Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier: xdP36n7BgkFPh04s6gwY3zVHErkl/SYmdgGwqsNS+YI=
Subject key identifier: 9A:80:D6:96:B3:CC:D0:A2:D8:16:78:E0:C1:A5:6C:FB:00:2B:1C:89
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial: 0194BD17D6634EF89119F95D6D73AC5E9114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number: 090D
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: bdpm1PDcasHPWO9bkdrZ1TtUE23FOC2CqC8zW+5lAe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d6:63:4e:f8:91:19:f9:5d:6d:73:ac:5e:91:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=9a80d696b3ccd0a2d81678e0c1a56cfb002b1c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:c5:00:7d:4a:63:23:5c:b0:66:bf:71:e2:
24:fa:74:96:e8:80:bf:c5:6b:20:4c:01:9d:43:99:
aa:ef:9c:f9:3e:87:c8:ee:46:d0:ba:93:43:22:b9:
20:29:c5:9e:37:a5:0f:51:24:52:00:b5:f0:c4:52:
b6:ca:85:63:0d:45:3d:15:29:ae:91:63:37:73:9d:
e7:b1:82:7f:9e:32:2c:fb:34:bf:42:45:50:d3:40:
43:7f:59:57:ed:7e:d8:28:5f:b7:a3:98:13:67:7e:
30:e8:72:a4:aa:ad:5d:b1:bb:a6:3e:de:f7:07:15:
e3:bb:ad:ea:c5:ee:5c:63:5e:b1:5b:91:f7:11:f5:
83:70:3f:70:b8:65:ac:d4:8f:5d:68:81:f1:10:60:
86:e1:a1:2e:07:ed:3f:78:73:14:95:f6:53:de:74:
31:d6:44:fc:e0:70:16:33:d5:d0:44:b6:97:7c:dc:
7e:6d:7e:4e:ad:26:49:37:71:df:5c:6a:1b:61:08:
b6:7f:65:5c:1e:5c:88:81:34:9f:c8:c5:c5:69:cf:
ee:cf:22:71:c7:e4:b8:f6:86:20:6f:b0:44:e8:93:
94:ed:a6:9f:4d:7a:52:5f:41:2b:d8:05:aa:5e:d0:
f2:bc:2c:07:1d:3a:9f:a0:d2:40:44:eb:e2:b2:e3:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:D6:96:B3:CC:D0:A2:D8:16:78:E0:C1:A5:6C:FB:00:2B:1C:89
X509v3 Authority Key Identifier:
keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1e:45:92:f9:4b:3f:f6:ab:62:99:04:fd:14:ff:d0:56:31:
9a:74:3b:d2:2e:e4:65:be:7e:d0:ee:06:90:66:f5:cf:af:e3:
17:48:3f:d6:d8:02:50:ef:48:0a:36:54:e0:f0:2b:65:54:e4:
54:40:77:a8:a1:6c:95:55:6d:ce:07:9b:c0:ec:68:e9:76:0c:
c6:5b:06:86:cd:18:9d:36:fa:d7:cb:f5:75:40:fd:9d:a3:4d:
1b:39:51:62:61:32:d2:fd:2d:5b:91:18:1f:29:7d:8a:15:a8:
fb:33:b9:cd:98:ca:cc:b7:73:39:58:aa:ba:57:5d:b5:74:87:
6c:07:b2:07:f9:01:12:7d:1c:62:3b:28:9c:a5:86:61:f8:fc:
0d:34:f5:d7:19:b3:f9:d1:c2:aa:ab:4e:ea:71:5c:75:f0:46:
94:09:6a:c0:2f:dc:cd:1c:27:95:d4:be:69:64:25:6c:ad:fd:
d3:a6:39:54:ca:b6:86:03:c4:23:38:e6:ac:53:e2:b1:ba:78:
1b:ca:8d:f1:3c:91:f3:6c:80:3f:8f:1b:96:db:40:f4:eb:51:
12:e7:68:d3:a2:19:dd:98:d4:b6:18:f0:76:fd:c8:8a:fe:82:
bd:e8:78:ed:be:07:14:d6:0d:11:23:01:1c:08:69:0b:e0:3d:
e6:50:6b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9ZjTviRGfldbXOsXpEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDIxNDU5MzAwZDE1ZmFjNTUwNzA1Y2Y2ZTI1ODk5OWQz
ZDg2YmEwHhcNMjUwMTMxMTYwMDQzWhcNMjUwMjAxMTYwMDQzWjAzMTEwLwYDVQQD
Eyg5YTgwZDY5NmIzY2NkMGEyZDgxNjc4ZTBjMWE1NmNmYjAwMmIxYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonHFAH1KYyNcsGa/ceIk+nSW6IC/
xWsgTAGdQ5mq75z5PofI7kbQupNDIrkgKcWeN6UPUSRSALXwxFK2yoVjDUU9FSmu
kWM3c53nsYJ/njIs+zS/QkVQ00BDf1lX7X7YKF+3o5gTZ34w6HKkqq1dsbumPt73
BxXju63qxe5cY16xW5H3EfWDcD9wuGWs1I9daIHxEGCG4aEuB+0/eHMUlfZT3nQx
1kT84HAWM9XQRLaXfNx+bX5OrSZJN3HfXGobYQi2f2VcHlyIgTSfyMXFac/uzyJx
x+S49oYgb7BE6JOU7aafTXpSX0Er2AWqXtDyvCwHHTqfoNJAROvisuNGRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqA1pazzNCi2BZ44MGlbPsAKxyJMB8GA1UdIwQY
MBaAFBgCFFkwDRX6xVBwXPbiWJmdPYa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5Njct
OTIyNGNlMmU5NjVhLzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5NjctOTIyNGNlMmU5NjVh
LzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx5FkvlL
P/arYpkE/RT/0FYxmnQ70i7kZb5+0O4GkGb1z6/jF0g/1tgCUO9ICjZU4PArZVTk
VEB3qKFslVVtzgebwOxo6XYMxlsGhs0YnTb618v1dUD9naNNGzlRYmEy0v0tW5EY
Hyl9ihWo+zO5zZjKzLdzOViqulddtXSHbAeyB/kBEn0cYjsonKWGYfj8DTT11xmz
+dHCqqtO6nFcdfBGlAlqwC/czRwnldS+aWQlbK3906Y5VMq2hgPEIzjmrFPisbp4
G8qN8TyR82yAP48blttA9OtREudo06IZ3ZjUthjwdv3Iiv6Cveh47b4HFNYNESMB
HAhpC+A95lBrgw==
-----END CERTIFICATE-----
Generated at Thu May 1 06:14:17 2025 by rpki-client