Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: dixuUXHKybkWw5kpxQrDPm5wgaeUfLSeyk9GBU7lEl0=
Subject key identifier: C7:AD:31:F4:4C:9E:8F:B2:A0:D9:02:66:A1:4C:1C:8C:65:5C:20:C8
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 0194BC72F48EEF2FAB68ECB155BB91F4F6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 10C2
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: 15Cc0rkgOAAGUx8rhsWE0wocji4.roa (hash: w5RcK6dKOaSgSCjKMtRrWFYt+lmDT9Fb/OPGmzxAWAs=)
2: SJFANTgwe4hEyH_EtKYCt-bwKco.roa (hash: ldpxNw0POIEDob8qbk6GclOigoPKG+NNUzLcGWGZ1io=)
3: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: Uj7ZfG9rc+oPWRYNwhpLNI8C8skCafPznJvj5ekJyXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f4:8e:ef:2f:ab:68:ec:b1:55:bb:91:f4:f6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=c7ad31f44c9e8fb2a0d90266a14c1c8c655c20c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:8a:6b:6e:54:f0:88:f4:15:01:f4:6f:24:
5b:3f:3d:76:9c:be:66:f9:e7:f5:ae:c8:a7:a1:99:
35:01:0b:67:45:ba:4e:ef:f9:d3:55:77:00:43:d1:
17:d3:68:08:31:5f:07:4c:23:38:99:e7:61:cb:42:
18:07:9f:bb:8c:c0:ca:33:0f:f0:9f:a7:32:42:5d:
9f:1b:fb:d2:ef:2d:84:6d:6f:5b:45:18:87:5a:eb:
54:76:6a:b8:ba:1e:70:32:a4:63:da:3f:91:c6:12:
8a:d8:ac:e0:54:72:4a:d4:6a:1d:35:57:86:02:9a:
9d:e9:84:43:4a:de:c7:63:15:b2:6f:e1:5b:ba:f9:
19:b8:d6:64:eb:30:dc:ee:e0:ed:85:73:a4:a0:21:
2d:88:e5:14:f3:ec:2b:9c:64:41:56:96:70:35:bc:
73:46:36:4b:05:c5:2e:82:67:b6:0a:a5:4a:95:b1:
67:09:56:4e:bd:fa:c2:a9:53:04:93:ee:e9:43:a2:
9a:b0:e8:4a:c6:1b:36:44:0a:3e:6c:9b:a8:27:b0:
b4:39:56:83:7a:cc:5d:be:ea:2d:7e:20:84:7c:73:
4d:87:24:18:20:e3:44:38:32:9a:16:6e:b8:96:46:
65:06:6e:9d:c8:0c:e9:1f:dd:91:64:d7:83:6f:0d:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:31:F4:4C:9E:8F:B2:A0:D9:02:66:A1:4C:1C:8C:65:5C:20:C8
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ea:fb:64:fa:b0:f2:41:82:2b:e8:e2:a6:ee:b4:e0:e2:1d:
fa:83:f4:7f:10:05:0c:7b:5c:6f:2b:be:64:37:51:f9:99:42:
d6:1b:5a:48:ac:28:19:9f:81:1c:7e:c0:8c:e5:7c:7a:35:de:
fa:aa:85:17:1a:0f:7e:d8:95:20:0b:fe:1e:69:27:a7:73:dc:
e5:28:c9:4d:17:14:da:2b:0d:73:c0:45:41:4f:6a:e8:da:76:
24:d0:56:78:f5:25:b6:f3:d2:8a:21:ef:b2:f8:be:ec:9c:01:
f9:14:96:f5:89:46:63:51:e5:ac:64:2b:ec:09:3e:6f:b2:66:
bc:11:71:0d:98:1d:b8:2f:ff:fe:79:f1:b6:8c:8d:c2:5d:89:
78:64:bd:d7:ed:9f:c5:b2:bd:40:d0:86:30:df:27:8a:24:3d:
0b:07:fb:63:07:52:a0:ed:4f:12:66:9d:54:86:23:4c:71:8f:
c5:20:65:59:42:12:66:84:f8:05:0b:72:45:54:c6:6b:16:eb:
69:bc:87:a5:23:f8:2d:b9:15:3d:ee:a3:68:eb:82:77:02:e6:
62:32:73:74:6d:d6:ee:34:83:9c:3b:4b:af:3d:c3:cf:67:2f:
e0:1c:04:af:c1:01:56:fd:35:c2:42:38:3c:6f:8b:1d:74:f3:
9e:f5:4c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvSO7y+raOyxVbuR9Pb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUwMTMxMTMwMDM3WhcNMjUwMjAxMTMwMDM3WjAzMTEwLwYDVQQD
EyhjN2FkMzFmNDRjOWU4ZmIyYTBkOTAyNjZhMTRjMWM4YzY1NWMyMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHWKa25U8Ij0FQH0byRbPz12nL5m
+ef1rsinoZk1AQtnRbpO7/nTVXcAQ9EX02gIMV8HTCM4medhy0IYB5+7jMDKMw/w
n6cyQl2fG/vS7y2EbW9bRRiHWutUdmq4uh5wMqRj2j+RxhKK2KzgVHJK1GodNVeG
Apqd6YRDSt7HYxWyb+FbuvkZuNZk6zDc7uDthXOkoCEtiOUU8+wrnGRBVpZwNbxz
RjZLBcUugme2CqVKlbFnCVZOvfrCqVMEk+7pQ6KasOhKxhs2RAo+bJuoJ7C0OVaD
esxdvuotfiCEfHNNhyQYIONEODKaFm64lkZlBm6dyAzpH92RZNeDbw2dyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMetMfRMno+yoNkCZqFMHIxlXCDIMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUur7ZPqw
8kGCK+jipu604OId+oP0fxAFDHtcbyu+ZDdR+ZlC1htaSKwoGZ+BHH7AjOV8ejXe
+qqFFxoPftiVIAv+Hmknp3Pc5SjJTRcU2isNc8BFQU9q6Np2JNBWePUltvPSiiHv
svi+7JwB+RSW9YlGY1HlrGQr7Ak+b7JmvBFxDZgduC///nnxtoyNwl2JeGS91+2f
xbK9QNCGMN8niiQ9Cwf7YwdSoO1PEmadVIYjTHGPxSBlWUISZoT4BQtyRVTGaxbr
abyHpSP4LbkVPe6jaOuCdwLmYjJzdG3W7jSDnDtLrz3Dz2cv4BwEr8EBVv01wkI4
PG+LHXTznvVMUw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:11 2025 by rpki-client