Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier: 04YhN7V7RhCOV3gD249Vujo5B3urD1Lf2p5UygilUSk=
Subject key identifier: D5:38:C4:30:32:78:8E:83:11:E4:21:DA:F6:59:E1:75:9A:99:FC:9A
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer: /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial: 0194BC72E17C3F528A4A8B36AD4CECBCA991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number: 0709
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: Yxilyyh2oTmjV5xduvwKJH1Ftsaam4+O1CJja+4KXcw=)
2: tv0huOh6mK0H4w2Pkxi0zxGdHcU.roa (hash: AhjG9w2zaLD4mADBnCLY0U88JMMTl5C2x9ZxBk5L0+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:7c:3f:52:8a:4a:8b:36:ad:4c:ec:bc:a9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=d538c43032788e8311e421daf659e1759a99fc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:ca:5b:6c:ed:7f:4e:29:e3:a4:0e:ea:44:
b8:bc:aa:be:c1:0c:03:03:73:98:41:c2:e1:3f:5b:
4a:c2:92:35:d1:49:3d:f4:b6:b5:02:e3:04:49:c7:
e1:01:ed:4b:67:4d:3a:e3:9b:29:5e:30:b6:fd:52:
db:a5:5a:27:9a:a4:d9:69:7b:eb:c6:83:63:6b:0e:
a5:27:8f:89:5e:36:78:fe:b8:a1:5f:71:db:87:40:
ba:cc:22:91:e4:99:36:63:71:e0:ee:63:6c:50:b1:
d8:a9:1f:79:34:f9:52:e4:37:93:fd:4b:fe:28:9b:
eb:a5:d3:42:62:74:d1:b0:45:58:1f:27:83:b0:65:
68:48:97:f4:d9:19:59:92:83:4a:ee:52:6d:97:e7:
f1:8f:cd:ac:23:56:c8:a9:a7:3e:20:ae:94:61:05:
6d:50:ee:ba:6c:5c:63:3b:03:f2:0e:0e:05:f1:a9:
da:05:cf:7c:3c:ff:74:02:ed:68:6f:40:ff:e4:4f:
6a:cc:9d:f7:e4:d0:d7:99:92:0f:c1:4e:f3:37:5e:
8a:55:fb:ec:b9:09:d6:18:09:6d:ad:e7:5a:68:d4:
59:b9:e1:fa:e9:23:ec:fb:d4:2c:cd:a8:c3:e3:1b:
e6:69:26:27:35:b1:48:76:4d:f3:68:d5:34:b7:f0:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:C4:30:32:78:8E:83:11:E4:21:DA:F6:59:E1:75:9A:99:FC:9A
X509v3 Authority Key Identifier:
keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:29:bb:ff:38:f7:cd:7c:c8:ce:f7:65:98:53:40:26:9a:1d:
c0:9d:f6:17:65:7c:a7:6b:7d:18:6c:4f:66:de:d2:1b:36:06:
61:42:f2:23:49:a8:01:a8:ae:3e:35:bf:4a:7d:f4:26:7e:89:
05:0f:79:45:e7:7c:53:2e:8c:2a:53:5b:bf:9d:46:29:83:c2:
49:66:5f:6f:73:56:f6:75:23:dc:d7:52:5c:bd:96:b9:8e:2e:
ab:07:da:f0:0f:97:b9:3d:b5:20:9e:b1:79:d1:b9:8c:9a:97:
f9:54:40:73:39:1d:15:e2:ec:fb:fa:26:26:4f:5e:fa:52:b0:
f6:9c:db:03:c0:19:eb:21:f5:88:72:97:de:46:c0:10:24:5d:
12:8f:47:45:a2:e6:f5:b0:52:30:bf:77:bb:a0:16:d2:5c:ed:
49:cb:49:e2:62:fa:a6:fb:60:d7:70:5b:ab:db:f0:ce:82:36:
7d:ad:59:75:15:5a:bf:6d:29:e8:22:2f:66:4d:82:88:d6:b6:
33:68:a1:c4:96:02:03:ae:60:af:97:d9:06:0f:61:bc:42:a4:
8c:8d:0a:86:d8:1b:3a:53:c6:63:06:8a:48:72:0d:4e:f0:f3:
c2:e4:75:35:61:73:b7:b6:4c:2d:1d:f6:59:1d:24:c6:ee:e6:
50:2b:e4:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuF8P1KKSos2rUzsvKmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWM3ZGI1MTkzYzFiM2I3NDg3ZTg0N2Q0MWEzODNlZDVi
MjY2NzEwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
EyhkNTM4YzQzMDMyNzg4ZTgzMTFlNDIxZGFmNjU5ZTE3NTlhOTlmYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqPKW2ztf04p46QO6kS4vKq+wQwD
A3OYQcLhP1tKwpI10Uk99La1AuMEScfhAe1LZ00645spXjC2/VLbpVonmqTZaXvr
xoNjaw6lJ4+JXjZ4/rihX3Hbh0C6zCKR5Jk2Y3Hg7mNsULHYqR95NPlS5DeT/Uv+
KJvrpdNCYnTRsEVYHyeDsGVoSJf02RlZkoNK7lJtl+fxj82sI1bIqac+IK6UYQVt
UO66bFxjOwPyDg4F8anaBc98PP90Au1ob0D/5E9qzJ335NDXmZIPwU7zN16KVfvs
uQnWGAltredaaNRZueH66SPs+9QszajD4xvmaSYnNbFIdk3zaNU0t/DEXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU4xDAyeI6DEeQh2vZZ4XWamfyaMB8GA1UdIwQY
MBaAFBqsfbUZPBs7dIfoR9QaOD7VsmZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgt
YzM2YTk2YzA0MTc3LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgtYzM2YTk2YzA0MTc3
LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAim7/zj3
zXzIzvdlmFNAJpodwJ32F2V8p2t9GGxPZt7SGzYGYULyI0moAaiuPjW/Sn30Jn6J
BQ95Red8Uy6MKlNbv51GKYPCSWZfb3NW9nUj3NdSXL2WuY4uqwfa8A+XuT21IJ6x
edG5jJqX+VRAczkdFeLs+/omJk9e+lKw9pzbA8AZ6yH1iHKX3kbAECRdEo9HRaLm
9bBSML93u6AW0lztSctJ4mL6pvtg13Bbq9vwzoI2fa1ZdRVav20p6CIvZk2CiNa2
M2ihxJYCA65gr5fZBg9hvEKkjI0KhtgbOlPGYwaKSHINTvDzwuR1NWFzt7ZMLR32
WR0kxu7mUCvkMg==
-----END CERTIFICATE-----
Generated at Thu May 1 10:05:59 2025 by rpki-client