Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: bEJDloubaN05UWTScaZ2eOw15yUW/eM+zh8+YqNBOCw=
Subject key identifier: 14:8F:6E:13:E3:A4:38:40:83:6D:FB:33:23:6E:C3:C7:8E:83:7A:3D
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0194BC04B27D34FB8F0165DFAA05AC5A741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 059A
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: 5wHexqP5XbbcTkWrss4rEvFR+FwsgDsUzATdAdYF9wM=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:7d:34:fb:8f:01:65:df:aa:05:ac:5a:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=148f6e13e3a43840836dfb33236ec3c78e837a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:2e:3d:55:1c:b9:f7:d9:3b:34:eb:d1:ca:
43:dd:a5:87:1f:56:1b:e2:ad:41:fb:ec:a2:5f:d5:
0d:92:91:13:3d:90:15:1d:1a:c0:2c:a0:1b:ec:7e:
74:4a:8a:4f:af:ee:ac:90:52:20:25:23:f2:a9:00:
2f:bb:82:b1:18:e1:c0:ed:24:4b:53:f7:f0:ba:eb:
d1:69:b8:f5:31:cf:a7:b5:da:40:7c:66:e8:69:b4:
4a:af:24:a1:bf:74:c4:04:8d:45:9b:ed:27:b0:94:
c8:97:5f:28:57:f9:8a:27:6b:c5:e7:76:12:8b:ef:
ec:6f:a0:e2:4a:0c:2d:5f:ef:67:65:de:74:75:3a:
94:f4:46:4a:ac:df:fd:7d:37:0f:47:1d:1c:ff:a3:
49:af:d6:fc:e9:47:d5:97:f7:a0:46:92:5d:27:7a:
28:49:ff:6c:cc:42:e5:78:ec:60:f6:38:06:d5:1f:
10:78:c0:79:f3:3b:d1:cb:f0:6a:2e:65:5b:b7:2e:
87:da:45:ca:72:e5:62:5a:f8:35:7a:af:c0:19:78:
99:2e:d9:55:e3:fa:07:76:ea:46:44:ce:dc:82:8c:
e2:e8:e2:09:6e:fc:f2:50:80:77:a6:51:2b:24:fb:
6c:0d:b3:cf:7d:f9:8a:0b:ea:d1:b2:1d:63:49:63:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:6E:13:E3:A4:38:40:83:6D:FB:33:23:6E:C3:C7:8E:83:7A:3D
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:12:42:93:da:ba:ef:59:32:2d:91:62:90:11:c9:e6:1b:ce:
16:8a:c0:e5:54:74:e3:40:2f:5b:b1:3c:b1:da:ea:95:8b:3a:
e3:0f:f4:0f:0f:51:41:c0:7f:21:e6:1d:88:79:c7:14:6d:51:
88:f0:74:6e:10:24:f8:a2:71:f5:3c:da:53:24:5a:62:5e:ba:
14:f9:ca:10:9b:15:b1:00:e9:43:e0:fa:c2:62:28:f5:0a:0b:
e7:c0:d9:9c:f3:d5:da:d5:76:a2:0b:66:8f:22:7e:4b:31:03:
5b:64:d0:b9:32:e1:74:dc:5a:2e:42:c6:70:ac:d2:fd:69:d7:
b2:2c:da:89:2d:19:d7:d4:21:14:3f:c6:a0:25:61:da:df:76:
9f:76:b1:d4:6b:b6:87:b2:30:87:e4:5a:d8:a6:8a:f2:7a:20:
49:45:f9:b6:f5:55:40:58:07:c3:16:50:a4:ee:48:aa:3a:6e:
51:08:b3:fe:32:16:62:25:a8:77:32:48:42:7e:30:5c:e7:7e:
48:2e:7c:cc:1d:df:20:51:8b:e0:b4:bd:2d:80:46:68:b0:d7:
f5:4f:ab:40:56:46:2e:67:80:ca:62:65:5c:a9:cc:a8:a0:8c:
bf:c7:3d:74:d0:bd:2f:6d:5d:ae:a4:7e:ce:3d:17:63:24:d9:
8c:03:12:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLJ9NPuPAWXfqgWsWnQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1
NjVkNTcwHhcNMjUwMTMxMTEwMDExWhcNMjUwMjAxMTEwMDExWjAzMTEwLwYDVQQD
EygxNDhmNmUxM2UzYTQzODQwODM2ZGZiMzMyMzZlYzNjNzhlODM3YTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyouPVUcuffZOzTr0cpD3aWHH1Yb
4q1B++yiX9UNkpETPZAVHRrALKAb7H50SopPr+6skFIgJSPyqQAvu4KxGOHA7SRL
U/fwuuvRabj1Mc+ntdpAfGboabRKryShv3TEBI1Fm+0nsJTIl18oV/mKJ2vF53YS
i+/sb6DiSgwtX+9nZd50dTqU9EZKrN/9fTcPRx0c/6NJr9b86UfVl/egRpJdJ3oo
Sf9szELleOxg9jgG1R8QeMB58zvRy/BqLmVbty6H2kXKcuViWvg1eq/AGXiZLtlV
4/oHdupGRM7cgozi6OIJbvzyUIB3plErJPtsDbPPffmKC+rRsh1jSWMPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSPbhPjpDhAg237MyNuw8eOg3o9MB8GA1UdIwQY
MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt
ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0
LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBJCk9q6
71kyLZFikBHJ5hvOForA5VR040AvW7E8sdrqlYs64w/0Dw9RQcB/IeYdiHnHFG1R
iPB0bhAk+KJx9TzaUyRaYl66FPnKEJsVsQDpQ+D6wmIo9QoL58DZnPPV2tV2ogtm
jyJ+SzEDW2TQuTLhdNxaLkLGcKzS/WnXsizaiS0Z19QhFD/GoCVh2t92n3ax1Gu2
h7Iwh+Ra2KaK8nogSUX5tvVVQFgHwxZQpO5IqjpuUQiz/jIWYiWodzJIQn4wXOd+
SC58zB3fIFGL4LS9LYBGaLDX9U+rQFZGLmeAymJlXKnMqKCMv8c9dNC9L21drqR+
zj0XYyTZjAMSwg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:54 2025 by rpki-client