Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: pORxW4oJU9Hz8O3ZPca7GcZrbB9cDGw+XMSQe7txlGY=
Subject key identifier: 86:E3:26:3A:08:34:E1:07:F6:15:73:B0:87:29:9C:4E:00:05:B8:66
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 0194BCA9E479D50BAC677963FFE55D5E4E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0556
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: z7ox2ShoHTBrV5GHdcEqsJ1WtNdaLVVVsV8vmlTAdiA=)
2: 4H2gHj1CXkWBU_DMVpHCA9Um4GY.roa (hash: x1Rq7qldN5MD23w00lO+g/VF0IGAYCg3Il7yXc0B+cA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e4:79:d5:0b:ac:67:79:63:ff:e5:5d:5e:4e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=86e3263a0834e107f61573b087299c4e0005b866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:38:6d:ed:f7:5e:69:d1:fb:eb:31:69:6a:0d:
be:80:70:71:50:20:90:b4:bf:f2:c9:cf:93:db:a7:
26:b1:ce:77:cc:9c:56:26:77:63:de:14:17:9e:60:
98:94:14:36:4b:06:49:ac:84:9e:b8:c1:67:a3:f0:
2a:cd:11:a8:cc:e2:f6:aa:1f:fa:c8:23:5d:86:0c:
3b:96:d9:e8:46:44:91:51:18:ba:86:88:d9:af:26:
33:6e:e5:a8:0c:42:86:dd:71:a1:d5:44:a0:99:60:
7c:12:6e:38:fb:68:40:29:18:91:6b:72:d2:3e:3b:
04:3b:9f:9a:41:95:8a:f5:87:39:ae:26:c6:2c:ca:
cc:4f:25:7d:17:5e:2b:de:4d:94:22:6d:e2:34:c8:
60:33:e4:de:47:d8:b6:1b:27:6f:0f:1d:f0:dd:95:
99:95:e3:4e:99:e8:44:34:73:68:b7:2e:ea:02:0c:
78:83:f2:87:dc:4b:f7:03:90:18:82:27:c6:91:f0:
9a:90:38:da:65:e2:13:a4:29:87:12:aa:c0:12:54:
56:c0:31:b9:8c:00:db:89:af:3e:47:7f:9d:9a:1d:
ae:a1:6b:cb:d7:cb:f0:ae:33:9a:39:10:c6:b7:38:
12:11:e0:4c:c2:8c:e7:f3:d4:01:3a:a4:c0:ca:e6:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:26:3A:08:34:E1:07:F6:15:73:B0:87:29:9C:4E:00:05:B8:66
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0b:9b:f3:c2:6e:19:6e:78:21:f0:f5:6c:d5:5a:95:98:90:
c7:c5:4a:cb:c6:c1:ba:4a:16:71:c2:be:bc:27:97:9c:f1:2f:
fa:75:7a:77:0c:0b:ac:7d:c0:f7:d8:9e:f2:d8:c5:83:9a:14:
9c:3a:05:e0:1c:c7:a9:6d:6c:de:57:0f:1a:09:8d:c9:07:1c:
4d:a4:d6:26:1f:48:0d:16:42:34:2c:df:2d:66:31:6a:0c:1e:
e9:15:2c:49:a4:ba:40:a3:79:d3:33:a5:43:71:b4:10:24:6a:
79:90:c8:21:56:96:a1:5c:b0:84:fb:20:78:e5:62:77:da:7f:
8c:cf:e0:63:9b:61:6f:48:02:df:92:1c:96:b0:cc:ab:27:46:
0c:0c:08:03:18:8c:92:fd:85:6a:bf:5e:40:02:49:70:2f:22:
f2:85:d8:97:01:79:ed:b2:b1:34:70:22:ac:b2:2c:b1:f4:2e:
91:a4:ce:20:09:c1:60:7c:9a:9b:7d:cc:46:ca:2d:c3:24:89:
83:49:7a:b5:65:8c:b0:6b:4d:4b:0c:3f:8a:59:86:bf:51:6e:
ee:7a:2d:5d:c8:96:71:75:f9:83:71:6d:7f:98:8c:b9:42:a6:
95:54:6d:5d:0c:23:53:0f:81:7b:46:a1:df:b6:45:de:37:45:
8d:16:04:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeR51QusZ3lj/+VdXk4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNmM4YWQyODUzOGVkZTBiNGM3ZTFhNzFlOWNhOTg5YTlm
MDNmMTAwHhcNMjUwMTMxMTQwMDM4WhcNMjUwMjAxMTQwMDM4WjAzMTEwLwYDVQQD
Eyg4NmUzMjYzYTA4MzRlMTA3ZjYxNTczYjA4NzI5OWM0ZTAwMDViODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Dht7fdeadH76zFpag2+gHBxUCCQ
tL/yyc+T26cmsc53zJxWJndj3hQXnmCYlBQ2SwZJrISeuMFno/AqzRGozOL2qh/6
yCNdhgw7ltnoRkSRURi6hojZryYzbuWoDEKG3XGh1USgmWB8Em44+2hAKRiRa3LS
PjsEO5+aQZWK9Yc5ribGLMrMTyV9F14r3k2UIm3iNMhgM+TeR9i2GydvDx3w3ZWZ
leNOmehENHNoty7qAgx4g/KH3Ev3A5AYgifGkfCakDjaZeITpCmHEqrAElRWwDG5
jADbia8+R3+dmh2uoWvL18vwrjOaORDGtzgSEeBMwozn89QBOqTAyuaYJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbjJjoINOEH9hVzsIcpnE4ABbhmMB8GA1UdIwQY
MBaAFOBsitKFOO3gtMfhpx6cqYmp8D8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTkt
MzFiMmM2NjZiMmRjLzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTktMzFiMmM2NjZiMmRj
LzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgub88Ju
GW54IfD1bNValZiQx8VKy8bBukoWccK+vCeXnPEv+nV6dwwLrH3A99ie8tjFg5oU
nDoF4BzHqW1s3lcPGgmNyQccTaTWJh9IDRZCNCzfLWYxagwe6RUsSaS6QKN50zOl
Q3G0ECRqeZDIIVaWoVywhPsgeOVid9p/jM/gY5thb0gC35IclrDMqydGDAwIAxiM
kv2Far9eQAJJcC8i8oXYlwF57bKxNHAirLIssfQukaTOIAnBYHyam33MRsotwySJ
g0l6tWWMsGtNSww/ilmGv1Fu7notXciWcXX5g3Ftf5iMuUKmlVRtXQwjUw+Be0ah
37ZF3jdFjRYEfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:42 2025 by rpki-client