Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: qfiGjzxzIHxY7YlEQu6hWWG92VH2HoSQle9FWfN+X7M=
Subject key identifier: 1C:13:36:D8:85:53:71:2A:30:64:20:9C:A4:CA:1C:58:52:5B:B3:FA
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 0194BC72E4969A8272109FB11B641DCFB0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0841
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: mOd7nRQo3/vuexWditbDnta2a+nEx59Ot6xe3fq+YSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e4:96:9a:82:72:10:9f:b1:1b:64:1d:cf:b0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=1c1336d88553712a3064209ca4ca1c58525bb3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:10:f0:2d:50:f4:9b:10:a2:06:30:9f:4a:
14:22:b5:0f:e3:46:c1:e1:cd:f0:d7:4f:00:e2:45:
5f:7f:59:37:33:22:de:41:2f:59:10:e7:d9:5c:a5:
b3:5c:e6:9a:5f:d5:a4:18:ac:a2:71:ae:5a:36:40:
58:eb:5d:ea:58:e5:b8:69:1f:95:9d:74:d6:25:f5:
1d:fa:ac:b6:01:f6:3f:52:17:42:cd:62:14:fb:67:
a9:b0:65:ec:ba:e6:f3:c0:87:de:75:35:80:00:ec:
d6:a3:22:fd:5a:12:e6:69:30:e1:e5:30:5e:08:35:
ea:aa:e2:e6:63:b6:bf:61:63:1b:7e:18:1d:67:ed:
e2:94:0e:44:b5:d7:64:c2:c0:9d:43:4c:d8:73:91:
8d:c3:cd:37:fc:92:58:19:0a:b6:90:ef:58:ef:aa:
9a:5e:c9:8e:73:38:6f:bf:f4:f1:e7:86:8f:0a:0b:
44:ce:a7:0b:68:6c:fc:c8:ad:1e:39:4c:6d:36:30:
dd:e4:3e:9c:8e:d9:63:10:51:cd:9f:d3:d7:fb:80:
b9:00:65:1b:9e:6e:57:dd:2c:c9:7f:4d:e5:b4:c5:
d3:82:7f:77:d5:5c:b5:46:63:ec:5e:14:b2:2f:b9:
db:67:66:f5:ad:a3:0f:ef:d1:ae:b8:ba:e8:10:f3:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:13:36:D8:85:53:71:2A:30:64:20:9C:A4:CA:1C:58:52:5B:B3:FA
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c6:17:c5:a7:64:ed:4d:1a:48:36:cf:50:64:4a:98:f1:82:
3b:19:c2:43:89:e3:40:41:36:10:92:e2:52:74:6a:b9:a2:4d:
2f:57:be:b3:72:6d:f6:75:7f:9b:ad:9d:2f:f9:38:c1:f3:2e:
a3:85:be:be:e1:41:d0:2c:dc:92:c8:65:cc:4b:cd:f6:47:e1:
ab:95:a0:37:bd:8a:96:cf:29:15:c7:e8:6f:a0:1a:b8:ff:59:
37:a3:63:61:43:e2:dd:7c:da:14:d5:37:7a:52:9f:85:0e:da:
81:b1:fe:1d:7b:e8:12:4c:05:12:52:ec:10:b7:42:82:de:be:
6d:c7:2f:1c:08:2e:eb:fa:9c:b3:6c:52:81:bd:e3:bc:32:ec:
38:ac:cf:5c:b8:b0:a4:a2:b7:30:11:69:ea:ad:05:7b:1c:78:
28:99:e7:f7:01:e6:e1:70:a4:fe:ca:f9:72:03:f0:e0:4b:6e:
b4:c8:0f:09:f3:c0:58:64:49:c5:ff:58:92:9f:19:21:27:e5:
83:8d:ab:58:46:60:39:e0:70:da:6a:f6:92:40:7c:9e:91:bf:
03:e4:c0:b3:5a:bd:11:51:6f:29:50:c0:fb:97:4b:52:15:da:
bb:0e:e2:06:dd:f7:69:20:bd:1c:99:8a:16:66:73:52:61:62:
98:49:97:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuSWmoJyEJ+xG2Qdz7DaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNDFmZWVhMTIzZmNiMDdlODcyYThjYjRiZGQ5YWI3Yjhk
YTJmY2YwHhcNMjUwMTMxMTMwMDMzWhcNMjUwMjAxMTMwMDMzWjAzMTEwLwYDVQQD
EygxYzEzMzZkODg1NTM3MTJhMzA2NDIwOWNhNGNhMWM1ODUyNWJiM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOwQ8C1Q9JsQogYwn0oUIrUP40bB
4c3w108A4kVff1k3MyLeQS9ZEOfZXKWzXOaaX9WkGKyica5aNkBY613qWOW4aR+V
nXTWJfUd+qy2AfY/UhdCzWIU+2epsGXsuubzwIfedTWAAOzWoyL9WhLmaTDh5TBe
CDXqquLmY7a/YWMbfhgdZ+3ilA5EtddkwsCdQ0zYc5GNw803/JJYGQq2kO9Y76qa
XsmOczhvv/Tx54aPCgtEzqcLaGz8yK0eOUxtNjDd5D6cjtljEFHNn9PX+4C5AGUb
nm5X3SzJf03ltMXTgn931Vy1RmPsXhSyL7nbZ2b1raMP79GuuLroEPOWEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwTNtiFU3EqMGQgnKTKHFhSW7P6MB8GA1UdIwQY
MBaAFIBB/uoSP8sH6HKoy0vdmre42i/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgt
ZjdjNTAxNDE4ZTU2LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgtZjdjNTAxNDE4ZTU2
LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMYXxadk
7U0aSDbPUGRKmPGCOxnCQ4njQEE2EJLiUnRquaJNL1e+s3Jt9nV/m62dL/k4wfMu
o4W+vuFB0CzckshlzEvN9kfhq5WgN72Kls8pFcfob6AauP9ZN6NjYUPi3XzaFNU3
elKfhQ7agbH+HXvoEkwFElLsELdCgt6+bccvHAgu6/qcs2xSgb3jvDLsOKzPXLiw
pKK3MBFp6q0Fexx4KJnn9wHm4XCk/sr5cgPw4EtutMgPCfPAWGRJxf9Ykp8ZISfl
g42rWEZgOeBw2mr2kkB8npG/A+TAs1q9EVFvKVDA+5dLUhXauw7iBt33aSC9HJmK
FmZzUmFimEmXRg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:38 2025 by rpki-client