Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File: g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier: 2YDp0HlkZ0XDf+oEVA0qMCArcQJ0XoPjTsWQGb5G/rE=
Subject key identifier: AB:BD:3C:D9:CE:93:7D:B7:80:54:3D:7A:1B:5F:F2:6D:56:58:D2:8D
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer: /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial: 0194BD17AF08865FB5A3281EE62947AABDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: IOmKwvAlqovOqDg8R3XEjQKQn3k.roa (hash: /PNQa25f3KzGjHOJXgALCT84CCr36de+6y0mC+W9C/U=)
2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: K+E4tP5crWZgDsZAGey9Ya6q4KWCkocSJZaOhWR2J8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:af:08:86:5f:b5:a3:28:1e:e6:29:47:aa:bd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=abbd3cd9ce937db780543d7a1b5ff26d5658d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:1c:de:c3:58:32:9b:e8:9d:ed:dd:7d:5a:
a0:04:c9:12:8f:3c:33:79:13:f6:3e:2b:6a:37:a4:
87:9c:2f:57:d3:7a:bd:a8:74:07:fa:05:80:89:99:
c8:1c:48:7d:dd:6e:47:7d:b6:3c:a5:01:98:3a:18:
e3:8a:f9:dc:dd:93:57:82:6e:dc:c4:14:69:ec:19:
da:0c:b0:90:d2:ef:de:70:16:fd:b6:65:cf:25:5d:
79:88:b5:f1:9a:ab:dd:90:15:53:c1:68:c1:29:31:
6a:0d:be:39:00:73:56:8b:6f:61:8a:fa:6a:99:19:
8f:f4:f7:04:ef:4e:5c:05:b7:0b:0f:34:6b:a5:91:
2c:57:48:f0:86:29:5b:45:a3:77:b0:1b:33:da:07:
23:39:dc:50:14:bd:db:32:dc:ef:49:85:36:98:e9:
6b:2b:0e:ac:72:3c:05:c6:3a:e6:a9:c1:b0:9a:f2:
a7:25:ef:b9:d4:b9:84:39:0c:9d:34:06:3d:5a:b8:
a8:a7:11:29:52:ee:b9:cd:3a:71:3f:e2:eb:85:64:
fb:c6:4a:a9:37:cb:a2:c7:b2:35:b3:bd:12:e2:3e:
24:d6:fc:a2:63:9f:c5:32:a6:c7:72:54:9a:a3:fb:
1c:c8:c7:73:22:5c:e4:ad:e3:8d:8d:22:06:59:42:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BD:3C:D9:CE:93:7D:B7:80:54:3D:7A:1B:5F:F2:6D:56:58:D2:8D
X509v3 Authority Key Identifier:
keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:a1:96:52:01:56:9b:87:7b:9f:f6:34:ad:24:c0:17:8a:
a3:25:a4:f1:7d:13:d3:0d:a6:b3:a9:fd:31:85:e8:a9:75:c5:
b0:af:3e:c6:78:60:c1:a2:c1:99:27:74:f6:ca:2b:19:dc:0b:
d3:0c:c9:8c:10:5a:78:6f:29:b6:36:11:fc:41:2c:91:b7:d1:
d3:6e:d6:b0:f3:f1:fc:18:a3:cd:05:3b:a2:c3:93:ff:75:80:
bf:ad:a8:f5:ff:95:9c:b6:4c:da:49:fa:ba:99:bd:5c:1e:8e:
88:17:e2:96:9a:0e:4e:25:aa:87:a1:23:a1:8f:41:71:db:60:
6f:d6:3d:e6:29:dd:17:2a:ae:af:71:26:62:c9:a4:5f:a7:23:
c2:0d:d8:9b:f7:20:84:e5:d1:10:62:42:e8:0a:19:cf:dc:5a:
c2:80:31:1f:9a:27:ea:00:c4:89:e2:47:ca:19:0d:8f:b4:0f:
8a:e8:b1:ce:19:76:e5:b3:f1:02:2b:09:62:3a:2f:9c:60:0b:
39:fa:94:3a:32:53:dd:13:b1:ec:21:a8:b4:8f:e3:5d:b8:85:
00:59:04:3a:79:9d:52:d9:84:05:00:f5:c3:bc:f5:98:1e:4c:
9d:ad:5d:74:a0:14:f2:5c:5c:f0:9a:a0:29:0a:5b:bd:a7:6f:
79:fc:79:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F68Ihl+1oyge5ilHqr3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNGQ5NjZkMDBhZmJjMzliNTk1OGJjMWE2ZWQ1NzkzZmZj
MGM1NGQwHhcNMjUwMTMxMTYwMDMzWhcNMjUwMjAxMTYwMDMzWjAzMTEwLwYDVQQD
EyhhYmJkM2NkOWNlOTM3ZGI3ODA1NDNkN2ExYjVmZjI2ZDU2NThkMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUsc3sNYMpvone3dfVqgBMkSjzwz
eRP2PitqN6SHnC9X03q9qHQH+gWAiZnIHEh93W5HfbY8pQGYOhjjivnc3ZNXgm7c
xBRp7BnaDLCQ0u/ecBb9tmXPJV15iLXxmqvdkBVTwWjBKTFqDb45AHNWi29hivpq
mRmP9PcE705cBbcLDzRrpZEsV0jwhilbRaN3sBsz2gcjOdxQFL3bMtzvSYU2mOlr
Kw6scjwFxjrmqcGwmvKnJe+51LmEOQydNAY9WriopxEpUu65zTpxP+LrhWT7xkqp
N8uix7I1s70S4j4k1vyiY5/FMqbHclSao/scyMdzIlzkreONjSIGWULYGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu9PNnOk323gFQ9ehtf8m1WWNKNMB8GA1UdIwQY
MBaAFINNlm0Ar7w5tZWLwabtV5P/wMVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQt
YjVkMWU5MDIzMTBhLzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQtYjVkMWU5MDIzMTBh
LzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvChllIB
VpuHe5/2NK0kwBeKoyWk8X0T0w2ms6n9MYXoqXXFsK8+xnhgwaLBmSd09sorGdwL
0wzJjBBaeG8ptjYR/EEskbfR027WsPPx/BijzQU7osOT/3WAv62o9f+VnLZM2kn6
upm9XB6OiBfilpoOTiWqh6EjoY9Bcdtgb9Y95indFyqur3EmYsmkX6cjwg3Ym/cg
hOXREGJC6AoZz9xawoAxH5on6gDEieJHyhkNj7QPiuixzhl25bPxAisJYjovnGAL
OfqUOjJT3ROx7CGotI/jXbiFAFkEOnmdUtmEBQD1w7z1mB5Mna1ddKAU8lxc8Jqg
KQpbvadvefx5Ag==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:49 2025 by rpki-client