:89:1a:43:f6:5c:c5:3c:76:58:66:c6:ed:
91:f1:f9:c0:dd:3a:77:45:83:04:53:69:f9:b8:33:83:15:87:
a5:bd:dc:38:da:44:a3:ee:24:05:c2:c3:48:c8:63:3b:d3:67:
30:cf:f8:0b:ca:7c:e9:95:74:c4:46:93:9d:de:5b:9c:ef:91:
3a:6a:7d:ce:ec:de:e5:89:52:f2:2a:f2:25:7c:41:58:d1:72:
38:b9:db:c8:ba:75:30:41:c9:fc:f4:54:00:85:ef:44:67:ac:
15:f9:fc:54:28:6b:71:c8:fc:d4:55:9b:b4:20:c9:f3:c5:d7:
69:0f:24:a7:21:98:c9:09:40:02:73:42:c5:4c:2c:88:aa:ee:
58:de:58:df:09:a4:c2:27:d3:60:99:40:5e:a3:34:3d:ad:af:
bb:22:c0:43:77:ce:70:5b:93:da:a4:bb:d2:0f:b7:9a:a7:bf:
f2:4b:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:46:45 2025 by rpki-client