Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: Z8HEFiKVZAOcplx3iPDf0607xN4qLJxu7Lk/Fl5sfTU=
Subject key identifier: 3E:69:5B:35:BF:6F:68:53:8B:32:6D:70:83:47:62:9D:90:8F:6A:34
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 0194BCE0DD49CC1429D64C8AC3BD0CFE6BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 0FA1
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: 8AjzpToXg3++JpdGWDRJ7SCtJ0Jh0OB+X4F65EN5veE=)
2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:49:cc:14:29:d6:4c:8a:c3:bd:0c:fe:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=3e695b35bf6f68538b326d708347629d908f6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:bc:9d:e8:44:0d:9b:5f:00:0b:a5:34:f3:
da:b0:9c:07:2a:38:e2:92:85:16:f9:52:b8:01:1a:
b9:ed:5d:6b:b3:cf:a9:a6:ea:e1:de:57:bf:33:45:
a5:94:4c:76:62:bc:f9:1a:d3:63:29:a0:a4:94:ac:
c7:32:29:5c:d0:69:65:dd:8b:63:52:e5:86:58:b3:
de:b8:97:11:d7:02:85:a5:eb:88:36:f7:35:85:50:
1c:08:c1:99:d5:36:d2:43:10:a2:ef:67:48:b9:bc:
10:d9:63:00:84:01:80:cd:87:76:58:50:61:c1:78:
1e:b3:c3:7e:24:fe:8b:9f:3a:ed:8a:9b:66:cd:7d:
93:ef:0d:c1:3d:1d:cf:3a:20:9e:75:5a:a0:5f:1f:
3a:49:d8:e6:2a:f2:11:a3:77:c9:74:30:48:9d:fa:
a0:c3:b8:73:b1:7d:1e:92:a6:68:2c:5c:5e:e7:e6:
04:94:bc:d9:0c:ae:2d:9d:ce:10:2e:12:62:e6:a0:
c2:d6:54:31:00:e9:21:d8:fe:74:c1:c9:d8:7c:56:
51:f2:84:ea:8d:0b:d9:9e:41:7a:3c:f1:bc:81:0f:
57:61:ee:97:88:e5:7e:30:5e:ec:f6:5b:33:92:6c:
30:da:31:75:61:38:c1:a2:4e:6d:11:b7:f6:d0:e0:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:5B:35:BF:6F:68:53:8B:32:6D:70:83:47:62:9D:90:8F:6A:34
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e5:ed:ff:ac:9c:c2:45:45:1d:b7:b6:bf:1a:aa:61:57:78:
d1:96:de:1f:ce:06:74:0a:6b:67:43:04:a3:72:70:37:7f:79:
06:c8:3e:05:8a:cd:55:d1:be:b8:a2:6d:05:61:9a:73:12:db:
07:b9:d0:72:9f:ee:0d:f1:59:06:3c:0c:cf:e3:89:02:f7:d8:
67:c7:0b:77:e8:4f:83:37:14:e6:ae:df:42:0c:4b:49:cb:90:
06:f1:a6:40:3f:27:4e:e2:af:7d:88:ec:e6:3e:78:e1:1c:3f:
42:36:7d:fb:a7:e9:eb:19:91:0b:aa:f5:af:8f:5d:68:6f:14:
34:d5:6c:16:26:bf:f0:b7:be:ed:1a:c4:2a:00:63:35:f7:00:
ca:52:e8:a2:bb:be:ae:44:e6:b8:85:31:8e:92:93:6c:93:6c:
14:b3:73:3e:7d:2e:d3:dd:98:00:87:73:99:f4:de:67:86:e2:
2d:67:24:be:08:54:4a:7d:cd:22:1f:30:ba:90:9a:63:32:cb:
3a:fd:e4:c0:cf:ad:d0:0e:39:bb:1a:0c:f9:1c:8f:e6:3e:9e:
17:f3:fb:ed:95:ec:de:ed:97:91:35:2f:f7:35:b0:12:1d:af:
1d:5e:b6:53:db:e7:a9:bc:a6:8b:eb:df:49:6d:0b:50:72:5d:
b7:65:27:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N1JzBQp1kyKw70M/mvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx
MzgzYjQwHhcNMjUwMTMxMTUwMDQwWhcNMjUwMjAxMTUwMDQwWjAzMTEwLwYDVQQD
EygzZTY5NWIzNWJmNmY2ODUzOGIzMjZkNzA4MzQ3NjI5ZDkwOGY2YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndO8nehEDZtfAAulNPPasJwHKjji
koUW+VK4ARq57V1rs8+ppurh3le/M0WllEx2Yrz5GtNjKaCklKzHMilc0Gll3Ytj
UuWGWLPeuJcR1wKFpeuINvc1hVAcCMGZ1TbSQxCi72dIubwQ2WMAhAGAzYd2WFBh
wXges8N+JP6LnzrtiptmzX2T7w3BPR3POiCedVqgXx86SdjmKvIRo3fJdDBInfqg
w7hzsX0ekqZoLFxe5+YElLzZDK4tnc4QLhJi5qDC1lQxAOkh2P50wcnYfFZR8oTq
jQvZnkF6PPG8gQ9XYe6XiOV+MF7s9lszkmww2jF1YTjBok5tEbf20OD8RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5pWzW/b2hTizJtcINHYp2Qj2o0MB8GA1UdIwQY
MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt
YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4
LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+Xt/6yc
wkVFHbe2vxqqYVd40ZbeH84GdAprZ0MEo3JwN395Bsg+BYrNVdG+uKJtBWGacxLb
B7nQcp/uDfFZBjwMz+OJAvfYZ8cLd+hPgzcU5q7fQgxLScuQBvGmQD8nTuKvfYjs
5j544Rw/QjZ9+6fp6xmRC6r1r49daG8UNNVsFia/8Le+7RrEKgBjNfcAylLooru+
rkTmuIUxjpKTbJNsFLNzPn0u092YAIdzmfTeZ4biLWckvghUSn3NIh8wupCaYzLL
Ov3kwM+t0A45uxoM+RyP5j6eF/P77ZXs3u2XkTUv9zWwEh2vHV62U9vnqbymi+vf
SW0LUHJdt2UnKg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:03 2025 by rpki-client