Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: sAqjahzCeOaCyOXAbBDwvm/fgGhHBS4hbAnWP3x+/DI=
Subject key identifier: 9A:97:B3:BD:CF:16:D0:4D:12:60:C5:9E:A7:82:8B:F7:05:AE:77:BC
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 0194BD4E373F881C8A1CFB2A3F21E604FC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 0ED7
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: mmTXIe3CW8B7ddnYNUueYie0PVWBm6EeOM40oWqvPg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:37:3f:88:1c:8a:1c:fb:2a:3f:21:e6:04:fc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=9a97b3bdcf16d04d1260c59ea7828bf705ae77bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:f8:b5:f3:c8:01:a8:76:6a:26:92:18:60:
ed:5d:bf:98:2c:4f:02:0a:8a:ba:a7:43:d2:09:11:
67:5a:02:83:f7:07:28:b5:f3:c1:d7:8c:ab:ea:39:
38:9d:c3:5d:fb:76:24:7b:91:d0:99:a1:f7:93:7e:
f5:ac:7b:c7:26:9d:5f:29:5d:64:46:d7:7d:29:4f:
22:d2:c6:86:c5:cf:fb:7a:e8:40:cf:74:dc:4f:80:
71:f2:63:e3:46:c1:90:74:31:69:d6:f3:f3:a8:4e:
72:87:5b:93:9a:82:2b:d3:1f:08:24:a0:1a:0d:62:
2a:12:61:a6:8a:d5:16:16:04:12:6e:20:df:00:39:
4b:61:1c:ea:0a:e8:9b:d8:91:8d:26:2f:de:56:fb:
58:2e:e5:03:06:5c:d7:f9:7b:48:a6:21:e2:ea:8f:
25:f7:0b:16:a8:03:f6:80:de:f5:cc:7e:45:66:43:
65:5c:33:54:46:74:5d:19:4c:8f:54:37:2a:7c:e2:
aa:58:89:ef:17:fc:a1:ee:a5:e2:9a:d3:17:a0:7c:
44:3f:53:b6:75:8f:01:59:06:ca:06:d4:67:1d:84:
0d:45:c3:df:e5:45:d1:5e:3f:4b:dd:c3:15:fb:88:
08:ff:12:6d:58:fc:39:64:27:2d:8b:bc:e5:3a:9d:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:B3:BD:CF:16:D0:4D:12:60:C5:9E:A7:82:8B:F7:05:AE:77:BC
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:93:5a:cf:cd:b8:58:78:9e:fe:59:e4:5c:44:01:a8:b2:
80:36:cb:ae:2f:db:06:1e:55:40:93:f6:01:c4:d5:81:e8:ba:
7a:ce:93:73:32:dd:a0:66:d8:ef:38:00:fd:86:3b:7b:c4:1f:
78:53:b8:db:03:d1:47:4f:0f:60:b3:0e:e3:94:2e:56:75:a9:
a3:28:95:1e:83:02:3c:79:bb:d2:2b:c9:6b:4c:10:05:69:6e:
b5:e1:32:7c:4f:61:ca:dc:8a:06:92:7b:e6:bf:2a:fd:db:85:
6c:51:c1:0a:26:fa:8c:45:76:45:98:e8:d0:02:2d:87:3e:21:
30:cf:ab:1f:93:20:74:60:9c:fe:ff:ce:68:b8:02:84:17:30:
04:c1:4a:46:3a:01:59:81:16:c2:81:ae:e4:34:5c:7f:00:2e:
f8:77:2e:58:8f:43:d8:de:a6:3f:e8:b5:49:21:76:46:2f:3f:
3a:07:4d:b3:cb:d0:b2:f5:83:9d:cc:1b:e8:cf:e3:a3:9e:32:
4c:58:5e:30:e9:b8:18:94:5e:23:b4:51:56:88:37:c2:7e:bb:
33:1c:bc:15:29:7c:83:55:1e:5f:70:e2:57:d7:b6:b7:2e:dc:
ed:0b:0e:ed:c5:9c:3c:54:59:07:23:76:ac:8d:77:f0:cb:d0:
a5:ab:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:39 2025 by rpki-client