Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: zaE9v1NLF293My5gCuBxTZ3lrVw3ouP72HXQECZWAgo=
Subject key identifier: 0C:25:EC:C9:8A:49:73:15:5B:E9:AB:07:E5:DB:B6:BC:05:C7:E6:22
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 0194BCA9C13E7FCF5E9C4E97BC00C4B47DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0C38
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: xcj8cZVoQv4zDgmQTBeDb4LGCqp0RDVSUwo9nQpTZHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c1:3e:7f:cf:5e:9c:4e:97:bc:00:c4:b4:7d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=0c25ecc98a4973155be9ab07e5dbb6bc05c7e622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:45:1c:68:e4:fa:70:aa:c9:02:f1:33:c6:
2d:8e:69:50:7e:53:1b:1e:80:85:8c:90:3a:9f:cf:
f2:90:91:20:72:57:a6:ff:81:9f:81:d6:bd:86:ab:
4c:2e:14:ec:87:70:bb:54:e0:8a:ca:cd:14:55:89:
a3:24:de:5f:6d:2b:e5:d9:33:cd:44:2c:b8:88:21:
b1:0c:5c:4f:d4:6b:db:5c:7c:1e:67:7d:64:6e:45:
d2:25:a7:e5:5a:04:ae:27:ef:e8:6c:cc:bd:af:84:
69:94:42:6e:03:5a:78:19:21:f0:e9:66:ef:4b:f1:
98:51:fe:d2:1d:aa:01:9a:01:07:9e:9a:6d:e9:63:
69:49:d0:ae:1e:53:82:e5:3a:f3:02:8b:1c:5f:3b:
ce:0a:f4:5a:7f:7a:d4:6e:0a:f0:95:49:85:63:2c:
7c:00:ce:7d:ed:3e:ce:90:f7:f6:37:c5:57:b4:44:
1d:7e:20:75:50:5d:94:a8:f7:48:1a:b9:7e:3c:d8:
8e:d1:f7:ab:63:f9:13:6a:54:29:ed:e9:a7:1f:eb:
99:cf:8f:ae:07:67:2a:fd:d8:e1:e3:81:be:6e:6b:
49:b4:eb:33:bb:90:7b:db:27:e8:fb:89:23:9e:1a:
9c:70:b6:7a:42:9e:07:27:9a:04:d6:d7:cc:0d:4f:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:25:EC:C9:8A:49:73:15:5B:E9:AB:07:E5:DB:B6:BC:05:C7:E6:22
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b2:12:b9:4d:8d:47:18:b0:8c:26:f8:07:4f:27:27:88:64:
84:26:9f:ac:ee:ba:62:6a:1e:1c:21:ff:66:b4:93:c5:9e:d6:
44:4b:ae:2e:80:27:78:92:a2:80:f9:d7:fe:35:7a:a3:58:72:
21:76:a3:65:8f:12:08:4a:4e:9b:a2:38:d4:05:0c:0b:5c:17:
bb:44:2f:3a:c4:19:ae:3c:02:1d:91:6c:6a:d1:33:30:83:23:
7c:b3:5e:43:7a:7e:9a:70:f4:40:25:8e:62:d7:b3:6e:43:77:
bf:61:9c:08:b3:76:ec:0f:e4:7c:23:fc:e6:6a:b2:35:29:23:
1e:74:51:3a:3e:4a:f3:7a:d5:ba:7c:9a:42:ca:7e:d1:de:62:
dd:6f:db:0f:f8:68:ef:60:c5:86:12:dd:eb:9a:b5:91:72:aa:
2f:dc:8a:6b:4e:35:fb:94:75:3e:c4:b3:4e:17:50:1e:71:54:
6b:e8:bf:f4:bf:67:be:de:a2:85:f3:ae:ba:b3:ad:40:22:ef:
f9:a9:fd:55:7f:88:ea:52:19:61:28:1e:d1:98:f2:48:bc:ce:
4c:12:44:c0:e8:4e:43:f8:63:59:80:20:5d:d6:d9:d9:70:fe:
66:4d:69:72:00:1e:fc:9b:d7:58:a4:6d:6f:6e:f3:08:f0:d2:
42:b2:43:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcE+f89enE6XvADEtH3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjUwMTMxMTQwMDI5WhcNMjUwMjAxMTQwMDI5WjAzMTEwLwYDVQQD
EygwYzI1ZWNjOThhNDk3MzE1NWJlOWFiMDdlNWRiYjZiYzA1YzdlNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbxFHGjk+nCqyQLxM8YtjmlQflMb
HoCFjJA6n8/ykJEgclem/4Gfgda9hqtMLhTsh3C7VOCKys0UVYmjJN5fbSvl2TPN
RCy4iCGxDFxP1GvbXHweZ31kbkXSJaflWgSuJ+/obMy9r4RplEJuA1p4GSHw6Wbv
S/GYUf7SHaoBmgEHnppt6WNpSdCuHlOC5TrzAoscXzvOCvRaf3rUbgrwlUmFYyx8
AM597T7OkPf2N8VXtEQdfiB1UF2UqPdIGrl+PNiO0ferY/kTalQp7emnH+uZz4+u
B2cq/djh44G+bmtJtOszu5B72yfo+4kjnhqccLZ6Qp4HJ5oE1tfMDU/MUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwl7MmKSXMVW+mrB+XbtrwFx+YiMB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrISuU2N
RxiwjCb4B08nJ4hkhCafrO66YmoeHCH/ZrSTxZ7WREuuLoAneJKigPnX/jV6o1hy
IXajZY8SCEpOm6I41AUMC1wXu0QvOsQZrjwCHZFsatEzMIMjfLNeQ3p+mnD0QCWO
YtezbkN3v2GcCLN27A/kfCP85mqyNSkjHnRROj5K83rVunyaQsp+0d5i3W/bD/ho
72DFhhLd65q1kXKqL9yKa041+5R1PsSzThdQHnFUa+i/9L9nvt6ihfOuurOtQCLv
+an9VX+I6lIZYSge0ZjySLzOTBJEwOhOQ/hjWYAgXdbZ2XD+Zk1pcgAe/JvXWKRt
b27zCPDSQrJDOw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:46 2025 by rpki-client