Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
File: gXSGHd7wagc1I8mTkWjVtxadaHU.mft (raw, json)
Hash identifier: qhIJXhKcfT3nsbfJhx2GJdxjL0wlAWXTzI3MQoaE+tc=
Subject key identifier: 96:7F:72:C9:5D:B8:CF:4F:F8:6C:3C:9F:7E:AA:55:E6:63:90:87:2C
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Certificate issuer: /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial: 0194BC0505B76DDF1EE6FE550DF68B225FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
Manifest number: 0669
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: E-w5M4eQP91wEOXM7w1SR0QOmxg.roa (hash: +jFSsPpUEMM2UeClDBFj9F6a9KDL4VbEDLgdyScKqB4=)
2: gXSGHd7wagc1I8mTkWjVtxadaHU.crl (hash: Vnro0Bf/WHl0BmlNzQui9o8b3Wt0QnmbjnX7TbLySZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:b7:6d:df:1e:e6:fe:55:0d:f6:8b:22:5f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=967f72c95db8cf4ff86c3c9f7eaa55e66390872c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:c7:2b:f2:d4:13:63:2e:80:7d:ce:be:4c:
84:f4:17:f9:02:1d:16:bb:83:68:10:2d:76:12:e6:
8c:a6:f9:3b:b8:cc:21:36:f2:bf:25:aa:c7:6a:43:
3e:7d:67:57:e0:2b:a8:71:af:48:85:02:82:b0:11:
8b:dc:de:ac:d9:0a:08:f7:96:3d:f8:0e:86:54:9b:
a0:63:af:f6:73:d4:ae:eb:bb:fb:eb:59:c8:af:1c:
e9:ae:b1:3d:c2:48:7c:b3:24:6e:0f:76:11:49:e4:
53:cb:f6:31:15:9d:d9:3f:de:d2:ea:eb:02:d0:d1:
a7:90:8d:99:54:66:d8:8e:62:4e:01:27:63:c9:78:
d8:84:88:33:a7:5d:ea:7e:f9:a5:0b:02:f8:a2:5d:
57:a4:c7:34:4b:4f:a9:53:4b:14:b7:f0:de:bb:e9:
c6:e7:0f:3e:e8:e1:48:6b:72:d7:01:5d:1d:d3:bd:
81:d7:4c:f3:62:2b:26:62:a4:22:0c:ba:9d:a2:5d:
a7:95:bd:70:2c:a6:91:fc:e9:f2:2d:2f:be:bc:90:
15:ad:97:be:68:52:4a:b5:a3:bf:47:91:6f:86:7f:
0c:07:c2:de:25:19:6a:c3:78:9d:8f:27:ee:f9:a1:
12:47:fd:78:5c:71:1b:4f:14:33:17:e8:2c:97:89:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:72:C9:5D:B8:CF:4F:F8:6C:3C:9F:7E:AA:55:E6:63:90:87:2C
X509v3 Authority Key Identifier:
keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:28:d0:fa:fe:d6:9a:79:12:fe:6c:0f:59:1b:1d:6f:83:e3:
55:62:92:30:e8:11:8e:45:69:50:b6:4b:44:44:7f:6e:76:54:
0f:93:46:8d:1e:fa:08:b2:01:c6:ef:9f:e7:17:6b:55:9e:16:
fd:93:36:97:4a:1e:3a:75:96:df:75:5a:97:91:ea:bd:01:61:
90:df:df:b8:d5:6a:c6:76:38:37:e2:34:d2:36:8f:62:65:de:
48:dd:46:cd:41:b9:7c:21:b7:44:2a:2f:d0:44:fb:40:4c:8d:
73:59:1d:59:02:43:49:d7:fb:38:dc:ef:3b:6d:b7:1d:73:13:
0c:ad:6a:da:d1:f0:df:ed:22:b9:72:bc:4c:41:c7:de:c2:76:
a5:b3:46:f5:ad:5e:d3:ef:e1:f6:e1:29:5f:ac:9f:83:5a:d7:
7c:00:58:f1:78:f5:34:1c:58:b6:46:58:60:b0:e6:d5:da:dd:
7c:d7:77:ae:1d:33:b0:01:08:04:18:fd:1c:e5:a9:bb:5d:00:
85:8b:51:79:9f:48:b4:72:a4:31:2a:de:dd:1f:fc:b5:1d:2f:
44:81:d5:21:fa:29:9d:98:11:de:f0:35:a4:32:fa:c4:43:87:
d3:54:f1:3b:6f:fc:b1:e9:06:d3:53:0e:12:60:bf:7a:3d:be:
75:f5:41:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQW3bd8e5v5VDfaLIl/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzQ4NjFkZGVmMDZhMDczNTIzYzk5MzkxNjhkNWI3MTY5
ZDY4NzUwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
Eyg5NjdmNzJjOTVkYjhjZjRmZjg2YzNjOWY3ZWFhNTVlNjYzOTA4NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZXHK/LUE2MugH3OvkyE9Bf5Ah0W
u4NoEC12EuaMpvk7uMwhNvK/JarHakM+fWdX4Cuoca9IhQKCsBGL3N6s2QoI95Y9
+A6GVJugY6/2c9Su67v761nIrxzprrE9wkh8syRuD3YRSeRTy/YxFZ3ZP97S6usC
0NGnkI2ZVGbYjmJOASdjyXjYhIgzp13qfvmlCwL4ol1XpMc0S0+pU0sUt/Deu+nG
5w8+6OFIa3LXAV0d072B10zzYismYqQiDLqdol2nlb1wLKaR/OnyLS++vJAVrZe+
aFJKtaO/R5Fvhn8MB8LeJRlqw3idjyfu+aESR/14XHEbTxQzF+gsl4mBgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ/cslduM9P+Gw8n36qVeZjkIcsMB8GA1UdIwQY
MBaAFIF0hh3e8GoHNSPJk5Fo1bcWnWh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYmQxNWEtNGM0OS00MGZjLTkxOTIt
YjJhNDdlZDQxNmIyLzEvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wYmQxNWEtNGM0OS00MGZjLTkxOTItYjJhNDdlZDQxNmIy
LzEvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlijQ+v7W
mnkS/mwPWRsdb4PjVWKSMOgRjkVpULZLRER/bnZUD5NGjR76CLIBxu+f5xdrVZ4W
/ZM2l0oeOnWW33Val5HqvQFhkN/fuNVqxnY4N+I00jaPYmXeSN1GzUG5fCG3RCov
0ET7QEyNc1kdWQJDSdf7ONzvO223HXMTDK1q2tHw3+0iuXK8TEHH3sJ2pbNG9a1e
0+/h9uEpX6yfg1rXfABY8Xj1NBxYtkZYYLDm1drdfNd3rh0zsAEIBBj9HOWpu10A
hYtReZ9ItHKkMSre3R/8tR0vRIHVIfopnZgR3vA1pDL6xEOH01TxO2/8sekG01MO
EmC/ej2+dfVBjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client