Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json)
Hash identifier: qVCqYKfIQoiEzWg6rhLEZG7GpZqLIktHJrrVAXhoCBw=
Subject key identifier: 7B:FF:C7:3A:A1:B3:EE:C0:CC:F5:47:AA:06:0B:21:C0:F2:60:02:93
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 0194BCA9B39A7A4BE97AF1B32D74B31125B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
Manifest number: 116D
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (hash: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=)
2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: iV+eUoHElsxHj5BDhTM6nkB4k+xz8kTl940nj/dFaG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b3:9a:7a:4b:e9:7a:f1:b3:2d:74:b3:11:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=7bffc73aa1b3eec0ccf547aa060b21c0f2600293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:77:03:bf:66:d0:5c:c3:dd:43:b9:d1:05:
7c:cb:8b:97:88:b6:06:62:e4:df:00:fe:57:bf:d3:
6d:93:ee:72:f7:7c:d0:31:0f:b7:38:de:6c:2d:a2:
1e:52:0c:63:dc:90:cb:3b:99:e3:b0:18:e4:f3:16:
51:64:1a:dd:39:a0:c6:08:d4:41:78:a2:f2:28:f8:
04:f1:c5:ef:88:d4:30:0a:68:f6:42:93:7a:d4:1f:
6a:b4:76:87:f9:b1:4c:bd:5a:3e:74:50:ca:27:0e:
77:de:6b:df:ae:8d:43:94:84:68:2f:70:96:7f:15:
b1:7e:41:c6:f3:99:28:15:01:3d:f1:5f:40:fc:39:
a7:28:75:50:96:dd:a2:a7:4f:a7:1e:ad:71:4f:0e:
d9:5c:e5:de:65:54:ca:71:c9:d0:99:35:53:ea:74:
90:0b:62:f4:be:93:a5:08:40:00:70:31:2b:a0:4f:
2d:c3:9a:7d:f1:3b:6a:8b:9f:8b:15:14:4e:51:6e:
ac:f8:10:97:ed:2a:85:88:ff:37:33:2b:c5:b0:a2:
27:bd:8e:df:c4:0e:51:5a:b5:e5:70:9b:ce:23:a6:
a1:58:89:bf:cd:cf:4f:18:b1:5e:f3:da:d1:76:06:
a1:1e:4c:b9:1e:7d:80:36:29:11:6b:92:4d:96:2f:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:C7:3A:A1:B3:EE:C0:CC:F5:47:AA:06:0B:21:C0:F2:60:02:93
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:c9:7b:ce:8c:31:db:37:fa:0a:10:5f:0a:e6:56:6f:2f:
d3:44:b7:09:74:29:eb:0d:01:72:eb:10:3b:d3:ed:30:33:26:
0c:f9:19:10:66:41:5f:6a:4b:9e:0b:2b:d0:0d:bd:5c:cb:8a:
37:6d:b8:39:36:76:70:95:90:51:4a:d7:ad:99:ac:12:93:91:
3e:65:0f:0d:d2:58:16:38:3c:1c:51:44:40:fc:53:95:52:40:
d1:24:40:85:2d:da:fe:2a:c6:b7:9f:31:31:88:cd:13:16:df:
6b:99:67:78:8b:08:f1:95:90:97:ed:77:68:de:38:16:92:5a:
cb:0a:bf:b9:30:17:bc:51:00:8f:07:12:7c:30:79:fc:3d:7b:
1f:08:8e:13:9b:32:f5:d5:11:1c:18:1a:98:09:da:0c:62:8a:
74:24:8b:d7:53:6f:2b:ca:3a:a0:ce:ec:fa:1e:a0:87:9a:7c:
2e:0b:bf:60:5d:48:96:51:ad:97:c9:83:de:fb:ff:c9:d8:2b:
6e:35:04:f7:86:df:db:d2:54:b7:a1:f6:0d:21:4e:1e:1f:7f:
16:24:ba:6e:ca:fa:4d:e5:ce:33:fd:59:42:ef:80:04:69:ab:
bb:16:b5:3b:44:52:ad:66:f0:5c:54:c5:d3:d4:a1:4b:83:c2:
09:7f:43:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbOaekvpevGzLXSzESWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTAyMWQ1NDBlZDdkODJjNjkwYWRjMDRmYmQ5ZGQ2ZWU1
MGU4ZDUwHhcNMjUwMTMxMTQwMDI1WhcNMjUwMjAxMTQwMDI1WjAzMTEwLwYDVQQD
Eyg3YmZmYzczYWExYjNlZWMwY2NmNTQ3YWEwNjBiMjFjMGYyNjAwMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06J3A79m0FzD3UO50QV8y4uXiLYG
YuTfAP5Xv9Ntk+5y93zQMQ+3ON5sLaIeUgxj3JDLO5njsBjk8xZRZBrdOaDGCNRB
eKLyKPgE8cXviNQwCmj2QpN61B9qtHaH+bFMvVo+dFDKJw533mvfro1DlIRoL3CW
fxWxfkHG85koFQE98V9A/DmnKHVQlt2ip0+nHq1xTw7ZXOXeZVTKccnQmTVT6nSQ
C2L0vpOlCEAAcDEroE8tw5p98Ttqi5+LFRROUW6s+BCX7SqFiP83MyvFsKInvY7f
xA5RWrXlcJvOI6ahWIm/zc9PGLFe89rRdgahHky5Hn2ANikRa5JNli/KnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv/xzqhs+7AzPVHqgYLIcDyYAKTMB8GA1UdIwQY
MBaAFIGgIdVA7X2CxpCtwE+9ndbuUOjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQt
YWQwMjczMjdmOWQ4LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQtYWQwMjczMjdmOWQ4
LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnvJe86M
Mds3+goQXwrmVm8v00S3CXQp6w0BcusQO9PtMDMmDPkZEGZBX2pLngsr0A29XMuK
N224OTZ2cJWQUUrXrZmsEpORPmUPDdJYFjg8HFFEQPxTlVJA0SRAhS3a/irGt58x
MYjNExbfa5lneIsI8ZWQl+13aN44FpJaywq/uTAXvFEAjwcSfDB5/D17HwiOE5sy
9dURHBgamAnaDGKKdCSL11NvK8o6oM7s+h6gh5p8Lgu/YF1IllGtl8mD3vv/ydgr
bjUE94bf29JUt6H2DSFOHh9/FiS6bsr6TeXOM/1ZQu+ABGmruxa1O0RSrWbwXFTF
09ShS4PCCX9DFA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:58 2025 by rpki-client