Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: UGlHrxNkTa0lciTtECD7e4PisYHKMa2GLbYGfjmk9JE=
Subject key identifier: ED:A9:E1:F2:50:1C:0C:ED:B3:55:BC:20:9C:8D:EF:D9:9E:21:FE:E3
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 0194BD4EAFE0D0A92867D3ECE9DFF0F16931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1242
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: UVrJa5NQ0goUX6i4kMwPXO+WIXZB9Gt7b8Wn/bqlxAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:e0:d0:a9:28:67:d3:ec:e9:df:f0:f1:69:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=eda9e1f2501c0cedb355bc209c8defd99e21fee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:6d:37:ef:a7:52:1e:82:37:5d:86:dd:ae:
81:88:23:9c:2f:dc:72:58:dd:89:c7:30:8e:e2:de:
2e:f4:11:3a:60:75:cd:47:1a:ae:1b:c8:17:de:ad:
bb:50:dc:d9:6b:d2:7d:bc:52:2c:5c:2d:cb:fd:68:
00:6a:38:09:61:ef:8d:5b:27:45:1f:91:9c:4c:a0:
95:7a:45:78:10:a3:32:1e:ea:d6:2d:cf:e2:67:85:
c1:04:e1:24:e4:7c:0f:d8:11:fd:1b:85:df:55:7c:
13:8c:76:ae:cb:19:82:6e:ca:cf:54:d2:00:9e:17:
b3:cc:64:e7:46:1a:71:60:ab:19:f1:c5:5c:1b:4d:
27:86:b2:d5:fc:3f:34:ec:4a:29:55:79:48:6d:97:
cb:2d:a0:b9:ba:1c:80:78:b5:d9:79:d7:3f:ee:e7:
4f:ca:fc:e7:cc:80:b3:74:14:40:47:9e:06:39:ae:
43:d4:e8:d5:85:fa:91:f0:45:df:e6:2f:8a:25:4c:
96:07:2b:d6:aa:fc:0c:97:af:17:34:c9:70:74:d2:
95:f9:30:be:30:2f:75:6b:bb:05:2c:46:20:20:87:
62:5b:70:a3:fc:e6:f5:d9:60:e1:46:bb:c5:65:ea:
4f:dc:5c:08:28:89:ca:07:a3:08:51:27:1e:81:c6:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:E1:F2:50:1C:0C:ED:B3:55:BC:20:9C:8D:EF:D9:9E:21:FE:E3
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fd:af:af:19:76:95:1a:3d:3d:34:28:e3:ec:8e:da:16:9b:
61:13:fd:58:ad:bd:f8:23:5b:90:cb:38:7e:6e:c5:49:4d:a9:
75:a8:d6:a1:f7:55:13:29:31:f0:0a:64:8e:b0:3a:59:0d:8d:
b8:db:c4:d6:3e:4d:32:33:65:78:bf:1d:34:d6:48:9e:d4:00:
61:93:0d:ce:aa:1f:7e:0f:4b:72:27:26:be:48:c5:d8:7c:05:
28:24:a3:1a:9a:85:71:84:6b:71:9f:c8:7d:e1:8c:c9:53:d7:
f0:0d:21:8e:36:16:0c:81:48:3f:09:a7:11:bd:72:98:ce:51:
f7:0d:c5:86:b8:d7:51:48:e9:07:ac:f8:ce:0d:1a:65:28:23:
b5:83:d3:f3:4f:37:ec:13:24:4a:7b:4e:98:ac:4d:4d:ac:b2:
86:9c:71:34:41:c5:46:a7:3d:b8:2f:eb:4a:fa:bd:af:eb:10:
ee:18:c8:78:48:52:59:a9:fa:84:18:e5:d1:e8:9e:74:56:5d:
83:d3:2d:5e:28:8d:3b:ad:6e:97:f9:1b:4f:0f:93:90:eb:55:
f7:1b:b5:ba:f1:67:c0:e2:70:75:3d:90:ce:85:72:13:84:18:
57:0d:9e:b6:ee:25:c6:91:9c:0d:bb:42:37:74:77:4a:41:fd:
e8:78:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:03 2025 by rpki-client