Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: u2qVz5Q0P2FebBCC+vEL7v4TM0XCPVguK7WaUimj8rs=
Subject key identifier: 5B:4C:95:72:7A:6F:0B:C7:48:97:B1:74:AC:F8:3E:8C:8B:C8:B1:76
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 0194BC3C18718077C2B037FA7A6F4B5B57F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: h2pgNi7a815PLBXgxCHHCqjIMiVN9XZmX3MioKDgenw=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:71:80:77:c2:b0:37:fa:7a:6f:4b:5b:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=5b4c95727a6f0bc74897b174acf83e8c8bc8b176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:94:b8:a6:87:80:3f:fb:41:2b:03:d6:85:
44:7c:ca:b3:22:47:2e:95:7a:66:a4:66:84:bd:19:
d5:93:f1:f1:e8:ea:d2:eb:c6:94:50:ec:22:fa:8b:
cf:77:09:72:75:87:99:f6:66:1f:07:e0:b8:ba:ab:
64:9b:f7:d9:e3:ee:da:40:01:ed:83:05:2d:7c:9d:
4e:f9:9c:d8:4e:32:ac:f7:6e:d4:55:88:90:0b:2e:
60:a8:8e:7e:22:2d:f7:ae:d7:dd:62:23:5b:ad:b0:
0f:77:95:82:c8:71:a1:0c:27:0f:f5:01:1c:f5:b1:
cc:86:41:e4:62:68:3b:23:73:e1:f2:14:68:64:60:
1c:46:a3:80:f5:3e:f0:2c:70:69:f9:e6:e7:e9:b4:
2b:f2:f8:d0:fc:e5:34:ad:31:68:83:09:22:13:b6:
21:b5:8c:77:49:39:70:8f:2a:fd:96:b0:30:c5:5d:
69:75:e3:e3:0a:60:1e:90:0d:25:47:ec:1a:65:43:
e8:4a:26:92:e8:23:77:b3:db:6a:33:30:4b:bd:9c:
7b:27:ab:b8:86:dc:3a:e0:bc:a0:ee:aa:b2:73:e3:
a5:82:67:40:6d:c2:da:63:56:1d:95:78:b5:24:ca:
de:5f:4d:43:fc:0c:a0:f7:45:06:ea:0a:2b:10:ad:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:95:72:7A:6F:0B:C7:48:97:B1:74:AC:F8:3E:8C:8B:C8:B1:76
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7c:ae:ac:bd:f3:19:bd:da:d3:4f:5f:d9:e1:78:55:a7:e1:
1f:1e:18:1a:a3:80:62:97:ff:1a:9d:94:09:0b:8b:a5:ff:d0:
b9:2d:0a:aa:bd:cc:f4:31:82:40:06:42:35:09:a2:d5:16:c7:
36:f7:88:04:d3:51:00:cb:17:27:e3:13:ee:2b:c2:77:c4:09:
0a:b6:e7:30:7e:92:19:f7:2f:c8:1d:9e:fa:87:60:d3:4e:c4:
eb:31:6c:df:af:df:b0:f0:f2:46:07:fe:32:9e:b7:d4:8c:52:
6b:0d:58:38:e5:9c:6d:86:95:5f:74:1e:e2:5f:76:bc:ac:a7:
8c:6a:9d:81:97:a7:c4:51:19:ad:39:21:44:ac:77:1f:06:b1:
a8:13:91:0d:8c:58:8f:ed:3d:8c:95:59:b2:a3:00:6b:d3:f1:
77:21:f7:36:01:22:84:aa:13:09:26:7f:31:7f:a1:df:c3:49:
eb:55:ee:fe:42:0a:9c:3c:6a:81:90:dc:e7:73:5f:35:a5:14:
4a:96:2d:40:10:c3:fd:2d:d4:4c:c5:cc:cc:a7:83:ac:02:bc:
7f:e0:64:78:03:b6:7f:20:7b:ab:23:4a:53:c6:80:01:50:13:
88:00:7b:7e:b7:34:5c:d6:e5:1a:c0:b1:49:ed:ff:16:1b:33:
9c:2f:2b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBhxgHfCsDf6em9LW1fwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk
ZTdjNTEwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
Eyg1YjRjOTU3MjdhNmYwYmM3NDg5N2IxNzRhY2Y4M2U4YzhiYzhiMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YyUuKaHgD/7QSsD1oVEfMqzIkcu
lXpmpGaEvRnVk/Hx6OrS68aUUOwi+ovPdwlydYeZ9mYfB+C4uqtkm/fZ4+7aQAHt
gwUtfJ1O+ZzYTjKs927UVYiQCy5gqI5+Ii33rtfdYiNbrbAPd5WCyHGhDCcP9QEc
9bHMhkHkYmg7I3Ph8hRoZGAcRqOA9T7wLHBp+ebn6bQr8vjQ/OU0rTFogwkiE7Yh
tYx3STlwjyr9lrAwxV1pdePjCmAekA0lR+waZUPoSiaS6CN3s9tqMzBLvZx7J6u4
htw64Lyg7qqyc+OlgmdAbcLaY1YdlXi1JMreX01D/Ayg90UG6gorEK2l8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtMlXJ6bwvHSJexdKz4PoyLyLF2MB8GA1UdIwQY
MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt
NWU2MGY2ZGEyYjA5LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5
LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnyurL3z
Gb3a009f2eF4VafhHx4YGqOAYpf/Gp2UCQuLpf/QuS0Kqr3M9DGCQAZCNQmi1RbH
NveIBNNRAMsXJ+MT7ivCd8QJCrbnMH6SGfcvyB2e+odg007E6zFs36/fsPDyRgf+
Mp631IxSaw1YOOWcbYaVX3Qe4l92vKynjGqdgZenxFEZrTkhRKx3HwaxqBORDYxY
j+09jJVZsqMAa9PxdyH3NgEihKoTCSZ/MX+h38NJ61Xu/kIKnDxqgZDc53NfNaUU
SpYtQBDD/S3UTMXMzKeDrAK8f+BkeAO2fyB7qyNKU8aAAVATiAB7frc0XNblGsCx
Se3/FhsznC8rfg==
-----END CERTIFICATE-----
Generated at Sat May 3 14:53:57 2025 by rpki-client