Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: +I+rlvfZOeB+SumN3JaV33T2MU52OYdqINBmVF2GhqM=
Subject key identifier: 1B:97:C7:21:13:11:3D:ED:60:A2:C4:27:7E:55:C0:BF:A3:0F:23:54
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 0194BC04D5C4FBB23DA3801EE9F5EC6A6B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0A80
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: O83+2dQ5rJJHLbb5dv2wf3PVpXyjsMokSb875NnW/K0=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:c4:fb:b2:3d:a3:80:1e:e9:f5:ec:6a:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=1b97c72113113ded60a2c4277e55c0bfa30f2354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:f0:a7:86:d3:ce:7c:61:b3:78:a8:ce:da:
64:ce:0e:58:ba:03:dd:44:c2:44:d9:c3:55:74:81:
08:c1:b1:11:a8:c0:52:d1:93:75:05:33:bc:58:6e:
b2:29:10:cd:61:d4:39:8c:51:2e:66:1d:0a:05:8a:
d8:66:ea:ff:2f:1e:d9:5c:47:98:81:96:8d:0e:92:
7f:e9:9f:78:41:44:ee:6f:f6:17:6a:d9:17:dd:c0:
52:f4:81:23:25:e5:39:61:72:d5:57:55:de:b4:e8:
62:2a:bf:e9:57:26:c5:ee:2f:dd:bb:24:c4:ec:35:
44:2e:0f:9e:2e:5b:30:ec:b0:4c:90:53:f5:4f:77:
70:4a:88:0c:7c:cb:84:d1:94:f3:6f:5e:e8:ae:d1:
a1:f0:b1:fb:50:51:bb:76:33:d4:e3:dd:26:a1:3c:
c5:e0:8f:12:48:87:f8:90:14:47:9b:86:4f:3a:cd:
4e:6e:70:89:0f:f5:82:e2:80:61:ca:fc:d9:1f:0b:
8f:96:0c:b1:a0:6d:ec:54:a7:e6:c8:55:df:75:8c:
7e:20:19:b3:09:5e:19:d4:c4:07:fd:57:48:54:6d:
2e:43:ba:19:4e:ae:99:15:b5:48:01:41:8d:b6:14:
6b:59:9f:95:98:9d:30:94:1f:cb:9a:9d:27:c6:4e:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:C7:21:13:11:3D:ED:60:A2:C4:27:7E:55:C0:BF:A3:0F:23:54
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ba:1b:3e:77:70:92:24:cc:f9:0e:c0:f8:d9:aa:10:7f:5f:
5f:d5:b5:0c:b6:02:b0:71:70:7b:d4:91:08:b3:aa:61:f7:7c:
6f:41:20:a8:74:44:c6:b5:44:3c:5c:a1:3b:aa:05:9b:dc:70:
4a:3e:02:10:cd:2c:58:e5:04:2b:e0:cc:8c:45:5b:91:41:32:
98:b1:7c:76:b8:02:fc:81:2b:16:ee:4e:2d:f3:fc:fb:44:31:
a6:80:40:b9:f3:40:60:5c:0b:60:31:4b:b2:44:1d:8f:31:2a:
96:fe:1d:fd:aa:8b:77:0a:ea:e0:fb:24:81:55:f2:a0:b4:91:
43:61:2f:a0:04:22:6d:ae:8a:17:eb:25:f7:cc:eb:61:aa:2f:
d8:aa:61:3b:41:89:d4:cc:62:c7:d9:86:50:be:4e:af:af:b3:
28:14:41:e2:40:9a:f0:15:b0:af:9c:f8:44:aa:63:f6:3e:59:
1d:ec:17:0b:22:3e:8c:a1:3f:75:00:95:fa:a6:cf:84:ad:80:
51:08:33:5c:ea:d0:7c:f1:04:bc:f8:3a:1c:96:ed:32:2d:73:
37:14:55:cc:8b:29:a0:5f:c5:33:66:d2:32:a5:98:2c:1b:f8:
48:f5:5b:f0:3c:b1:1d:e4:db:32:6c:2c:55:74:e6:2c:ca:61:
62:6f:e0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNXE+7I9o4Ae6fXsamsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzQ5OWJlOTdiY2MzMjdmNjRlOWViOGM0MjM5NDUwOGNh
MDZkNjUwHhcNMjUwMTMxMTEwMDIwWhcNMjUwMjAxMTEwMDIwWjAzMTEwLwYDVQQD
EygxYjk3YzcyMTEzMTEzZGVkNjBhMmM0Mjc3ZTU1YzBiZmEzMGYyMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6irwp4bTznxhs3ioztpkzg5YugPd
RMJE2cNVdIEIwbERqMBS0ZN1BTO8WG6yKRDNYdQ5jFEuZh0KBYrYZur/Lx7ZXEeY
gZaNDpJ/6Z94QUTub/YXatkX3cBS9IEjJeU5YXLVV1XetOhiKr/pVybF7i/duyTE
7DVELg+eLlsw7LBMkFP1T3dwSogMfMuE0ZTzb17ortGh8LH7UFG7djPU490moTzF
4I8SSIf4kBRHm4ZPOs1ObnCJD/WC4oBhyvzZHwuPlgyxoG3sVKfmyFXfdYx+IBmz
CV4Z1MQH/VdIVG0uQ7oZTq6ZFbVIAUGNthRrWZ+VmJ0wlB/Lmp0nxk7OswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuXxyETET3tYKLEJ35VwL+jDyNUMB8GA1UdIwQY
MBaAFBl0mb6XvMMn9k6euMQjlFCMoG1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQt
ODk4MDM2NzM0ODc4LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQtODk4MDM2NzM0ODc4
LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrobPndw
kiTM+Q7A+NmqEH9fX9W1DLYCsHFwe9SRCLOqYfd8b0EgqHRExrVEPFyhO6oFm9xw
Sj4CEM0sWOUEK+DMjEVbkUEymLF8drgC/IErFu5OLfP8+0QxpoBAufNAYFwLYDFL
skQdjzEqlv4d/aqLdwrq4PskgVXyoLSRQ2EvoAQiba6KF+sl98zrYaov2KphO0GJ
1Mxix9mGUL5Or6+zKBRB4kCa8BWwr5z4RKpj9j5ZHewXCyI+jKE/dQCV+qbPhK2A
UQgzXOrQfPEEvPg6HJbtMi1zNxRVzIspoF/FM2bSMqWYLBv4SPVb8DyxHeTbMmws
VXTmLMphYm/g0w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:50 2025 by rpki-client