Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File: gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier: OWZVml+Fas13pi3jtUO5wqdAiU44E9Yx0yZ6/z63Gcg=
Subject key identifier: 1B:DE:5D:F0:F9:D5:F5:7C:CB:CB:86:5E:F1:39:25:F0:A4:6D:A1:92
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 0194BC72CEB3BF77B932E3FC4436D075E0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: HVgAsSPAJtVeW47YxnAzUSRZ2XE.roa (hash: ujzlkp7V44O0FlU9UIiFJL7+uhPl67nPKIBt3ipHwtM=)
2: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
3: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: xuMhTkq5xsDOHceXUkayxUjwiPYZ+3QrtCwoITPHC2s=)
4: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ce:b3:bf:77:b9:32:e3:fc:44:36:d0:75:e0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=1bde5df0f9d5f57ccbcb865ef13925f0a46da192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:6a:b9:bc:ce:cc:0a:b2:f5:9a:c9:e9:c4:
9b:6d:c7:c0:86:03:dd:09:cf:02:c9:3d:65:5e:37:
f0:5c:ba:c6:04:57:44:2a:23:f1:3f:a3:69:23:29:
88:bf:07:f7:ab:18:49:3b:21:f0:44:29:c0:45:0e:
30:3c:91:27:ce:7b:ef:7e:bf:93:6a:07:a9:f0:f3:
9b:3e:23:d6:71:f6:e7:28:b1:61:58:4d:4b:3e:a3:
fb:da:c3:10:d2:b8:69:d0:1f:89:aa:db:15:f5:3a:
9a:4d:58:e6:8e:87:3f:79:89:2d:02:cf:34:53:74:
46:22:c6:14:48:ce:7c:5b:1b:42:48:dc:26:16:79:
e6:14:d4:b3:05:2b:d8:0b:e1:02:ff:7c:cf:fc:0f:
2f:b3:ac:5b:8c:46:fc:ca:92:fb:de:ea:a0:02:a1:
0e:82:c2:1c:c2:e2:60:3b:5c:84:75:57:20:95:8c:
7b:c3:7d:58:76:22:71:ab:f6:2a:14:f8:3e:fe:36:
5a:30:2c:a5:cf:4f:9e:ba:2f:c2:38:42:02:8a:3d:
3f:aa:21:a6:86:90:f7:31:62:a7:b2:75:da:af:47:
7a:0d:6d:b5:0b:13:27:9b:e6:bd:88:c2:b9:4d:37:
64:b4:fe:6e:30:f1:b9:20:03:43:67:ed:36:fc:be:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DE:5D:F0:F9:D5:F5:7C:CB:CB:86:5E:F1:39:25:F0:A4:6D:A1:92
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:26:ba:90:49:bc:b5:2b:d1:f3:8c:03:fa:58:43:1d:9f:bc:
c1:ce:2a:56:32:bd:39:7f:15:72:7c:ab:1a:ee:40:12:8a:21:
a3:a8:c3:15:0e:60:1c:6e:0d:3d:4c:c8:b0:0c:67:a4:b0:0b:
d7:e9:3f:9d:2f:cd:66:a5:67:b7:45:2b:32:77:3a:24:1a:e3:
7e:31:b7:29:fd:d2:05:29:ba:aa:cd:3b:23:4c:1a:56:70:3a:
f4:e4:b1:5f:1e:0a:81:20:0d:54:2c:8e:9e:86:07:c4:3c:55:
53:0d:41:f6:17:64:cb:ee:41:a3:62:90:b2:2e:5b:9d:4c:57:
aa:72:73:4b:89:16:a7:04:30:f0:0b:36:20:57:88:42:09:d6:
31:4a:19:ad:fe:d7:26:c1:f5:96:01:1b:99:87:62:ab:f3:88:
ce:a3:9c:a1:eb:dc:79:2e:5b:7c:00:b0:1a:30:be:11:62:57:
79:55:56:9f:2e:f3:26:98:88:68:36:e9:a8:07:6e:71:c7:10:
ec:05:ae:9e:9f:44:65:6c:68:59:57:c9:b6:0b:ce:36:4b:29:
76:49:14:65:51:fc:fd:e1:4a:f3:d8:79:34:bd:41:ca:d2:cc:
2a:78:8a:17:1e:e6:af:20:c2:04:cc:6c:b0:37:ac:54:5b:fe:
97:13:43:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cs6zv3e5MuP8RDbQdeDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl
NzdiN2EwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
EygxYmRlNWRmMGY5ZDVmNTdjY2JjYjg2NWVmMTM5MjVmMGE0NmRhMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiRqubzOzAqy9ZrJ6cSbbcfAhgPd
Cc8CyT1lXjfwXLrGBFdEKiPxP6NpIymIvwf3qxhJOyHwRCnARQ4wPJEnznvvfr+T
agep8PObPiPWcfbnKLFhWE1LPqP72sMQ0rhp0B+JqtsV9TqaTVjmjoc/eYktAs80
U3RGIsYUSM58WxtCSNwmFnnmFNSzBSvYC+EC/3zP/A8vs6xbjEb8ypL73uqgAqEO
gsIcwuJgO1yEdVcglYx7w31YdiJxq/YqFPg+/jZaMCylz0+eui/COEICij0/qiGm
hpD3MWKnsnXar0d6DW21CxMnm+a9iMK5TTdktP5uMPG5IANDZ+02/L5PFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBveXfD51fV8y8uGXvE5JfCkbaGSMB8GA1UdIwQY
MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt
YzA4OTk3YTdhMDhmLzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm
LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCa6kEm8
tSvR84wD+lhDHZ+8wc4qVjK9OX8VcnyrGu5AEooho6jDFQ5gHG4NPUzIsAxnpLAL
1+k/nS/NZqVnt0UrMnc6JBrjfjG3Kf3SBSm6qs07I0waVnA69OSxXx4KgSANVCyO
noYHxDxVUw1B9hdky+5Bo2KQsi5bnUxXqnJzS4kWpwQw8As2IFeIQgnWMUoZrf7X
JsH1lgEbmYdiq/OIzqOcoevceS5bfACwGjC+EWJXeVVWny7zJpiIaDbpqAducccQ
7AWunp9EZWxoWVfJtgvONkspdkkUZVH8/eFK89h5NL1BytLMKniKFx7mryDCBMxs
sDesVFv+lxNDTw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:54 2025 by rpki-client