Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: 5wvrno9mFC3Ha9swzTTfPlDwHMtgiBM0SDVEWvDL87k=
Subject key identifier: ED:F4:24:AA:8C:0C:25:DB:E9:CD:A2:E9:8A:F1:6C:1E:66:B7:BF:26
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 0194BD4EA5C0E8BAF73901BD40E4A8B92A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0509
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=)
2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: JLlL8jox5UTbN/i9ehXXrmeWln9oUKtdJpr3w+H6qdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:c0:e8:ba:f7:39:01:bd:40:e4:a8:b9:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=edf424aa8c0c25dbe9cda2e98af16c1e66b7bf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:7f:5a:94:2e:b8:9c:6f:3d:ae:03:54:a7:
4f:78:ef:1a:49:5a:5d:8b:27:9c:c6:43:3f:6d:0f:
a8:5d:c9:45:b6:fa:15:8d:39:ae:e3:7b:77:23:64:
0d:93:01:49:e4:f7:74:0c:e9:b1:1a:01:22:59:34:
b2:3b:b6:c9:f7:4b:49:4d:34:8b:22:48:c8:04:22:
6f:f0:50:8d:72:e3:d4:f5:f2:68:7a:a9:9e:28:0a:
a2:7d:85:6a:96:2b:5f:18:2a:ab:73:c4:b3:9c:a5:
16:1a:cb:9b:ae:14:d9:86:6b:c1:16:42:6a:2e:df:
f9:ac:30:40:54:8c:2b:7a:29:7d:f8:9a:34:f3:75:
72:a5:bb:bb:a0:28:b4:7c:13:7a:e7:3d:45:ba:86:
6d:7d:eb:39:36:95:42:58:d9:7a:88:ca:35:87:2f:
ea:ee:1e:cb:11:bc:c3:e2:69:7b:c9:78:dd:cd:2b:
4f:9b:31:f7:9b:0d:44:12:db:3c:0d:dd:c9:4a:34:
49:fb:62:47:06:2b:d7:42:f3:bc:5e:fc:39:14:21:
29:cd:a3:4c:ed:9f:e9:40:a5:d9:90:71:87:0f:6d:
34:ab:32:7b:d6:5f:c0:a0:f7:7c:c7:33:e4:9a:12:
9a:d4:a6:97:21:4d:e0:39:7e:82:0b:0b:ea:18:9d:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F4:24:AA:8C:0C:25:DB:E9:CD:A2:E9:8A:F1:6C:1E:66:B7:BF:26
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8d:b2:ca:a1:a4:0c:1c:89:92:cd:c7:49:a7:c3:55:37:a5:
ad:88:2a:32:44:18:1d:26:cc:5c:bf:ca:65:88:d1:90:c9:2f:
b7:70:76:71:37:ec:c4:52:69:bc:b6:8c:20:b4:71:e9:df:3d:
2e:b9:bf:b0:b4:b5:09:56:59:76:f3:c1:42:eb:c4:5a:55:73:
42:6e:3c:68:c7:48:e7:fa:3c:f3:2a:ed:ce:e0:eb:3f:d2:14:
fd:db:0d:25:70:42:aa:57:2c:b0:54:c8:04:bc:df:eb:28:ee:
fa:a5:c6:ab:03:e4:63:1a:f8:40:78:94:a9:97:59:72:b3:87:
ac:69:21:5d:5f:1a:e7:f5:37:84:1a:61:25:06:ed:3e:05:63:
30:68:0d:30:8e:81:af:8d:ac:1e:7e:84:9a:fe:ba:04:91:ba:
20:ae:32:29:f2:4a:82:9d:42:3d:13:b8:30:ef:03:95:4e:7f:
8d:d4:eb:ef:21:76:de:b4:d5:e6:f6:8d:b2:44:e2:f6:57:aa:
f2:bb:71:d3:7e:a6:21:73:5c:93:46:1d:15:f4:1c:15:cd:d5:
78:91:cd:2d:1f:74:00:15:54:09:56:de:f7:14:fa:80:44:a9:
5f:fe:4b:de:5b:bd:63:dc:d8:54:4b:44:85:3e:4c:35:c2:79:
29:5a:83:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:42 2025 by rpki-client