Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: 2UaFUiqTcccDYYVdrnzPAwTwa2IUjuVF7gsggb6Yj6k=
Subject key identifier: 38:C7:21:01:19:82:EC:AF:26:11:13:44:FD:A0:A6:7D:F4:11:0E:04
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 0194BC72E1BF165B83B4E50D188E4C423E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: Y43A5cdvfkfr5Gzlo0o/vqTAJdMyTua38g8OKjMbUQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:bf:16:5b:83:b4:e5:0d:18:8e:4c:42:3e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=38c721011982ecaf26111344fda0a67df4110e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:93:21:07:6a:ff:d2:02:db:9e:1e:85:b0:
9d:ef:16:f1:f4:03:00:c7:82:7f:3d:4e:20:5f:64:
63:74:ba:85:5c:ea:ea:46:03:0b:df:74:1c:b4:4b:
06:80:1c:40:f2:3f:75:cb:b9:84:78:b5:79:d6:b8:
ce:25:6c:44:da:a3:a8:e4:51:0e:15:e6:9a:33:5d:
d8:54:ce:73:df:a2:cc:b6:db:99:0f:d6:d0:35:96:
db:c6:1b:66:12:d6:23:11:80:6d:89:2b:bb:96:03:
04:8c:20:ef:2d:df:91:24:9a:91:a3:64:e4:94:6f:
bc:da:d6:ee:a9:73:7d:5a:e5:e0:63:32:42:55:55:
1a:fb:a3:90:da:e4:75:e9:50:cb:07:a6:75:dc:c1:
fb:16:22:7a:6e:ec:02:b2:fd:3d:31:b1:0e:a6:46:
01:5e:2c:2f:ad:c7:ca:c6:44:9c:0e:c0:21:42:c8:
6d:ee:0b:c4:13:45:e1:0d:ec:1d:91:ce:1e:d3:f1:
ea:f1:19:63:75:dc:ea:9f:b0:fc:65:35:df:d4:8f:
ba:a6:32:f7:8c:58:8b:95:71:77:8d:79:78:d0:b3:
93:ae:c7:a9:05:5a:a9:56:01:34:c6:9b:a6:3e:10:
bd:37:05:7d:64:66:7c:e4:c3:07:e6:52:e9:20:8a:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:21:01:19:82:EC:AF:26:11:13:44:FD:A0:A6:7D:F4:11:0E:04
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0f:ab:63:92:39:e7:23:72:59:06:05:8c:4a:88:f1:76:3a:
4b:33:e9:05:7f:ae:d5:c2:13:e5:b8:25:28:f8:78:be:37:a9:
b0:e6:b1:8d:ba:80:ef:66:66:4e:c7:b0:69:63:ba:0f:70:a4:
f0:c0:51:df:43:24:e0:e0:85:b5:9a:57:78:bf:da:92:31:37:
cd:ae:2d:d7:6a:e3:16:e4:95:d2:45:77:83:1d:79:2a:32:2a:
16:3b:a6:b7:34:16:68:02:d2:eb:1a:18:6e:d4:69:f6:45:72:
d3:31:4a:9e:cb:eb:4f:63:6b:58:b0:43:fa:f8:db:6e:c1:e8:
17:a7:5c:94:ed:41:92:9b:27:09:77:98:95:62:c3:5f:36:27:
ee:b7:bb:4b:e5:7f:be:e8:b0:c8:4f:c3:df:51:a9:f5:14:06:
15:63:f6:e9:98:02:26:c0:6e:95:cc:83:17:03:57:e1:01:d9:
3b:55:0c:81:62:c0:71:72:f2:a8:7a:9a:ce:c8:0d:cf:63:6f:
82:cf:30:7b:06:d1:c3:d5:e9:68:98:7f:af:d7:08:78:cf:6f:
25:9a:b6:00:ff:65:7c:fc:ae:95:fe:0b:ea:d3:ef:f7:52:0e:
31:2e:9c:e1:70:0a:59:d7:5e:13:3e:1f:ce:7d:7d:d1:21:66:
07:3e:5f:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuG/FluDtOUNGI5MQj6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTVmYmMzZWE1MjVhNzhjNjMwYzRkYTg2NGJhOWE2MGUx
OTliZmYwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
EygzOGM3MjEwMTE5ODJlY2FmMjYxMTEzNDRmZGEwYTY3ZGY0MTEwZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJuTIQdq/9IC254ehbCd7xbx9AMA
x4J/PU4gX2RjdLqFXOrqRgML33QctEsGgBxA8j91y7mEeLV51rjOJWxE2qOo5FEO
FeaaM13YVM5z36LMttuZD9bQNZbbxhtmEtYjEYBtiSu7lgMEjCDvLd+RJJqRo2Tk
lG+82tbuqXN9WuXgYzJCVVUa+6OQ2uR16VDLB6Z13MH7FiJ6buwCsv09MbEOpkYB
XiwvrcfKxkScDsAhQsht7gvEE0XhDewdkc4e0/Hq8Rljddzqn7D8ZTXf1I+6pjL3
jFiLlXF3jXl40LOTrsepBVqpVgE0xpumPhC9NwV9ZGZ85MMH5lLpIIoKawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjHIQEZguyvJhETRP2gpn30EQ4EMB8GA1UdIwQY
MBaAFILl+8PqUlp4xjDE2oZLqaYOGZv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMt
OTNkZDY1MDc0ODhlLzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMtOTNkZDY1MDc0ODhl
LzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQ+rY5I5
5yNyWQYFjEqI8XY6SzPpBX+u1cIT5bglKPh4vjepsOaxjbqA72ZmTsewaWO6D3Ck
8MBR30Mk4OCFtZpXeL/akjE3za4t12rjFuSV0kV3gx15KjIqFjumtzQWaALS6xoY
btRp9kVy0zFKnsvrT2NrWLBD+vjbbsHoF6dclO1BkpsnCXeYlWLDXzYn7re7S+V/
vuiwyE/D31Gp9RQGFWP26ZgCJsBulcyDFwNX4QHZO1UMgWLAcXLyqHqazsgNz2Nv
gs8wewbRw9XpaJh/r9cIeM9vJZq2AP9lfPyulf4L6tPv91IOMS6c4XAKWddeEz4f
zn190SFmBz5ffA==
-----END CERTIFICATE-----
Generated at Thu May 1 14:53:52 2025 by rpki-client