Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: 8sbzCQlABhgNg/YWN5BxKA3ilefEN6glgro1W3CMaRE=
Subject key identifier: 27:7F:32:7E:F3:C2:87:6E:80:F0:92:7C:80:1F:82:CA:86:A1:CC:5D
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 0194BC04A7CE278BEBD066295FCB4165FBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1399
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: ToiLKALOmEUglVK+5WLUz4/vmekfkonrcneSx4+JxXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a7:ce:27:8b:eb:d0:66:29:5f:cb:41:65:fb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=277f327ef3c2876e80f0927c801f82ca86a1cc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:a7:b8:00:11:f9:03:d7:e1:4a:bd:8f:81:
22:09:dd:3b:45:24:2c:2a:a1:23:5b:8a:fd:48:72:
21:a2:78:e3:7f:48:ff:5b:d4:5e:0c:a9:c9:a0:9a:
25:e3:c4:b2:8d:d2:a1:b0:53:2d:6e:61:01:3d:c5:
a5:31:26:80:73:f8:71:aa:03:01:2b:b0:1d:8a:8b:
41:81:65:da:97:e2:af:71:44:4b:2e:52:71:b6:bb:
ca:3b:91:b2:0f:67:d1:85:ce:32:d7:df:02:10:52:
5f:8b:da:fa:0e:f3:6f:90:3c:6c:4d:72:93:3f:57:
8b:8d:22:06:bb:7b:4b:57:e4:17:d3:97:35:91:58:
29:df:17:92:c2:91:6b:ba:43:7a:3a:b7:5a:69:a2:
6d:fe:e3:c2:63:c0:26:2e:dc:c9:f0:29:fe:37:a4:
40:30:e2:88:c5:66:a9:e9:f9:d3:e6:3e:68:93:ce:
64:3f:3c:69:0b:a2:9e:14:05:39:3c:33:bc:13:83:
c5:a2:67:91:7d:63:22:b9:b3:62:0d:c6:6f:5a:60:
0c:4a:bf:e4:37:6c:99:d2:4f:30:9d:e2:a3:de:8c:
fa:e7:dd:cc:2f:55:33:62:e5:b3:ad:d4:7f:6a:b9:
43:db:b9:cc:7d:6b:0a:bd:cb:10:eb:bf:16:21:ed:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:32:7E:F3:C2:87:6E:80:F0:92:7C:80:1F:82:CA:86:A1:CC:5D
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0a:ae:5c:ff:50:8a:84:18:9d:ad:e1:09:b3:03:73:12:9b:
b3:80:e1:d0:72:df:db:52:bd:26:8e:68:cc:c7:9f:fd:64:6e:
30:64:b8:12:d6:8e:76:37:eb:ea:37:6a:38:f1:06:2e:cd:71:
db:c8:e5:f0:f1:9e:19:fa:ce:9a:87:1a:e2:f9:15:23:1f:ea:
bc:44:30:1f:d9:66:f2:d9:f0:a8:4c:88:8a:b7:4a:f7:49:c5:
e3:00:5d:38:7d:53:74:8b:73:d4:0d:43:d0:bd:87:a2:86:84:
47:c1:66:05:44:56:dc:63:da:52:ea:bd:a6:50:dc:ea:7a:ac:
84:71:85:ab:e5:a9:d1:6d:04:0a:ab:bf:04:6d:2d:34:e8:64:
ce:a7:8b:b5:08:32:71:23:4e:9a:51:be:12:14:df:58:67:3a:
61:15:5a:71:99:68:5c:3f:61:e1:fb:09:26:e9:9c:39:48:db:
7d:15:af:4e:13:7a:eb:28:56:d3:80:9f:da:f9:02:d2:7e:32:
c5:b7:32:41:73:ca:58:14:3f:c0:6b:c0:33:ec:15:5c:1f:d9:
95:44:09:53:6a:1d:ef:83:ba:bb:fd:cc:a4:c1:89:b8:33:cd:
5c:53:8e:bd:7d:b3:bb:f8:a1:b5:18:cc:03:d6:c2:ca:1c:0d:
a1:82:49:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKfOJ4vr0GYpX8tBZfvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy
NDZiNGIwHhcNMjUwMTMxMTEwMDA5WhcNMjUwMjAxMTEwMDA5WjAzMTEwLwYDVQQD
EygyNzdmMzI3ZWYzYzI4NzZlODBmMDkyN2M4MDFmODJjYTg2YTFjYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAWnuAAR+QPX4Uq9j4EiCd07RSQs
KqEjW4r9SHIhonjjf0j/W9ReDKnJoJol48SyjdKhsFMtbmEBPcWlMSaAc/hxqgMB
K7AdiotBgWXal+KvcURLLlJxtrvKO5GyD2fRhc4y198CEFJfi9r6DvNvkDxsTXKT
P1eLjSIGu3tLV+QX05c1kVgp3xeSwpFrukN6OrdaaaJt/uPCY8AmLtzJ8Cn+N6RA
MOKIxWap6fnT5j5ok85kPzxpC6KeFAU5PDO8E4PFomeRfWMiubNiDcZvWmAMSr/k
N2yZ0k8wneKj3oz6593ML1UzYuWzrdR/arlD27nMfWsKvcsQ678WIe3zNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd/Mn7zwodugPCSfIAfgsqGocxdMB8GA1UdIwQY
MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt
MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5
LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwquXP9Q
ioQYna3hCbMDcxKbs4Dh0HLf21K9Jo5ozMef/WRuMGS4EtaOdjfr6jdqOPEGLs1x
28jl8PGeGfrOmoca4vkVIx/qvEQwH9lm8tnwqEyIirdK90nF4wBdOH1TdItz1A1D
0L2HooaER8FmBURW3GPaUuq9plDc6nqshHGFq+Wp0W0ECqu/BG0tNOhkzqeLtQgy
cSNOmlG+EhTfWGc6YRVacZloXD9h4fsJJumcOUjbfRWvThN66yhW04Cf2vkC0n4y
xbcyQXPKWBQ/wGvAM+wVXB/ZlUQJU2od74O6u/3MpMGJuDPNXFOOvX2zu/ihtRjM
A9bCyhwNoYJJgg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:23 2025 by rpki-client