Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/gxCpE4luheSNXAnS5AZkfnGv0eg.mft
File: gxCpE4luheSNXAnS5AZkfnGv0eg.mft (raw, json)
Hash identifier: FAu1LRlIW+kID14kTFvNFi1gBiLMGEwPyGVBrtt/40o=
Subject key identifier: EB:AE:64:C2:4D:B0:2D:C1:F6:06:56:B2:61:95:F0:46:D2:D3:63:3C
Authority key identifier: 83:10:A9:13:89:6E:85:E4:8D:5C:09:D2:E4:06:64:7E:71:AF:D1:E8
Certificate issuer: /CN=8310a913896e85e48d5c09d2e406647e71afd1e8
Certificate serial: 0186D094470E4F35004214C2478F0976882F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxCpE4luheSNXAnS5AZkfnGv0eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/gxCpE4luheSNXAnS5AZkfnGv0eg.mft
Manifest number: 05C2
Signing time: Sat 11 Mar 2023 12:10:23 +0000
Manifest this update: Sat 11 Mar 2023 12:10:23 +0000
Manifest next update: Sun 12 Mar 2023 12:10:23 +0000
Files and hashes: 1: JvFAmbDNMQPuHJFcv-GGj8TUddc.roa (hash: SA3mkCBubty50L/nVcm5BQS/jBArZXMCiT9AuwnuzyM=)
2: gxCpE4luheSNXAnS5AZkfnGv0eg.crl (hash: zxByq0/8H7QHBBFXbu6T66UldogKfDRNWYWMQomYgVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:94:47:0e:4f:35:00:42:14:c2:47:8f:09:76:88:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8310a913896e85e48d5c09d2e406647e71afd1e8
Validity
Not Before: Mar 11 12:10:23 2023 GMT
Not After : Mar 12 12:10:23 2023 GMT
Subject: CN=ebae64c24db02dc1f60656b26195f046d2d3633c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:cf:6c:fb:c3:7f:f7:28:46:4b:38:1c:20:
a8:6f:3b:03:1b:c1:14:b1:cf:4a:0d:82:55:0b:40:
1f:39:70:02:71:1e:89:3b:63:75:8c:bb:dc:26:02:
f9:92:2b:5f:78:50:fd:99:83:77:6e:be:f4:8e:d5:
cd:50:b1:17:58:45:fe:1f:e1:ad:15:a8:2c:16:e3:
1c:87:ce:43:ac:28:4b:33:1f:ef:2c:e3:ee:6a:b9:
9b:8d:3d:71:6b:e6:4d:0f:7a:98:5b:c6:ac:fa:80:
30:76:97:9d:7f:a7:59:1d:a4:32:08:b6:ef:4e:96:
9f:c7:d4:2e:c6:4a:77:c1:c7:71:73:ed:0f:df:97:
77:a6:98:cf:62:3d:4e:2a:e7:61:fa:1f:c0:7a:23:
d1:e4:64:82:33:ec:6b:98:29:78:89:0f:fd:d3:52:
c8:ab:76:97:dc:b4:76:b7:4b:b7:f0:e3:4d:ff:80:
8e:39:5f:22:20:49:d6:61:d3:8d:9b:7a:01:77:b5:
c9:37:50:11:58:0f:e3:c9:ca:df:a6:72:b1:80:5f:
00:6a:d0:1b:53:39:95:2f:b2:60:ca:70:70:33:44:
d2:53:48:88:f5:b7:18:e9:ab:98:e7:82:52:b9:89:
52:bb:56:5e:3c:22:c0:ed:f6:45:20:06:23:b8:7b:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:64:C2:4D:B0:2D:C1:F6:06:56:B2:61:95:F0:46:D2:D3:63:3C
X509v3 Authority Key Identifier:
keyid:83:10:A9:13:89:6E:85:E4:8D:5C:09:D2:E4:06:64:7E:71:AF:D1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxCpE4luheSNXAnS5AZkfnGv0eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/gxCpE4luheSNXAnS5AZkfnGv0eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/gxCpE4luheSNXAnS5AZkfnGv0eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b7:3f:f4:fc:05:af:53:f4:8e:cd:65:b9:9e:fd:47:0b:00:
a2:bf:c4:14:f4:70:e8:5c:7f:da:e3:bf:ca:b8:84:ab:9b:48:
c5:bb:61:bd:47:09:62:34:9a:56:c0:b2:d6:c6:c1:45:08:6e:
a7:68:52:dc:e7:4a:fb:9b:54:76:56:d7:b6:7c:2f:fc:8b:67:
7c:42:e3:18:9c:2e:64:15:12:59:3f:f5:47:50:fe:78:1e:15:
b1:8f:a9:8a:50:27:18:fa:3f:27:e6:a2:1e:a5:36:8c:ae:36:
9e:30:91:c2:02:db:73:95:5d:96:2e:ce:f5:2c:f9:bb:3a:21:
8b:b7:06:d0:18:3c:96:01:99:3e:c9:62:53:c4:35:a1:7e:c9:
76:c9:38:6d:17:09:8b:6c:9b:30:06:46:5f:5a:c5:3b:82:a2:
33:66:3d:1b:9c:a6:fa:34:a6:45:ca:18:7f:b5:be:c5:9f:ce:
90:32:76:a3:47:97:89:56:ff:c6:1d:41:bc:2f:8d:58:60:47:
09:4a:95:cf:72:f7:3b:73:99:6d:7d:cf:d7:8c:3a:2c:b3:13:
53:85:9e:d9:b6:36:3e:e4:5d:76:1d:47:d4:6f:42:31:0c:c3:
71:52:20:5a:6c:b5:89:f9:f4:9b:1c:7f:2a:c4:67:a9:66:a9:
b3:be:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:18 2025 by rpki-client