Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: +nHXbAudKdqv0H1bK1Na4VZKyBDo01pfiCPNxljxow4=
Subject key identifier: CB:26:D7:B8:7E:1F:26:81:F9:17:A3:E1:B6:7B:92:79:E3:16:89:47
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 0194BCE0EF7DBD841B05654FE76F976E29BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 08C1
Signing time: Fri 31 Jan 2025 15:00:45 +0000
Manifest this update: Fri 31 Jan 2025 15:00:45 +0000
Manifest next update: Sat 01 Feb 2025 15:00:45 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: KC8VUves0jGqH8V+16id5kIDZ15050BR2E2JZDfZSus=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ef:7d:bd:84:1b:05:65:4f:e7:6f:97:6e:29:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Jan 31 15:00:45 2025 GMT
Not After : Feb 1 15:00:45 2025 GMT
Subject: CN=cb26d7b87e1f2681f917a3e1b67b9279e3168947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:3b:fd:c8:c3:10:7c:bf:22:35:8b:9a:1f:
66:06:70:3b:a9:bb:c0:ab:a5:f0:e7:55:f6:1c:b2:
a2:e0:d8:35:dc:c5:35:de:30:45:02:90:b3:76:38:
8e:cc:08:b5:bb:eb:e1:aa:13:a0:da:da:f2:ec:b8:
5e:b6:5d:c5:c5:4a:1f:e7:59:a9:06:8a:a7:03:11:
a3:b1:e9:c9:24:67:4c:1a:20:da:65:a9:ff:ba:dc:
cf:1f:a4:44:c3:64:40:ed:f3:2e:53:87:15:6c:16:
92:25:05:81:75:5c:1a:c7:1d:ee:ef:db:81:1b:a8:
da:6b:86:f9:58:d4:6f:b1:4a:dd:5e:52:87:66:69:
e9:c2:92:38:5b:cc:24:33:61:fa:c5:38:e5:47:90:
55:7c:d5:65:cc:13:63:9d:70:a0:df:bd:06:da:13:
4b:eb:e9:7f:8b:3c:a6:8e:b3:da:70:dd:94:2f:9e:
45:61:71:eb:00:0f:0f:44:eb:be:c7:9b:c4:75:54:
85:78:2f:d1:b9:c6:ce:1f:06:56:a5:ba:1d:b7:ff:
a5:07:f8:a7:f8:f5:49:53:6c:b9:3d:8d:8d:d1:ac:
ae:e9:15:82:19:c7:82:c8:2c:ab:cb:8a:d5:51:53:
87:ed:59:c5:0a:6a:2b:75:93:09:63:54:12:50:5c:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:26:D7:B8:7E:1F:26:81:F9:17:A3:E1:B6:7B:92:79:E3:16:89:47
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f8:b6:f7:91:70:2c:d5:b7:37:7a:94:19:b3:f5:d4:e5:6d:
ff:c2:1e:b1:ac:5d:3d:43:e3:55:c7:05:9a:cf:dd:51:00:2e:
de:b8:29:8a:87:93:d0:db:bc:71:7c:bd:22:15:51:82:f7:81:
cc:63:ad:90:e8:b4:c9:e4:54:ec:a8:b9:e7:e3:08:e4:be:eb:
9e:35:45:97:3f:9b:11:67:a4:85:3b:2b:a0:41:73:d9:c9:dd:
79:b5:c1:19:d1:22:c1:be:28:19:18:76:ee:cf:ed:41:c8:c4:
30:53:cd:7d:27:74:69:f5:4f:eb:5a:d2:3f:03:34:33:0a:dc:
ff:c8:08:71:ab:c4:b9:b6:81:ba:41:c9:bb:8b:d7:d7:27:20:
e6:dc:dc:34:60:30:6f:65:12:44:df:22:54:d1:c6:5d:3d:9a:
50:f7:38:f2:b3:96:6f:b4:f2:51:b3:47:57:d0:4d:c9:88:dc:
41:fb:d9:c7:c2:96:53:34:eb:fb:e6:70:c7:b0:f1:f0:05:1d:
19:cc:74:d0:8e:89:40:c7:b8:99:f4:48:8c:7f:38:08:b3:f1:
ce:54:34:46:69:70:d5:03:28:43:88:99:d6:0c:87:b5:0f:03:
27:fc:44:d2:dd:87:8c:75:70:01:27:a5:27:8e:29:bd:e2:03:
7c:f5:b1:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84O99vYQbBWVP52+Xbim+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODg1YzM3ZTc0N2JjZTIzZWU5MDk3ZTVmZjdlOTgzYmNi
YTBkYjQwHhcNMjUwMTMxMTUwMDQ1WhcNMjUwMjAxMTUwMDQ1WjAzMTEwLwYDVQQD
EyhjYjI2ZDdiODdlMWYyNjgxZjkxN2EzZTFiNjdiOTI3OWUzMTY4OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTc7/cjDEHy/IjWLmh9mBnA7qbvA
q6Xw51X2HLKi4Ng13MU13jBFApCzdjiOzAi1u+vhqhOg2try7Lhetl3FxUof51mp
BoqnAxGjsenJJGdMGiDaZan/utzPH6REw2RA7fMuU4cVbBaSJQWBdVwaxx3u79uB
G6jaa4b5WNRvsUrdXlKHZmnpwpI4W8wkM2H6xTjlR5BVfNVlzBNjnXCg370G2hNL
6+l/izymjrPacN2UL55FYXHrAA8PROu+x5vEdVSFeC/RucbOHwZWpbodt/+lB/in
+PVJU2y5PY2N0ayu6RWCGceCyCyry4rVUVOH7VnFCmordZMJY1QSUFzz9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsm17h+HyaB+Rej4bZ7knnjFolHMB8GA1UdIwQY
MBaAFBqIXDfnR7ziPukJfl/36YO8ug20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5Mzkt
YzE0MDJkMjYxNDMyLzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5MzktYzE0MDJkMjYxNDMy
LzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfi295Fw
LNW3N3qUGbP11OVt/8IesaxdPUPjVccFms/dUQAu3rgpioeT0Nu8cXy9IhVRgveB
zGOtkOi0yeRU7Ki55+MI5L7rnjVFlz+bEWekhTsroEFz2cndebXBGdEiwb4oGRh2
7s/tQcjEMFPNfSd0afVP61rSPwM0Mwrc/8gIcavEubaBukHJu4vX1ycg5tzcNGAw
b2USRN8iVNHGXT2aUPc48rOWb7TyUbNHV9BNyYjcQfvZx8KWUzTr++Zwx7Dx8AUd
Gcx00I6JQMe4mfRIjH84CLPxzlQ0Rmlw1QMoQ4iZ1gyHtQ8DJ/xE0t2HjHVwASel
J44pveIDfPWxQQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:24 2025 by rpki-client