Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: imiL3vDF0dGcnAG0vkXzT7I6lvbnTR4uTMu9fk+3HEk=
Subject key identifier: E0:F6:3C:F1:D6:A9:7B:80:02:C0:1B:F5:7A:E4:28:CA:F7:C1:F3:11
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 0194BD17CB0168EFC703844F20132F140E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 13EC
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: 23p0+QTFp293Xt7yI2+8PmY50vc7e0E898EgaPqQqrU=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:01:68:ef:c7:03:84:4f:20:13:2f:14:0e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=e0f63cf1d6a97b8002c01bf57ae428caf7c1f311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:05:96:8b:22:7e:cd:93:60:52:5a:7b:83:
45:66:bd:2f:f4:c7:58:5c:9b:7d:c6:03:bb:49:c9:
20:d3:61:ed:85:12:d0:18:3d:ca:00:07:ed:8d:1e:
71:b2:76:99:71:c6:31:41:29:04:f4:15:41:a2:74:
71:fc:f4:0c:94:01:f9:9f:b2:9a:dc:9b:07:95:4a:
14:a9:75:25:6b:ae:b7:d4:92:9e:38:3f:0f:f2:25:
98:cd:27:d2:59:67:28:2c:c0:9f:f8:42:26:49:c4:
a0:ac:29:7b:cd:23:ac:6a:60:b4:5e:28:2b:cf:55:
ee:9f:87:b8:2f:01:f7:0d:1b:f7:ad:c5:8b:b8:88:
b5:e0:27:c3:4c:46:ea:38:b2:73:6c:d3:da:fd:c2:
69:c8:8e:87:0f:df:bd:46:3a:a8:7e:3a:3d:a4:53:
98:92:cd:5c:6d:71:74:12:41:f7:b7:79:0a:f0:2c:
3c:53:23:b7:3e:c0:ea:fb:cc:e7:51:15:48:a9:c1:
96:e2:31:d5:24:da:60:c2:55:d5:da:3c:98:2e:30:
6a:07:38:af:0f:30:5c:94:19:25:80:e7:05:ff:18:
ad:e4:d2:3d:40:6f:8f:41:7e:bf:c8:ad:1d:96:c1:
f8:2a:e9:33:21:bb:0c:f5:7d:3c:d4:5f:10:7a:93:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F6:3C:F1:D6:A9:7B:80:02:C0:1B:F5:7A:E4:28:CA:F7:C1:F3:11
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:51:ea:52:40:cb:57:dc:25:24:9d:b7:df:20:4c:9a:a4:
03:32:db:cd:4e:ec:96:67:4c:2a:d6:50:6c:27:6b:fb:da:39:
60:42:dd:f9:4e:95:f2:05:fd:be:dc:f4:bf:76:ec:e1:75:d8:
7d:cf:ce:ee:36:62:07:95:83:69:29:87:bf:11:b0:8d:93:10:
46:49:fd:87:d8:0b:79:6c:15:94:fb:66:a5:70:f4:54:b2:00:
98:57:bb:b4:ec:e6:03:2d:05:00:16:65:08:7c:52:31:7f:2b:
41:23:1d:b3:db:32:76:56:cd:fe:48:7e:4f:44:68:b3:a9:a4:
68:91:dd:2b:68:87:da:52:a3:4a:60:2d:1d:04:93:f1:9d:a4:
3f:01:50:03:cb:0b:42:a2:96:cb:54:ea:e4:22:e1:00:c5:be:
30:a3:d4:a0:b3:81:70:77:fc:e5:d9:43:2e:a0:5d:70:6f:2a:
bf:a5:51:1e:19:06:76:67:b7:8a:70:c0:31:f5:22:a9:8e:b9:
51:e1:56:22:e4:2a:5f:28:db:3a:33:14:57:ed:4a:df:c1:24:
f5:d3:f9:99:05:7d:5e:2a:76:78:d3:f7:73:80:7d:7b:f5:17:
21:78:72:5f:62:ad:7c:97:f9:94:27:27:5e:77:18:71:b2:01:
0e:fc:9d:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8sBaO/HA4RPIBMvFA4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjZhZjQyNWFiM2QzOWQ3MzM3YzJiMTI1ZDM5NTkzYWQ5
MWMxZDEwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
EyhlMGY2M2NmMWQ2YTk3YjgwMDJjMDFiZjU3YWU0MjhjYWY3YzFmMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbYFlosifs2TYFJae4NFZr0v9MdY
XJt9xgO7Sckg02HthRLQGD3KAAftjR5xsnaZccYxQSkE9BVBonRx/PQMlAH5n7Ka
3JsHlUoUqXUla6631JKeOD8P8iWYzSfSWWcoLMCf+EImScSgrCl7zSOsamC0Xigr
z1Xun4e4LwH3DRv3rcWLuIi14CfDTEbqOLJzbNPa/cJpyI6HD9+9Rjqofjo9pFOY
ks1cbXF0EkH3t3kK8Cw8UyO3PsDq+8znURVIqcGW4jHVJNpgwlXV2jyYLjBqBziv
DzBclBklgOcF/xit5NI9QG+PQX6/yK0dlsH4KukzIbsM9X081F8QepMWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOD2PPHWqXuAAsAb9XrkKMr3wfMRMB8GA1UdIwQY
MBaAFAhmr0Jas9OdczfCsSXTlZOtkcHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMt
YjdlYjEyOTk4YjM1LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMtYjdlYjEyOTk4YjM1
LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2dR6lJA
y1fcJSSdt98gTJqkAzLbzU7slmdMKtZQbCdr+9o5YELd+U6V8gX9vtz0v3bs4XXY
fc/O7jZiB5WDaSmHvxGwjZMQRkn9h9gLeWwVlPtmpXD0VLIAmFe7tOzmAy0FABZl
CHxSMX8rQSMds9sydlbN/kh+T0Ros6mkaJHdK2iH2lKjSmAtHQST8Z2kPwFQA8sL
QqKWy1Tq5CLhAMW+MKPUoLOBcHf85dlDLqBdcG8qv6VRHhkGdme3inDAMfUiqY65
UeFWIuQqXyjbOjMUV+1K38Ek9dP5mQV9Xip2eNP3c4B9e/UXIXhyX2KtfJf5lCcn
XncYcbIBDvydHw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:00 2025 by rpki-client