Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier: yIcMo8C30tiUMywG+MVcHFM6BRX6YFyvUg+aAzKNrJI=
Subject key identifier: 39:34:86:53:A5:07:6E:FC:2B:AD:91:04:0D:02:52:37:D6:D0:86:C2
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 0194BBCF06554ABD38359437C660BF6E7FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number: 107C
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: vBdBOKJF92Gd5F6HYHZT2X0ONkTEieOm0FGE4EweZ+s=)
2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:06:55:4a:bd:38:35:94:37:c6:60:bf:6e:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=39348653a5076efc2bad91040d025237d6d086c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:24:50:6b:fd:36:4e:43:6a:8f:1f:71:46:
14:2a:7f:73:49:28:b3:82:61:60:ce:6e:d7:29:ab:
4b:98:f3:cb:fc:ff:50:30:5b:81:78:af:64:e2:cc:
ef:bb:08:d9:02:01:97:7b:b3:15:99:ab:d5:b1:5f:
3e:95:08:57:bf:20:13:4e:c2:76:95:26:39:1a:86:
36:4b:51:39:00:9b:40:f9:70:6d:33:76:75:e3:42:
b7:08:dc:d2:1e:ca:4a:62:db:be:5d:b6:55:2d:e1:
5d:3e:92:a8:0b:c9:fa:dd:1a:0d:2d:6a:f6:6f:ae:
6d:91:54:22:47:d6:02:55:ed:e6:bd:37:f8:a5:bb:
32:4a:0a:38:8a:df:b8:5e:93:b9:9a:8e:eb:59:42:
5b:9b:02:9e:ce:2a:e4:5d:e2:7d:05:46:8d:35:e4:
b8:d0:62:df:03:d6:d1:b2:e9:88:f1:fa:89:10:ca:
8c:3a:b8:8a:8a:29:69:a9:11:5b:c9:b6:47:7a:e2:
0a:b7:60:7b:6d:cb:75:26:3e:ae:90:fd:8c:d8:8a:
66:bd:57:b7:cf:ca:57:7c:0c:a3:34:c6:84:97:73:
e4:0a:72:ed:09:b6:39:9e:53:ce:99:34:b7:a6:b5:
55:96:d9:73:41:2d:ed:e1:4d:2a:96:48:e9:45:ae:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:86:53:A5:07:6E:FC:2B:AD:91:04:0D:02:52:37:D6:D0:86:C2
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3f:c5:28:a9:3a:7d:b6:6c:50:f9:ce:90:f8:51:21:f2:f2:
48:61:9e:e0:74:10:3f:88:08:21:f1:9e:d8:29:b6:a1:e3:73:
b5:5f:16:dd:9c:9d:48:e2:5c:d7:3c:58:c8:a5:a0:80:3d:5d:
a0:2f:6f:f2:45:fc:e6:80:96:3c:e4:e8:a6:c9:e2:f4:80:84:
3a:b8:dc:07:f8:ff:85:6a:5e:b0:47:38:d3:f2:88:52:40:98:
5f:25:5d:8b:38:64:28:f0:ff:2f:1d:0c:78:28:fc:0d:61:da:
32:71:d2:7f:b6:85:24:9c:1b:86:f8:0a:f7:03:f7:3e:63:9f:
f0:f5:e4:23:32:55:7e:02:27:d5:c1:e3:2c:99:83:2c:fe:1d:
c2:c0:49:6d:1c:6a:85:3a:a3:e8:7a:31:e5:2c:0f:b3:f8:9b:
64:4e:47:7f:59:2a:2f:3c:4a:90:74:0a:3c:8b:6a:a4:0b:09:
6a:92:4d:c6:6b:ef:a8:db:ba:92:0f:39:12:d7:dc:fd:de:92:
43:52:84:ed:f7:5a:16:c3:d6:84:69:2f:60:f0:d0:91:89:42:
51:21:14:07:9e:0d:12:bc:fe:0e:cb:04:ae:64:d8:50:cc:dd:
fd:52:c2:6a:13:21:4b:9a:35:69:c1:b6:26:2f:29:04:71:ed:
0b:af:db:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwZVSr04NZQ3xmC/bn/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODhmNDI5ZWRjODZhYTg3YmIzYTE3NzE3Y2VhNzFjNzA4
NzNhZjIwHhcNMjUwMTMxMTAwMTM0WhcNMjUwMjAxMTAwMTM0WjAzMTEwLwYDVQQD
EygzOTM0ODY1M2E1MDc2ZWZjMmJhZDkxMDQwZDAyNTIzN2Q2ZDA4NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IskUGv9Nk5Dao8fcUYUKn9zSSiz
gmFgzm7XKatLmPPL/P9QMFuBeK9k4szvuwjZAgGXe7MVmavVsV8+lQhXvyATTsJ2
lSY5GoY2S1E5AJtA+XBtM3Z140K3CNzSHspKYtu+XbZVLeFdPpKoC8n63RoNLWr2
b65tkVQiR9YCVe3mvTf4pbsySgo4it+4XpO5mo7rWUJbmwKezirkXeJ9BUaNNeS4
0GLfA9bRsumI8fqJEMqMOriKiilpqRFbybZHeuIKt2B7bct1Jj6ukP2M2IpmvVe3
z8pXfAyjNMaEl3PkCnLtCbY5nlPOmTS3prVVltlzQS3t4U0qlkjpRa74EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk0hlOlB278K62RBA0CUjfW0IbCMB8GA1UdIwQY
MBaAFBqI9CntyGqoe7OhdxfOpxxwhzryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEt
MDZkNDk4ZjYyMGEzLzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEtMDZkNDk4ZjYyMGEz
LzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj/FKKk6
fbZsUPnOkPhRIfLySGGe4HQQP4gIIfGe2Cm2oeNztV8W3ZydSOJc1zxYyKWggD1d
oC9v8kX85oCWPOTopsni9ICEOrjcB/j/hWpesEc40/KIUkCYXyVdizhkKPD/Lx0M
eCj8DWHaMnHSf7aFJJwbhvgK9wP3PmOf8PXkIzJVfgIn1cHjLJmDLP4dwsBJbRxq
hTqj6Hox5SwPs/ibZE5Hf1kqLzxKkHQKPItqpAsJapJNxmvvqNu6kg85Etfc/d6S
Q1KE7fdaFsPWhGkvYPDQkYlCUSEUB54NErz+DssErmTYUMzd/VLCahMhS5o1acG2
Ji8pBHHtC6/b7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:25 2025 by rpki-client