Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: kVU0kCZ0eh+hQ2eCL0/KJKw1bMb5+E/2vRbcl8TEsTY=
Subject key identifier: 01:B6:8B:A2:13:FF:FC:C4:2F:58:50:C9:6B:B4:75:9E:F6:DD:66:89
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 0194BBCEB897600294EC858B99B87D2579C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: b7geKiaNNhh4ksLbIh62+G84+/yRSz41RkrpUr98B+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b8:97:60:02:94:ec:85:8b:99:b8:7d:25:79:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=01b68ba213fffcc42f5850c96bb4759ef6dd6689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:87:ce:fc:cb:2c:2f:5f:05:05:c4:2d:80:
ae:99:dd:21:1b:ff:cd:66:59:cb:8c:9c:dc:4a:e8:
80:2e:26:46:d3:27:f2:da:0c:fd:f1:09:47:e7:9e:
fa:1e:4f:5d:b6:0f:72:7e:a4:80:55:33:ca:81:24:
71:d1:52:e5:b6:0e:3b:1b:ba:42:04:4f:f3:95:6b:
f8:15:df:20:6a:85:0b:11:d7:8d:db:cd:d7:45:37:
da:b2:17:93:2e:d0:f0:42:80:ad:e3:f9:80:c7:16:
3d:50:f6:f4:7c:db:72:bd:f3:34:0f:c2:fa:e6:99:
5a:4e:98:f4:52:02:9c:09:83:db:d4:d4:51:57:91:
d1:ed:ab:b7:74:f0:96:ce:7d:25:ee:2a:bc:59:a5:
4a:77:82:0e:1c:15:6e:75:ea:cb:32:b7:92:a5:19:
df:5e:d2:6b:46:b3:74:50:a3:b4:94:46:23:35:28:
d3:7b:8e:42:a3:cf:0d:d0:33:a3:19:60:f2:19:58:
b0:b6:29:0a:9a:07:dc:b8:39:a5:86:32:49:3a:95:
38:4a:f6:90:a5:8a:42:85:79:a6:7d:db:84:e0:bd:
8f:bd:6c:2c:44:c8:bb:a8:23:86:2c:65:67:28:95:
7b:2f:56:c1:b2:3f:6b:80:fd:75:0e:9d:e8:77:05:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B6:8B:A2:13:FF:FC:C4:2F:58:50:C9:6B:B4:75:9E:F6:DD:66:89
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:17:f2:ed:d4:0a:16:4f:ef:ab:8f:d7:03:2e:26:67:8d:98:
75:a1:50:fc:e3:73:42:63:17:42:1a:54:f7:cf:6a:e3:5c:88:
84:7d:56:5e:9e:23:fa:03:9c:23:b0:52:89:d8:99:66:0c:25:
4f:22:0c:e5:3e:74:51:9d:3a:6a:4a:51:15:3a:8a:db:44:5d:
30:6c:d3:a9:a0:4f:de:45:d9:8c:b6:ac:9f:ea:db:f4:8f:b6:
f0:7b:40:55:24:bf:41:ff:1b:69:90:95:09:6a:ff:36:0d:30:
76:42:9e:65:85:c5:0e:94:13:f0:38:17:63:7d:b2:7d:ff:2f:
b2:31:90:99:39:aa:94:9e:3f:5d:3c:df:41:a9:4d:ca:62:32:
79:e7:84:b8:00:d6:35:b7:d3:93:6c:3e:05:16:fe:86:d1:88:
7a:c6:47:d1:8f:13:14:ee:b8:8f:0a:fe:14:1a:76:6a:5a:78:
5e:1a:5e:fa:54:4f:5b:e7:5f:07:95:eb:53:96:c8:ad:30:74:
4b:c2:1c:3c:7c:47:09:29:24:15:11:b0:34:12:c6:6d:8f:fa:
c3:24:1a:a9:6a:fe:4a:ad:cd:df:19:62:ed:7e:66:92:1f:b3:
9a:44:1b:3a:1f:d8:b5:20:28:ff:50:81:4b:b8:70:9e:5e:0a:
b4:d7:5a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zriXYAKU7IWLmbh9JXnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGQ3ZTFhYmIyY2Q4M2U5YTJkZTlhMDZiMzkxYjNhNTI0
NDQ0MWIwHhcNMjUwMTMxMTAwMTE0WhcNMjUwMjAxMTAwMTE0WjAzMTEwLwYDVQQD
EygwMWI2OGJhMjEzZmZmY2M0MmY1ODUwYzk2YmI0NzU5ZWY2ZGQ2Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrOHzvzLLC9fBQXELYCumd0hG//N
ZlnLjJzcSuiALiZG0yfy2gz98QlH5576Hk9dtg9yfqSAVTPKgSRx0VLltg47G7pC
BE/zlWv4Fd8gaoULEdeN283XRTfasheTLtDwQoCt4/mAxxY9UPb0fNtyvfM0D8L6
5plaTpj0UgKcCYPb1NRRV5HR7au3dPCWzn0l7iq8WaVKd4IOHBVuderLMreSpRnf
XtJrRrN0UKO0lEYjNSjTe45Co88N0DOjGWDyGViwtikKmgfcuDmlhjJJOpU4SvaQ
pYpChXmmfduE4L2PvWwsRMi7qCOGLGVnKJV7L1bBsj9rgP11Dp3odwUzEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG2i6IT//zEL1hQyWu0dZ723WaJMB8GA1UdIwQY
MBaAFE9Nfhq7LNg+mi3poGs5GzpSREQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAt
NTFmNWM0NThmMTJjLzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAtNTFmNWM0NThmMTJj
LzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBfy7dQK
Fk/vq4/XAy4mZ42YdaFQ/ONzQmMXQhpU989q41yIhH1WXp4j+gOcI7BSidiZZgwl
TyIM5T50UZ06akpRFTqK20RdMGzTqaBP3kXZjLasn+rb9I+28HtAVSS/Qf8baZCV
CWr/Ng0wdkKeZYXFDpQT8DgXY32yff8vsjGQmTmqlJ4/XTzfQalNymIyeeeEuADW
NbfTk2w+BRb+htGIesZH0Y8TFO64jwr+FBp2alp4Xhpe+lRPW+dfB5XrU5bIrTB0
S8IcPHxHCSkkFRGwNBLGbY/6wyQaqWr+Sq3N3xli7X5mkh+zmkQbOh/YtSAo/1CB
S7hwnl4KtNdaEw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:13 2025 by rpki-client