Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: eLAITgrJwN4GDobr7+9vx4X3N9w7pgm5fEqlyTCxFC0=
Subject key identifier: 70:83:EA:E9:D1:09:6F:25:BF:40:07:84:D8:98:40:8A:DE:75:9C:1E
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 0194BD85493293A06C801D501F9498ABF407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0951
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: eQDD9aYu77iHej6UcdG6S9P/VK2IpnWQtK3rZM8vxVM=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:49:32:93:a0:6c:80:1d:50:1f:94:98:ab:f4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=7083eae9d1096f25bf400784d898408ade759c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:2e:b9:55:ba:b0:57:65:9b:00:6c:b4:20:
6e:19:cb:51:d7:b2:d5:8e:c2:cc:bb:6c:3d:fe:9d:
8b:98:88:0d:ca:97:0a:19:1a:6b:cb:f3:9a:2d:8d:
60:9c:86:f5:d0:2b:c0:07:41:b7:bf:e0:3d:38:65:
54:38:5a:5e:c3:8d:d8:ee:92:a4:8b:c8:a2:02:2d:
72:93:67:bc:30:39:25:28:d6:ec:e8:47:27:cb:ff:
e7:df:a4:e6:b0:7a:7b:dd:fd:10:e5:a9:e4:db:44:
b8:f8:22:1e:f0:0e:62:d4:68:aa:30:fe:13:27:40:
b6:4e:80:07:72:bb:d2:69:22:c6:76:f4:75:a2:f5:
31:bd:17:1f:4a:77:a2:8f:47:25:ce:e3:38:d4:89:
69:3f:fd:63:27:aa:d5:6c:6c:2f:b8:d7:2f:92:94:
fe:f5:53:02:92:fb:05:d9:6c:a6:4d:c4:96:97:36:
e6:95:12:1d:cb:0d:29:ac:a9:5f:5e:d1:b0:64:a0:
3e:1c:1a:00:d4:46:cf:bf:08:f9:9c:7b:24:ef:e7:
0e:a6:01:46:29:08:dd:5d:95:0b:df:de:e5:a0:bf:
44:f6:6b:2f:33:3b:99:6c:16:a5:1e:ae:04:85:07:
d0:b9:28:b0:30:1c:2d:ef:ad:04:99:5e:04:38:3f:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:EA:E9:D1:09:6F:25:BF:40:07:84:D8:98:40:8A:DE:75:9C:1E
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:7b:fe:fa:af:18:fa:7f:44:9c:77:2c:79:85:d9:53:13:
4d:2c:3b:d7:45:e6:b7:a7:a2:64:8b:f9:57:10:f3:4e:3b:f5:
84:7f:9d:c7:47:ef:65:fb:ec:37:e6:fd:6e:ce:5f:fc:94:97:
4c:be:d9:5f:50:a1:c6:e3:b8:d3:81:cd:0a:a6:8b:ed:26:d9:
ec:33:54:7e:7c:0e:50:ac:22:d2:72:0d:28:8d:82:fe:30:8d:
60:04:88:da:cf:75:95:42:e2:a7:a1:b7:4f:e0:de:3b:27:39:
b4:cc:7b:be:6b:a1:98:7f:5d:5c:6d:d4:4b:02:18:ab:b6:d1:
f4:41:2f:bd:26:27:b6:e7:d6:2c:a6:a8:03:29:2c:33:32:ca:
3b:1a:92:3d:64:2c:8b:51:b2:88:7a:59:0e:a3:d2:b0:94:62:
f5:e5:e1:6c:cc:09:23:fd:19:1f:13:48:f1:84:7d:52:cb:a8:
2d:5e:91:c5:d5:92:3d:04:21:ad:bd:f4:69:53:72:4e:7f:0a:
8a:29:5a:6e:20:f8:2e:20:b9:cf:a2:57:bf:ed:73:9e:b6:88:
74:6f:60:af:16:9f:6c:86:29:e0:a6:db:44:71:16:3e:7e:6a:
23:d3:1a:42:bc:d8:37:b0:4f:da:2c:4f:bb:a0:2b:ba:67:2d:
22:94:56:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUkyk6BsgB1QH5SYq/QHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzE4MTBmZWM4ZTdiMGI1ZWMyNjI5ZTk5Yzg5NjM1OTI2
YzYyNTEwHhcNMjUwMTMxMTgwMDE2WhcNMjUwMjAxMTgwMDE2WjAzMTEwLwYDVQQD
Eyg3MDgzZWFlOWQxMDk2ZjI1YmY0MDA3ODRkODk4NDA4YWRlNzU5YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6MuuVW6sFdlmwBstCBuGctR17LV
jsLMu2w9/p2LmIgNypcKGRpry/OaLY1gnIb10CvAB0G3v+A9OGVUOFpew43Y7pKk
i8iiAi1yk2e8MDklKNbs6Ecny//n36TmsHp73f0Q5ank20S4+CIe8A5i1GiqMP4T
J0C2ToAHcrvSaSLGdvR1ovUxvRcfSneij0clzuM41IlpP/1jJ6rVbGwvuNcvkpT+
9VMCkvsF2WymTcSWlzbmlRIdyw0prKlfXtGwZKA+HBoA1EbPvwj5nHsk7+cOpgFG
KQjdXZUL397loL9E9msvMzuZbBalHq4EhQfQuSiwMBwt760EmV4EOD9nzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCD6unRCW8lv0AHhNiYQIredZweMB8GA1UdIwQY
MBaAFBpxgQ/sjnsLXsJinpnIljWSbGJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzIt
NDAxN2NlZjViY2E5LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jYzI0YjktNTkxOC00NTU3LWE4MzItNDAxN2NlZjViY2E5
LzEvR25HQkQteU9ld3Rld21LZW1jaVdOWkpzWWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkt7/vqv
GPp/RJx3LHmF2VMTTSw710Xmt6eiZIv5VxDzTjv1hH+dx0fvZfvsN+b9bs5f/JSX
TL7ZX1ChxuO404HNCqaL7SbZ7DNUfnwOUKwi0nINKI2C/jCNYASI2s91lULip6G3
T+DeOyc5tMx7vmuhmH9dXG3USwIYq7bR9EEvvSYntufWLKaoAyksMzLKOxqSPWQs
i1GyiHpZDqPSsJRi9eXhbMwJI/0ZHxNI8YR9UsuoLV6RxdWSPQQhrb30aVNyTn8K
iilabiD4LiC5z6JXv+1znraIdG9grxafbIYp4KbbRHEWPn5qI9MaQrzYN7BP2ixP
u6ArumctIpRWRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:04 2025 by rpki-client