Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: V45SMfySMisPI9gvdHZOQGG43Y07+c/CFP1Gv5fSMzM=
Subject key identifier: C1:F1:52:63:29:F8:D4:37:CF:DC:09:6F:74:96:E9:FD:DD:AC:29:53
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 0194BCE06D8D37B243BEEB15CE531FB42BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 046D
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: 9ktCQnfysd4qbDufaggPY7TZ9Svse1G4Mjs3npSWW0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6d:8d:37:b2:43:be:eb:15:ce:53:1f:b4:2b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=c1f1526329f8d437cfdc096f7496e9fdddac2953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:25:b4:0e:05:84:dd:35:19:3e:fa:05:f9:
d7:f5:e6:1d:e1:2a:be:91:a2:ec:dc:5f:ba:90:5e:
79:fd:11:7e:55:3c:91:08:e0:08:50:a4:6b:73:7b:
cb:d3:f0:be:b6:4b:44:8a:83:b3:e4:34:e2:e6:2e:
50:50:36:a4:ce:59:ba:25:35:44:b8:ff:b1:ac:fd:
46:8e:66:c1:4b:49:4b:f9:10:bf:f7:b4:44:ad:fc:
04:03:97:c0:10:c0:ee:11:71:6e:a4:3c:d6:eb:2a:
3f:c5:c7:7e:60:5c:c8:37:c0:13:03:d1:d7:ef:24:
b3:96:9a:29:4e:df:5b:f1:80:30:81:c5:46:6f:91:
24:c4:6f:2f:82:ac:78:c1:ae:2d:cc:c5:97:84:88:
bb:53:ba:a1:d0:5e:b8:df:17:69:95:77:34:89:6f:
36:30:45:1c:a6:13:a5:f1:6d:07:76:af:c2:c0:3b:
17:01:7c:65:0e:ac:25:87:03:71:9c:9c:58:da:d6:
3a:ca:68:f7:23:4e:36:2d:32:12:6d:7f:b8:a1:de:
16:1c:4e:53:1c:5b:9c:76:8f:42:71:e6:cb:8c:fc:
a9:dd:1f:d8:c8:82:0a:3a:b0:13:19:a6:77:46:4b:
fe:03:3f:b2:5a:53:72:fd:e0:01:2f:9d:44:1e:84:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:52:63:29:F8:D4:37:CF:DC:09:6F:74:96:E9:FD:DD:AC:29:53
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8f:5c:62:c2:a4:54:f7:f5:1b:71:c8:9e:d8:51:54:0c:c4:
b1:1d:86:49:df:f2:e5:37:88:e9:5d:a2:25:c0:fa:e6:b7:d9:
71:bf:f8:14:04:09:8a:49:14:96:1a:df:29:65:60:a4:23:18:
0d:bd:9c:da:04:b2:9f:41:c0:85:d2:85:43:96:94:89:08:04:
4c:c1:bc:b9:00:ae:c9:61:50:f6:f4:00:f8:5b:b0:92:34:71:
db:7e:1e:40:6d:e9:e3:84:ae:98:7a:c2:d2:b3:50:e4:d6:f1:
36:a2:06:ba:17:b4:5e:9e:60:6e:d3:ea:88:bc:83:9b:78:6f:
a9:5b:f0:2d:f8:1b:a5:35:aa:e9:f1:c7:54:d8:71:0e:04:d3:
a2:84:0f:e2:42:93:bf:ed:c8:c3:26:38:87:28:67:e3:b0:ef:
b6:68:4a:e4:1b:0a:45:60:00:76:38:5a:51:7a:6e:c0:f2:4a:
07:32:be:6a:c5:83:2f:c4:98:ff:a8:96:3f:15:b2:c2:04:8d:
c2:26:7e:30:80:24:b2:87:c0:ad:32:ec:e9:d9:b2:c1:8e:d8:
9d:2c:e9:80:27:dd:ae:5e:d5:f8:e9:47:75:ef:6b:b4:14:2f:
db:73:3d:d0:c0:bb:1d:32:2a:a5:c0:23:b4:eb:56:cf:29:48:
00:4a:44:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84G2NN7JDvusVzlMftCvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz
YjMwZWUwHhcNMjUwMTMxMTUwMDEyWhcNMjUwMjAxMTUwMDEyWjAzMTEwLwYDVQQD
EyhjMWYxNTI2MzI5ZjhkNDM3Y2ZkYzA5NmY3NDk2ZTlmZGRkYWMyOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIoltA4FhN01GT76BfnX9eYd4Sq+
kaLs3F+6kF55/RF+VTyRCOAIUKRrc3vL0/C+tktEioOz5DTi5i5QUDakzlm6JTVE
uP+xrP1GjmbBS0lL+RC/97RErfwEA5fAEMDuEXFupDzW6yo/xcd+YFzIN8ATA9HX
7ySzlpopTt9b8YAwgcVGb5EkxG8vgqx4wa4tzMWXhIi7U7qh0F643xdplXc0iW82
MEUcphOl8W0Hdq/CwDsXAXxlDqwlhwNxnJxY2tY6ymj3I042LTISbX+4od4WHE5T
HFucdo9CcebLjPyp3R/YyIIKOrATGaZ3Rkv+Az+yWlNy/eABL51EHoSS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHxUmMp+NQ3z9wJb3SW6f3drClTMB8GA1UdIwQY
MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt
NjQ5YmZjNTQ4NTg3LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3
LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS49cYsKk
VPf1G3HInthRVAzEsR2GSd/y5TeI6V2iJcD65rfZcb/4FAQJikkUlhrfKWVgpCMY
Db2c2gSyn0HAhdKFQ5aUiQgETMG8uQCuyWFQ9vQA+FuwkjRx234eQG3p44SumHrC
0rNQ5NbxNqIGuhe0Xp5gbtPqiLyDm3hvqVvwLfgbpTWq6fHHVNhxDgTTooQP4kKT
v+3IwyY4hyhn47DvtmhK5BsKRWAAdjhaUXpuwPJKBzK+asWDL8SY/6iWPxWywgSN
wiZ+MIAksofArTLs6dmywY7YnSzpgCfdrl7V+OlHde9rtBQv23M90MC7HTIqpcAj
tOtWzylIAEpE1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:36 2025 by rpki-client