Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier: GgEv5ImUCfN5kFLs3cyE5BytVDfUuI3QkTppuO//YzA=
Subject key identifier: 3B:7D:AC:0C:97:67:D0:EC:76:8D:8D:74:D4:FC:B1:34:3C:88:BB:A6
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 0194BC050FEB485D7C3F1D644DDF9FD60E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number: 0656
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: xO+m8W5gEajwHZGkb80fYnNcJlG3sI0KTXDFqTbeyu4=)
2: sEHEZJdyZNM4H5KyWrunH6ae2rs.roa (hash: 2fdDOMvINX/MZk3ZnK4mtn0JneFrVoF0x/0pmTQHlWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0f:eb:48:5d:7c:3f:1d:64:4d:df:9f:d6:0e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=3b7dac0c9767d0ec768d8d74d4fcb1343c88bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:a0:7a:df:71:90:0e:79:2f:40:f6:31:08:
6f:f1:3e:8c:a4:b3:3f:ce:7b:74:e3:29:8f:cd:a4:
e1:0f:a7:ca:32:48:3b:33:bd:f4:db:55:2d:e3:f8:
0c:0c:1e:20:87:ba:73:30:c8:6d:27:6d:b7:e2:93:
1b:dd:15:d3:d9:4f:28:ce:8e:04:5c:bc:40:ee:03:
6f:34:25:b9:09:3a:4a:3e:c2:b1:92:77:96:b7:73:
25:4b:5a:0a:bf:c7:8d:ce:bd:bc:54:f7:53:f6:20:
a0:2f:db:31:9e:0f:ff:1b:2a:e0:cd:6a:d0:ca:71:
99:21:81:b0:8d:cd:5f:0d:91:9e:f6:77:32:24:d3:
7e:97:33:78:ed:c0:80:97:c6:1d:85:fb:12:92:df:
98:01:49:ff:51:26:76:40:05:3a:92:6f:54:92:f4:
ff:0d:82:1d:dc:12:01:5d:ad:1d:de:24:1e:87:ff:
ee:93:ad:df:d9:92:35:38:d2:c6:8e:9b:be:8c:37:
c3:e4:6f:d3:00:e6:95:d5:7a:41:01:6a:b0:b9:98:
6c:da:d0:60:dd:8f:d1:17:cf:0f:f5:a1:84:a1:48:
15:3a:0f:63:16:39:06:e9:6f:f5:6d:bf:3b:03:78:
63:30:ca:44:2a:56:24:6d:24:fa:b2:02:4e:e1:a1:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:AC:0C:97:67:D0:EC:76:8D:8D:74:D4:FC:B1:34:3C:88:BB:A6
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:51:43:a1:f4:ca:2a:1b:52:0d:32:b8:fc:17:52:12:eb:8b:
5c:f9:60:b4:fc:30:87:b5:80:bb:5a:78:20:d2:d9:10:2b:95:
7c:55:b5:a3:de:cd:bf:6a:9f:f3:ea:18:40:74:75:64:9e:ec:
31:49:a6:30:21:9c:c4:11:c1:49:4f:22:12:bd:da:ba:5b:ab:
8b:2b:59:68:7d:97:89:0f:d2:d1:06:21:75:94:dc:ab:69:8b:
20:be:1e:db:96:0d:ac:6a:d8:73:50:ff:7b:5b:53:80:a3:0e:
a7:dd:e2:6a:d2:3a:ed:a7:dc:09:31:81:1f:f7:9d:12:eb:3f:
fe:d1:39:d0:c5:05:0a:4b:db:0c:63:f0:80:46:66:71:f0:97:
bd:ba:13:29:9f:0e:6f:11:c0:ca:7e:44:b3:c4:8d:b2:4c:6e:
fc:cf:41:4d:8f:61:6d:6f:e7:8c:60:b4:b5:2c:f0:09:cd:1a:
42:78:55:b5:1e:cf:7d:02:dd:48:06:b6:d0:b6:26:24:69:a6:
62:bc:22:6a:12:a9:32:5d:a0:13:05:65:e8:b8:72:82:66:5b:
21:33:e2:0b:e1:7b:90:af:c6:40:cc:8f:42:2a:74:16:19:9e:
0c:c7:25:e0:1a:8c:d8:46:93:2a:d8:59:ff:d8:7e:2b:8d:37:
eb:07:8b:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQ/rSF18Px1kTd+f1g6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh
MGI1YWUwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EygzYjdkYWMwYzk3NjdkMGVjNzY4ZDhkNzRkNGZjYjEzNDNjODhiYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpWget9xkA55L0D2MQhv8T6MpLM/
znt04ymPzaThD6fKMkg7M73021Ut4/gMDB4gh7pzMMhtJ2234pMb3RXT2U8ozo4E
XLxA7gNvNCW5CTpKPsKxkneWt3MlS1oKv8eNzr28VPdT9iCgL9sxng//GyrgzWrQ
ynGZIYGwjc1fDZGe9ncyJNN+lzN47cCAl8YdhfsSkt+YAUn/USZ2QAU6km9UkvT/
DYId3BIBXa0d3iQeh//uk63f2ZI1ONLGjpu+jDfD5G/TAOaV1XpBAWqwuZhs2tBg
3Y/RF88P9aGEoUgVOg9jFjkG6W/1bb87A3hjMMpEKlYkbST6sgJO4aFXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDt9rAyXZ9Dsdo2NdNT8sTQ8iLumMB8GA1UdIwQY
MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt
NWJlMTIwMjM2N2U5LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5
LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVFDofTK
KhtSDTK4/BdSEuuLXPlgtPwwh7WAu1p4INLZECuVfFW1o97Nv2qf8+oYQHR1ZJ7s
MUmmMCGcxBHBSU8iEr3auluriytZaH2XiQ/S0QYhdZTcq2mLIL4e25YNrGrYc1D/
e1tTgKMOp93iatI67afcCTGBH/edEus//tE50MUFCkvbDGPwgEZmcfCXvboTKZ8O
bxHAyn5Es8SNskxu/M9BTY9hbW/njGC0tSzwCc0aQnhVtR7PfQLdSAa20LYmJGmm
YrwiahKpMl2gEwVl6LhygmZbITPiC+F7kK/GQMyPQip0FhmeDMcl4BqM2EaTKthZ
/9h+K4036weLjg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:41 2025 by rpki-client