Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: H8DqWogpjhb3nmtWvuFAGS+zbJ1cWyUHTUkKwOxcvRE=
Subject key identifier: 75:FC:74:F7:1A:24:63:24:EB:87:47:58:BB:3D:94:0F:9A:AA:92:4C
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 0194BD4E5AF3595037F6CFCCF835C766DE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 0F0A
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: KbpF7/SBaV+WEwh0A6WYWVdmDBEV6JaOXq7o5kyPg6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:f3:59:50:37:f6:cf:cc:f8:35:c7:66:de:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=75fc74f71a246324eb874758bb3d940f9aaa924c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:66:91:10:05:ee:7e:cc:c8:48:4b:25:6a:
26:6e:c1:7e:d3:17:d5:e9:6f:5b:bd:37:ec:f8:26:
16:5e:bb:9e:66:66:0b:f3:58:5a:d5:ac:d2:07:35:
82:52:61:de:01:2c:79:a8:22:33:c4:ab:d9:8a:18:
7f:1f:0e:47:4b:5d:9c:85:cb:5c:a6:53:20:0c:53:
33:e0:2b:54:10:0e:f5:b6:c4:66:c8:8f:ce:3d:b1:
09:be:38:c0:e9:2b:b5:1a:5f:4e:86:e1:f9:2a:df:
83:b4:14:bd:ba:88:01:68:db:b1:07:77:e8:fb:f2:
bc:be:51:62:2d:7c:f8:f0:17:a1:a9:78:53:df:07:
56:74:41:0c:50:87:4c:69:cd:54:8c:1b:98:9b:52:
07:6e:33:32:14:c4:1a:d9:64:b5:57:4b:93:c4:cc:
05:de:b2:aa:89:c3:fc:3e:08:19:d8:12:13:e6:10:
a1:79:58:a2:2d:ed:6c:95:fd:e5:43:a2:74:75:0a:
8b:f9:ee:bc:ce:29:f2:31:56:52:0c:05:db:44:03:
43:4b:37:be:16:10:0d:ed:c3:9c:19:0c:6b:5b:87:
1b:a2:55:5b:61:96:a6:ca:a5:c2:1b:df:47:ea:07:
5b:d8:a6:60:c4:35:f6:6c:67:9c:89:0f:92:ed:7d:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:74:F7:1A:24:63:24:EB:87:47:58:BB:3D:94:0F:9A:AA:92:4C
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f9:10:e9:4b:17:d5:bd:c2:f0:0a:8a:48:e7:63:e3:9a:8e:
79:70:67:27:22:f6:fb:7f:32:c9:8c:60:28:c5:e7:5c:7d:0d:
8e:b1:17:ca:7d:86:ff:1d:a5:a0:6b:30:52:d0:fc:50:14:b4:
13:fd:c8:d4:35:c3:b9:d3:27:f0:e9:a7:40:e5:e9:c2:10:fa:
70:43:33:15:4a:d1:cd:e7:92:90:2d:ba:6f:a1:23:4d:87:ac:
9e:ee:dc:32:30:7a:4d:8b:ac:9f:56:26:89:c6:2a:73:8d:13:
7f:23:13:48:9f:8a:4d:e5:cd:e4:4c:0b:6d:b2:d6:3c:40:96:
99:6a:37:f1:2a:d5:ba:b2:90:3b:8e:28:c3:64:fb:10:c8:3c:
1c:a7:75:10:9d:13:ce:0c:bc:ba:3a:50:0a:8c:f9:df:26:c9:
61:10:c8:03:1c:26:b7:15:42:b1:56:5a:2c:7e:c2:6a:6a:6b:
43:88:f4:26:56:8e:b4:18:34:91:a4:02:1a:f9:b5:3c:e7:75:
cb:0a:eb:7f:87:ae:cf:ce:2f:ff:2b:c4:49:98:8c:df:bd:80:
f2:23:05:9c:de:46:f5:7e:2d:80:4c:eb:40:32:21:f2:5e:d2:
0c:83:80:1b:50:6e:73:62:04:cc:49:e9:ad:f8:70:88:7f:f0:
40:d3:66:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlrzWVA39s/M+DXHZt5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzdkOGYzOWUzZjhmYjY2MzhmNzA4M2FiOWYxNmMwNDdk
MGQzNjQwHhcNMjUwMTMxMTcwMDE2WhcNMjUwMjAxMTcwMDE2WjAzMTEwLwYDVQQD
Eyg3NWZjNzRmNzFhMjQ2MzI0ZWI4NzQ3NThiYjNkOTQwZjlhYWE5MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lVmkRAF7n7MyEhLJWombsF+0xfV
6W9bvTfs+CYWXrueZmYL81ha1azSBzWCUmHeASx5qCIzxKvZihh/Hw5HS12chctc
plMgDFMz4CtUEA71tsRmyI/OPbEJvjjA6Su1Gl9OhuH5Kt+DtBS9uogBaNuxB3fo
+/K8vlFiLXz48BehqXhT3wdWdEEMUIdMac1UjBuYm1IHbjMyFMQa2WS1V0uTxMwF
3rKqicP8PggZ2BIT5hCheViiLe1slf3lQ6J0dQqL+e68zinyMVZSDAXbRANDSze+
FhAN7cOcGQxrW4cbolVbYZamyqXCG99H6gdb2KZgxDX2bGeciQ+S7X2hvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX8dPcaJGMk64dHWLs9lA+aqpJMMB8GA1UdIwQY
MBaAFIJ32POeP4+2Y49wg6ufFsBH0NNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTkt
NTc3ZGExMmUzNjQ4LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTktNTc3ZGExMmUzNjQ4
LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPkQ6UsX
1b3C8AqKSOdj45qOeXBnJyL2+38yyYxgKMXnXH0NjrEXyn2G/x2loGswUtD8UBS0
E/3I1DXDudMn8OmnQOXpwhD6cEMzFUrRzeeSkC26b6EjTYesnu7cMjB6TYusn1Ym
icYqc40TfyMTSJ+KTeXN5EwLbbLWPECWmWo38SrVurKQO44ow2T7EMg8HKd1EJ0T
zgy8ujpQCoz53ybJYRDIAxwmtxVCsVZaLH7CamprQ4j0JlaOtBg0kaQCGvm1POd1
ywrrf4euz84v/yvESZiM372A8iMFnN5G9X4tgEzrQDIh8l7SDIOAG1Buc2IEzEnp
rfhwiH/wQNNmaw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client