Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json)
Hash identifier: 7o8sGsIhOEICkoEHBCxuSiVTzP0O/6AQIGiKxReHtqI=
Subject key identifier: 33:A1:43:B4:A2:7E:6C:B3:87:8C:08:33:6D:E5:C9:82:2A:6C:29:FC
Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d
Certificate serial: 0194BBCEE97873DE7E6ACB8D5C6B0676579C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: JjOh7wV3uoOnT6pZLsppbv_LAZ8.roa (hash: QPSPPNn3Qn++fdP63nXuDi3yMhHz0vKFIROySBvf1mk=)
2: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: QcL4Ht4WbRuNcoArzOpxiZqnEHEYbIQ1IoeVyl0oNmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:78:73:de:7e:6a:cb:8d:5c:6b:06:76:57:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=33a143b4a27e6cb3878c08336de5c9822a6c29fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:a2:85:33:fa:d8:3e:a6:69:1b:a8:fd:15:
0c:b6:76:a1:aa:05:28:a7:b3:64:03:19:63:d6:2d:
88:59:02:72:d0:6b:17:0a:a2:e2:3e:0b:2d:51:02:
9c:59:c9:1d:dc:91:a5:3f:5f:a3:a1:f1:59:b8:79:
8c:ca:21:f5:4b:d2:7c:f8:2e:57:08:6b:0c:06:23:
77:d3:53:41:90:26:a1:4f:01:ca:a0:cc:37:8f:13:
7c:1d:f8:94:ff:27:97:18:29:70:72:16:6f:c3:1f:
e4:16:9f:29:60:af:87:0e:21:81:b3:cb:ce:3c:03:
73:00:fc:14:b0:8f:dc:44:7d:6e:4f:ac:c0:0a:08:
e9:78:c2:fc:d6:ed:d9:ee:e3:ac:64:2b:2d:e5:5b:
b4:16:b4:48:03:81:59:ac:02:7e:2f:9e:6b:f7:80:
35:04:ab:39:5c:8b:b6:16:76:04:39:bb:2f:0f:49:
ec:22:be:aa:3f:05:d0:b0:38:9e:b4:01:90:2a:87:
53:c3:d7:e2:a7:51:2f:09:f0:28:e3:f9:51:09:31:
32:34:40:79:52:ee:83:91:3f:4f:71:1c:5b:8b:cf:
00:70:bf:fa:cc:9c:2c:f6:1d:5d:3a:a0:d2:7e:7b:
fd:05:bd:01:93:48:4f:9d:86:f6:4e:d7:c9:12:1f:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:43:B4:A2:7E:6C:B3:87:8C:08:33:6D:E5:C9:82:2A:6C:29:FC
X509v3 Authority Key Identifier:
keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:67:ed:48:fa:d0:fd:b3:6d:57:92:eb:cd:4d:e1:09:77:68:
ba:a4:ae:9c:0d:ef:e6:b4:be:ca:a7:77:39:b2:a4:f8:f2:ca:
05:ba:c2:32:e9:e8:39:5e:79:9d:78:bd:da:e0:c1:e0:de:48:
4b:11:1e:cd:a9:75:64:12:2d:67:1e:67:9f:97:75:77:b4:26:
76:1c:19:e7:f0:b3:e1:a2:ba:24:f6:db:86:13:95:41:ff:65:
62:f9:5c:5c:a5:01:6f:8b:c6:b0:04:42:a2:b2:f0:d7:16:53:
68:e9:04:f2:81:d9:ac:21:de:d6:68:9c:1b:0b:d7:e4:e2:bc:
e8:0c:ad:51:ad:3f:d8:90:68:b2:fb:7a:5f:b2:76:ca:f5:35:
92:25:8b:7b:1f:3c:f0:7b:af:5f:68:bd:29:81:0e:e0:10:f3:
ea:ef:5e:3d:f4:eb:1c:4c:f1:bb:15:3b:c3:c9:dc:53:b6:26:
16:bc:c0:98:89:0a:5c:fd:23:bf:6f:bd:44:6e:29:cc:74:4c:
7a:31:1b:00:c2:64:a8:25:72:a7:16:9b:9f:63:02:44:43:d8:
d2:5e:60:cf:ec:d7:10:9c:07:d6:39:94:22:35:fb:ae:f5:ee:
96:4b:ce:26:b2:e9:2f:26:06:80:41:c0:c3:2a:10:9d:78:56:
c4:0c:f5:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zul4c95+asuNXGsGdlecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyY2MxNzFlM2RjODQ2NzExZTA1NmUyZTM2MjQxZGFjOTk0
YTYwMGQwHhcNMjUwMTMxMTAwMTI2WhcNMjUwMjAxMTAwMTI2WjAzMTEwLwYDVQQD
EygzM2ExNDNiNGEyN2U2Y2IzODc4YzA4MzM2ZGU1Yzk4MjJhNmMyOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSuihTP62D6maRuo/RUMtnahqgUo
p7NkAxlj1i2IWQJy0GsXCqLiPgstUQKcWckd3JGlP1+jofFZuHmMyiH1S9J8+C5X
CGsMBiN301NBkCahTwHKoMw3jxN8HfiU/yeXGClwchZvwx/kFp8pYK+HDiGBs8vO
PANzAPwUsI/cRH1uT6zACgjpeML81u3Z7uOsZCst5Vu0FrRIA4FZrAJ+L55r94A1
BKs5XIu2FnYEObsvD0nsIr6qPwXQsDietAGQKodTw9fip1EvCfAo4/lRCTEyNEB5
Uu6DkT9PcRxbi88AcL/6zJws9h1dOqDSfnv9Bb0Bk0hPnYb2TtfJEh+ZLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOhQ7Sifmyzh4wIM23lyYIqbCn8MB8GA1UdIwQY
MBaAFILMFx49yEZxHgVuLjYkHayZSmANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYt
ZWZkM2FlOTg1ZWU0LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYtZWZkM2FlOTg1ZWU0
LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2ftSPrQ
/bNtV5LrzU3hCXdouqSunA3v5rS+yqd3ObKk+PLKBbrCMunoOV55nXi92uDB4N5I
SxEezal1ZBItZx5nn5d1d7QmdhwZ5/Cz4aK6JPbbhhOVQf9lYvlcXKUBb4vGsARC
orLw1xZTaOkE8oHZrCHe1micGwvX5OK86AytUa0/2JBosvt6X7J2yvU1kiWLex88
8HuvX2i9KYEO4BDz6u9ePfTrHEzxuxU7w8ncU7YmFrzAmIkKXP0jv2+9RG4pzHRM
ejEbAMJkqCVypxabn2MCREPY0l5gz+zXEJwH1jmUIjX7rvXulkvOJrLpLyYGgEHA
wyoQnXhWxAz1Sw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:25 2025 by rpki-client