Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: 8wfdVfajD2PgrAeucPPIhjTw/W9QunMQ09yj/eylxdc=
Subject key identifier: B2:64:80:5A:7A:6A:79:3C:5B:8B:5E:93:ED:BB:B2:81:F0:A3:67:A8
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 0194BC72BED5071AA11BECD3B54FE3FBE085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 037B
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: LpYrQ4SYjx2f7eF99MVWFRCsyQFQjIFyCrIKqufcKXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:be:d5:07:1a:a1:1b:ec:d3:b5:4f:e3:fb:e0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=b264805a7a6a793c5b8b5e93edbbb281f0a367a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:d5:28:ea:b8:0b:29:da:05:44:d6:e4:d6:
2e:8a:29:27:52:87:c0:8a:2e:44:7f:73:4a:13:99:
12:a1:08:4c:9e:5b:a6:d4:ad:94:d5:2c:39:8c:2c:
5e:98:db:f9:cd:d3:f9:93:40:7d:70:a7:56:09:37:
c4:04:d3:93:d8:fa:a9:86:40:bf:9e:50:a0:72:26:
56:d6:71:4f:d8:e5:8a:98:1e:6e:eb:4e:4e:b3:34:
5d:86:10:ac:4f:29:06:78:08:a3:3d:0f:da:01:04:
5e:3a:d4:fb:cb:92:32:b0:34:f7:07:fc:a0:36:b1:
e8:43:29:16:5e:6f:9a:4b:98:7b:55:31:08:ac:39:
19:c8:38:f9:1c:9a:41:c9:ca:4a:c1:59:6b:e2:67:
b8:0e:45:d0:10:45:f0:0c:95:5d:98:02:fa:fa:16:
fb:fa:5e:18:6a:b6:02:de:64:92:68:ab:9d:62:a0:
cd:a4:f2:81:89:f3:78:18:74:9a:30:63:ce:8d:ca:
cc:c9:be:8c:84:1b:b5:b7:e0:03:c8:27:89:9b:d2:
9e:16:a3:cf:5b:83:f1:5d:b4:a0:96:f3:e9:0f:ab:
d3:d8:19:6a:b6:dd:24:73:1b:21:0b:2a:0d:9a:49:
f6:58:87:5a:aa:3d:f8:72:dc:ad:e0:5c:9f:af:60:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:80:5A:7A:6A:79:3C:5B:8B:5E:93:ED:BB:B2:81:F0:A3:67:A8
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d9:f6:f3:0c:7c:94:9f:ef:c3:c7:91:cb:57:7b:df:37:44:
f0:5e:39:e1:ef:35:5f:52:0f:87:e7:5c:85:24:c1:df:9d:eb:
49:9c:54:3c:01:c6:30:de:f1:da:2d:1f:6b:1a:fe:fe:fe:47:
c2:a1:62:29:42:6d:f1:bc:52:23:81:13:af:cd:eb:ac:b9:28:
ea:fe:b1:f1:ac:64:35:3c:16:78:e4:e5:58:06:91:d1:91:1e:
7a:8f:0d:3a:2f:11:5d:0d:0f:f0:68:ed:d2:b4:38:57:34:55:
f0:c5:55:63:2e:31:7b:66:53:62:b1:21:c6:e1:db:2b:90:69:
6e:75:cf:55:f3:73:23:33:c6:34:df:f3:68:41:dd:eb:2b:f2:
50:41:ac:ca:b7:17:a0:58:1a:72:44:bd:b4:36:83:d0:59:5b:
31:31:ac:97:73:16:52:af:ad:b1:ae:78:7e:c3:ad:04:d8:0b:
5a:e4:e7:58:24:a2:7e:a6:a1:7b:d2:ef:f6:fe:4c:00:40:1c:
d1:0d:da:5b:02:4a:70:a8:68:9e:b3:b4:ae:e7:65:50:61:39:
13:ea:a3:a4:33:36:47:6d:c8:66:38:e9:ce:a7:58:38:ab:6d:
99:3f:b0:fa:a0:2c:60:fd:8c:6f:13:a1:ab:da:48:c7:ee:4c:
47:fe:c6:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cr7VBxqhG+zTtU/j++CFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDcyNTM3Y2M1NGFjMTBiNGFiZmFjYzcyYzFiNzU0YzE3
MWFmOGYwHhcNMjUwMTMxMTMwMDIzWhcNMjUwMjAxMTMwMDIzWjAzMTEwLwYDVQQD
EyhiMjY0ODA1YTdhNmE3OTNjNWI4YjVlOTNlZGJiYjI4MWYwYTM2N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTnVKOq4CynaBUTW5NYuiiknUofA
ii5Ef3NKE5kSoQhMnlum1K2U1Sw5jCxemNv5zdP5k0B9cKdWCTfEBNOT2PqphkC/
nlCgciZW1nFP2OWKmB5u605OszRdhhCsTykGeAijPQ/aAQReOtT7y5IysDT3B/yg
NrHoQykWXm+aS5h7VTEIrDkZyDj5HJpBycpKwVlr4me4DkXQEEXwDJVdmAL6+hb7
+l4YarYC3mSSaKudYqDNpPKBifN4GHSaMGPOjcrMyb6MhBu1t+ADyCeJm9KeFqPP
W4PxXbSglvPpD6vT2Blqtt0kcxshCyoNmkn2WIdaqj34ctyt4Fyfr2AmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJkgFp6ank8W4tek+27soHwo2eoMB8GA1UdIwQY
MBaAFIDXJTfMVKwQtKv6zHLBt1TBca+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmIt
MmVkMjY5Mzg0YTc0LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmItMmVkMjY5Mzg0YTc0
LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtn28wx8
lJ/vw8eRy1d73zdE8F454e81X1IPh+dchSTB353rSZxUPAHGMN7x2i0faxr+/v5H
wqFiKUJt8bxSI4ETr83rrLko6v6x8axkNTwWeOTlWAaR0ZEeeo8NOi8RXQ0P8Gjt
0rQ4VzRV8MVVYy4xe2ZTYrEhxuHbK5BpbnXPVfNzIzPGNN/zaEHd6yvyUEGsyrcX
oFgackS9tDaD0FlbMTGsl3MWUq+tsa54fsOtBNgLWuTnWCSifqahe9Lv9v5MAEAc
0Q3aWwJKcKhonrO0rudlUGE5E+qjpDM2R23IZjjpzqdYOKttmT+w+qAsYP2MbxOh
q9pIx+5MR/7GmA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:12 2025 by rpki-client