Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
File: Ga7XMnKJFnAJuWxA44gK3maACj8.mft (raw, json)
Hash identifier: umSM3IDCY1lpq0tYeXi4AeZ223phfEgRKtfwqwB2cTk=
Subject key identifier: AB:A1:CA:C3:BB:19:5D:F7:1D:6D:50:45:00:1A:44:4D:43:FF:D8:D9
Authority key identifier: 19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
Certificate issuer: /CN=19aed7327289167009b96c40e3880ade66800a3f
Certificate serial: 01942AC06F71E2C46E7666C0B6AF7ADA45AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
Manifest number: 0A72
Signing time: Fri 03 Jan 2025 06:00:41 +0000
Manifest this update: Fri 03 Jan 2025 06:00:41 +0000
Manifest next update: Sat 04 Jan 2025 06:00:41 +0000
Files and hashes: 1: Ga7XMnKJFnAJuWxA44gK3maACj8.crl (hash: RHGxSS9IgkY+IZZyJRR4RaEc730EoiqtPO30Sw8pli8=)
2: bvyPRNj6uBvtrabHoJm5S8IFYC0.roa (hash: WaRs//gQRF7QtbnX9794OjSf2YiePlNYWVkK30+VY+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2a:c0:6f:71:e2:c4:6e:76:66:c0:b6:af:7a:da:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19aed7327289167009b96c40e3880ade66800a3f
Validity
Not Before: Jan 3 06:00:41 2025 GMT
Not After : Jan 4 06:00:41 2025 GMT
Subject: CN=aba1cac3bb195df71d6d5045001a444d43ffd8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:bd:96:88:01:9a:68:b9:d6:78:f1:11:20:
f5:fd:2e:ad:1e:1c:75:5d:6f:0a:4d:7e:63:29:32:
08:4a:bf:7d:dc:c0:fb:04:0f:c6:7e:39:b4:c2:9b:
72:2a:14:e3:f9:98:59:de:4d:9f:f1:03:7e:7e:24:
28:87:55:1e:d2:94:8d:6d:8d:d2:82:42:ae:17:d5:
86:0e:f7:07:dd:5b:5a:33:db:74:db:a8:82:58:11:
b5:fe:dd:02:18:75:11:70:29:70:92:50:5e:de:a8:
f0:c9:c5:dd:64:df:76:70:5d:90:8b:bb:a2:70:10:
a0:c5:99:0b:eb:e6:c7:aa:ef:7e:0c:19:db:c6:a9:
03:89:b9:e7:8f:c2:6b:68:06:e4:8b:2d:1b:10:03:
2f:97:8d:49:c0:63:f0:c6:e8:f1:98:5c:65:34:1f:
db:bf:ee:76:24:c7:04:97:55:44:60:68:5a:d5:6d:
24:08:8d:87:cd:20:ba:62:15:bf:25:1a:19:16:3f:
eb:c2:be:51:a6:29:bf:3b:97:0b:69:ac:f5:73:18:
5a:e8:06:61:5a:ae:1f:6c:7c:de:b1:26:bc:0a:cc:
f9:ac:65:b0:87:fa:8a:ed:b1:1f:2f:88:f5:fa:0f:
10:6a:17:71:6e:5c:b1:e2:bf:79:ca:64:00:87:d3:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:CA:C3:BB:19:5D:F7:1D:6D:50:45:00:1A:44:4D:43:FF:D8:D9
X509v3 Authority Key Identifier:
keyid:19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:f9:2e:12:7c:01:c9:cf:8f:23:1e:a1:02:47:c7:5a:6b:
3a:65:b5:cb:66:02:57:2a:f6:b0:d5:62:d4:d6:1a:11:40:13:
8a:13:60:45:db:37:3d:77:e0:67:c1:dc:eb:14:ac:38:54:b7:
07:4d:22:23:d5:51:e9:20:9c:09:64:ee:24:63:02:6c:a9:67:
13:84:7c:d5:90:51:71:0b:c0:47:f8:b5:75:f6:56:2b:67:b3:
0e:13:ee:b1:66:8d:6e:e1:32:3c:04:c3:a2:6a:c9:dd:ac:5a:
77:fd:73:74:66:0f:ce:af:5d:9a:b5:ce:66:22:a4:77:ba:0b:
25:02:f4:e2:d4:46:ce:a4:59:e1:60:3b:d3:65:53:01:b6:5e:
e2:7d:9f:be:f8:ef:ca:ad:aa:f7:b5:8d:be:29:8e:c1:64:d7:
3b:13:74:8b:5a:cb:9e:77:04:88:45:57:12:3c:2b:87:06:7d:
95:e8:99:04:bc:eb:e9:20:88:f7:1e:2f:48:3a:7f:9f:59:8c:
92:e6:a9:bf:81:14:67:0b:e2:bc:3a:1c:f5:34:2d:b7:b4:c9:
41:63:1a:2f:2c:1f:e5:2e:a4:8f:23:58:9f:6e:56:05:30:41:
1d:de:09:c2:cd:fc:1d:2f:e7:6f:a0:37:30:e3:da:2c:87:76:
66:0d:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:47 2025 by rpki-client