Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft
File: GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft (raw, json)
Hash identifier: A+KsKxRUJKUjMTKm215JilJD1pDxj9B1+oiGBrpDGOQ=
Subject key identifier: D9:A2:60:C5:EB:52:FD:04:82:F2:A7:E4:A6:06:40:C8:C4:81:72:91
Authority key identifier: 19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55
Certificate issuer: /CN=19a6857c5ba3f51dbe38f4c4a0c77c84ff0fb355
Certificate serial: 018B89E5F081663380CE3472F251C2A87BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft
Manifest number: 0D07
Signing time: Wed 01 Nov 2023 08:00:29 +0000
Manifest this update: Wed 01 Nov 2023 08:00:29 +0000
Manifest next update: Thu 02 Nov 2023 08:00:29 +0000
Files and hashes: 1: GaaFfFuj9R2-OPTEoMd8hP8Ps1U.crl (hash: +yq5Qb2ICrQ5prYgRe6Y5c3wi073TLrT1TYUrbCFlXI=)
2: Z7JW630MafIizMxpzswUxgC1WAc.roa (hash: yCt+kaT8QoAV8B9cXJOxUh1TB3vipteylGtsOpZBHK8=)
3: i1FsIeYT3Zair0TQKi4yCM6IOG0.roa (hash: mZ9vVUXkP1hNQNf7dg5Nl1KDoZy9tsDYGbmJpJypCM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:e5:f0:81:66:33:80:ce:34:72:f2:51:c2:a8:7b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6857c5ba3f51dbe38f4c4a0c77c84ff0fb355
Validity
Not Before: Nov 1 08:00:29 2023 GMT
Not After : Nov 2 08:00:29 2023 GMT
Subject: CN=d9a260c5eb52fd0482f2a7e4a60640c8c4817291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:44:22:e2:ba:65:9b:48:7c:8b:6f:63:b6:
4b:4f:fe:f3:b1:dd:c1:e6:cd:05:40:05:74:d9:6c:
84:19:25:48:a8:ee:0f:6a:01:55:bb:23:32:bd:e2:
3e:dd:9e:10:57:e5:08:de:86:4f:bf:a1:6c:70:b6:
8a:99:37:20:58:d7:56:c6:65:da:03:a3:7b:16:a7:
3f:33:91:09:c6:78:3f:23:58:20:55:f1:23:f7:78:
8e:8c:54:d9:c0:6d:79:28:d7:89:f8:37:72:d7:b9:
42:52:7a:5b:4c:cd:89:eb:c9:80:51:54:b1:a8:f4:
3b:d8:d6:ba:f8:e5:8f:34:ee:5b:f5:ff:83:52:11:
f7:ef:32:bb:f1:d7:05:f5:c7:89:f7:5f:32:b6:08:
45:47:1e:88:dc:4a:1f:9a:88:3e:0c:bc:7d:49:c5:
cd:44:93:ca:5b:70:f6:34:c6:65:26:89:65:ed:f4:
1f:ab:d1:f5:72:ce:3b:cc:b1:85:0e:be:a6:ed:a0:
e0:00:96:18:68:04:12:64:ae:d4:61:96:b9:ac:b2:
ba:11:37:79:a0:41:d4:38:c8:33:b8:26:b1:43:98:
8d:94:7a:bf:ee:5f:18:3f:b0:93:76:4b:99:26:33:
56:19:36:e4:41:b0:96:d2:1f:f1:b5:f2:02:4b:77:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A2:60:C5:EB:52:FD:04:82:F2:A7:E4:A6:06:40:C8:C4:81:72:91
X509v3 Authority Key Identifier:
keyid:19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6a:a3:79:37:6a:a6:bb:b6:ab:c5:e8:95:d2:1a:c4:01:09:
d7:bc:d0:3e:83:13:41:3c:91:1e:14:d6:3c:69:8c:ed:43:03:
ca:1e:60:e0:40:b9:a0:7a:54:bb:66:ab:1f:ce:cf:1c:58:41:
e6:45:a2:c7:74:29:d5:de:9b:7e:57:88:ea:a7:4a:96:5e:e1:
b9:3e:27:da:f4:3e:b9:31:ce:85:7e:f6:eb:7b:b8:54:8d:75:
1a:92:d7:a4:b9:e7:aa:b1:c0:9f:24:b8:52:cd:ab:a8:41:a0:
0e:27:c0:ab:e3:36:a8:af:7a:b5:5e:ac:70:fa:5d:bd:42:45:
dc:21:d3:f4:15:a0:86:f7:5e:3d:3d:17:a5:89:02:a4:4d:59:
65:f7:db:8d:61:18:ca:c2:69:59:32:50:d0:3f:b2:5f:a3:ac:
8d:e4:63:e4:9e:6e:4d:fa:61:4b:0f:f2:f7:ec:11:95:54:85:
c5:1c:13:00:a8:e8:08:5e:30:28:f7:fe:8f:c2:dc:f8:6b:76:
45:6e:18:3d:95:33:02:25:32:f5:2e:b1:9d:55:5b:76:f9:0b:
88:e7:1e:35:87:ec:cc:52:96:65:5d:16:27:8a:d8:ff:39:80:
6f:b2:82:c5:3b:c7:74:a9:96:d7:ab:0b:77:ed:9f:dc:28:c5:
29:b5:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:17 2025 by rpki-client