Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File: gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier: Py4jxED3E12qd2mPz1nGgjBrUPVK1C6NFC7F2fyKNa8=
Subject key identifier: EC:F6:B0:0B:63:2C:10:C0:3C:C6:45:BA:41:5E:A3:6A:B3:9F:F9:C2
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer: /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial: 0194BBCDBE5D21718EE02A0E115C8F4F5744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number: 0A1B
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 9KyF73rehYPV02tjofB2AZLrL40.roa (hash: puNKsT3QO3F9HAC3FWFKHMpsh3lk62Ax5BDntOG9N0s=)
2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: SeUQdF5schUJ9qp5GE1uR4krWpf3CGzAq7HsGYxJGVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:5d:21:71:8e:e0:2a:0e:11:5c:8f:4f:57:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=ecf6b00b632c10c03cc645ba415ea36ab39ff9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:2c:0a:89:b1:37:69:cc:a1:ac:f8:e6:7d:
3d:9e:b7:a7:36:e6:11:ab:04:90:25:71:bc:2f:b3:
cd:7b:0b:6e:8a:03:b5:49:ad:d2:1e:d6:8e:72:a2:
f8:9e:50:eb:ef:5a:08:4a:03:a6:b1:9c:17:78:e5:
99:7d:0c:be:40:30:10:23:4e:c7:93:61:03:15:32:
3e:1c:dc:c0:12:45:4e:e1:ce:41:80:9b:29:7e:7e:
75:a0:0a:27:5b:4d:ba:c0:60:34:85:f4:a6:94:a8:
48:4c:13:c0:ba:1c:b2:8b:7e:bb:9b:91:5b:5a:42:
a0:4e:1c:cd:c7:39:2e:eb:fd:d6:69:77:3f:5f:fb:
98:9f:fb:66:5a:c4:4d:03:44:f0:bc:c5:cc:1f:2c:
c0:19:9f:1a:7c:1e:46:bf:12:a7:3a:55:6e:f1:72:
76:ed:0c:1a:93:89:7c:69:7b:51:da:41:c5:4d:32:
8f:41:b2:cf:12:ca:a7:bb:26:0e:ac:63:bc:24:56:
c2:bc:31:9b:31:3a:b6:60:c9:3b:02:83:ab:bb:27:
ee:42:ca:df:37:08:57:d2:50:ab:82:99:62:2f:a9:
28:23:e5:81:04:86:ff:11:68:2f:90:0d:ca:15:7e:
96:27:0e:ea:e9:88:b2:21:26:f4:12:a9:76:02:99:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:B0:0B:63:2C:10:C0:3C:C6:45:BA:41:5E:A3:6A:B3:9F:F9:C2
X509v3 Authority Key Identifier:
keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:6b:00:7e:7d:da:1d:cf:eb:9e:b2:36:6d:55:79:d7:58:
aa:d5:29:cb:b7:a4:f4:d8:c6:31:cf:b5:8e:95:5b:74:d8:1c:
78:3a:e1:3d:10:93:da:11:be:57:90:4f:db:d4:8e:62:43:8e:
18:7b:4b:75:4f:97:38:2d:90:f9:56:46:19:6f:d8:30:f9:65:
d1:e7:67:96:69:d8:24:11:36:bd:24:f8:d6:d3:92:c7:3b:59:
4b:ee:fe:1e:4c:f1:2c:9d:8d:a0:0a:9b:b5:0c:03:cc:22:90:
9e:bd:36:b0:f5:85:e7:cc:e7:03:ea:a1:17:a0:b3:34:cd:de:
ff:5e:53:6a:b4:ec:53:2c:78:4e:60:86:15:69:24:47:04:4c:
a6:ca:35:c0:85:04:32:61:1a:05:30:08:ce:e6:1a:a7:cc:f9:
d4:11:6a:14:0a:15:cb:9e:36:89:9d:56:5e:ae:4f:6b:3a:86:
cf:de:bd:4e:fc:96:82:9d:3c:ec:8f:9d:2e:ec:3c:8c:ab:13:
07:82:bf:36:ea:d1:b4:7f:ed:31:7f:e0:58:fa:a6:00:27:6a:
bf:94:4d:46:eb:9a:53:bb:8c:d6:b7:47:c6:0f:24:a9:12:1e:
cc:17:a4:af:f8:7c:18:84:03:53:f2:a4:8e:fa:ac:0e:24:33:
3b:b7:fa:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb5dIXGO4CoOEVyPT1dEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmZmY2ZhZGQyNzE2MjNjOGQ1MDU1ZDY0YTkzZWIzZDM0
MjVkYmMwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
EyhlY2Y2YjAwYjYzMmMxMGMwM2NjNjQ1YmE0MTVlYTM2YWIzOWZmOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ssComxN2nMoaz45n09nrenNuYR
qwSQJXG8L7PNewtuigO1Sa3SHtaOcqL4nlDr71oISgOmsZwXeOWZfQy+QDAQI07H
k2EDFTI+HNzAEkVO4c5BgJspfn51oAonW026wGA0hfSmlKhITBPAuhyyi367m5Fb
WkKgThzNxzku6/3WaXc/X/uYn/tmWsRNA0TwvMXMHyzAGZ8afB5GvxKnOlVu8XJ2
7Qwak4l8aXtR2kHFTTKPQbLPEsqnuyYOrGO8JFbCvDGbMTq2YMk7AoOruyfuQsrf
NwhX0lCrgpliL6koI+WBBIb/EWgvkA3KFX6WJw7q6YiyISb0Eql2ApmYBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz2sAtjLBDAPMZFukFeo2qzn/nCMB8GA1UdIwQY
MBaAFIL//PrdJxYjyNUFXWSpPrPTQl28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZfOC10MG5GaVBJMVFWZFpLay1zOU5DWGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zNDQ0YTYtYjJlOC00MDBhLWEyYjEt
N2JmZjFkY2IxMDZhLzEvZ3ZfOC10MG5GaVBJMVFWZFpLay1zOU5DWGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zNDQ0YTYtYjJlOC00MDBhLWEyYjEtN2JmZjFkY2IxMDZh
LzEvZ3ZfOC10MG5GaVBJMVFWZFpLay1zOU5DWGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQVrAH59
2h3P656yNm1VeddYqtUpy7ek9NjGMc+1jpVbdNgceDrhPRCT2hG+V5BP29SOYkOO
GHtLdU+XOC2Q+VZGGW/YMPll0ednlmnYJBE2vST41tOSxztZS+7+HkzxLJ2NoAqb
tQwDzCKQnr02sPWF58znA+qhF6CzNM3e/15TarTsUyx4TmCGFWkkRwRMpso1wIUE
MmEaBTAIzuYap8z51BFqFAoVy542iZ1WXq5PazqGz969TvyWgp087I+dLuw8jKsT
B4K/NurRtH/tMX/gWPqmACdqv5RNRuuaU7uM1rdHxg8kqRIezBekr/h8GIQDU/Kk
jvqsDiQzO7f6ng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:30 2025 by rpki-client