Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: J7oXsLD/tOy8dM1aQMRJqlZUMX0P3LJSgBdMG2/WZmw=
Subject key identifier: 45:95:F2:FB:EC:89:F3:FD:AB:86:31:9B:33:53:95:43:8C:AC:7F:09
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 0194BD179CD135CC34A91D0BB89DECDC6553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 0372
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: ysydM3U5YkY/lFRgtW5ZJUHgzujOepTPuVTJ5p6PY1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9c:d1:35:cc:34:a9:1d:0b:b8:9d:ec:dc:65:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=4595f2fbec89f3fdab86319b335395438cac7f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:43:51:fd:26:9d:e3:75:2f:15:ab:19:51:
80:2d:5b:ef:ee:ed:f3:e8:2c:cc:e3:f1:5a:f7:f5:
03:fd:ad:4d:c1:84:2a:44:62:21:2f:49:01:aa:95:
a7:cc:cf:62:7a:76:96:69:b1:84:76:c5:18:02:66:
e0:8e:cd:54:f3:64:4c:de:f4:c5:9e:3d:c3:b0:e3:
63:4c:3a:8b:2a:a7:a6:fc:72:4a:20:0e:75:fe:98:
d4:34:5e:e3:60:50:b2:65:ff:a1:c7:bb:3e:65:5b:
2d:b8:fa:04:51:e8:94:d8:bb:89:93:2d:e3:d2:31:
8e:c1:de:33:98:a8:8f:1a:22:3a:c4:2e:b0:3a:4f:
79:d7:21:11:0e:18:10:93:00:a2:4f:95:44:1c:c7:
75:5a:1a:eb:ef:c1:76:66:a0:65:45:18:39:01:2e:
bf:60:58:d5:fc:a2:48:9a:17:14:e5:20:36:0f:af:
3c:aa:d7:4f:88:c9:0f:80:c5:89:37:40:40:d6:be:
5b:b1:05:e3:9d:b2:67:dd:8e:13:c7:27:a2:1b:15:
e8:6b:1b:a6:b0:a9:a8:3f:90:73:cd:26:e2:1d:35:
77:6d:9c:7c:fb:93:7d:08:e2:4a:ef:f9:1b:a7:68:
59:99:e8:f3:68:10:93:82:f3:fe:e7:fc:3e:65:1b:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:95:F2:FB:EC:89:F3:FD:AB:86:31:9B:33:53:95:43:8C:AC:7F:09
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9b:5b:e2:2c:cb:55:8a:b5:b2:cb:0e:17:5e:41:87:da:59:
2a:8b:8f:e9:09:c9:58:b7:a4:6b:05:2c:2a:22:c6:42:a8:9b:
6d:1f:23:cf:df:42:ec:02:3d:58:05:c5:9c:68:55:09:12:8a:
96:fe:23:84:fd:61:90:26:3b:35:29:a6:a3:55:53:90:7b:48:
fd:ed:e4:60:d5:39:32:03:29:88:b6:59:6e:12:42:57:02:20:
63:30:22:8d:6e:8a:50:45:33:b7:56:8c:68:88:5f:da:d2:39:
a5:ea:83:d9:a7:f8:c0:24:43:37:33:32:09:46:f1:b1:7b:1d:
4b:49:03:f9:e9:2d:a6:02:96:de:cc:47:44:a1:8a:0f:bc:0d:
56:ee:88:94:cc:52:e9:21:4e:9b:01:61:5d:8f:6c:4f:01:47:
d2:f1:3a:33:06:aa:1c:3c:3e:7c:68:58:78:21:f6:d7:94:ee:
7d:0a:60:bc:1e:45:bf:2a:67:d5:e6:47:8d:da:1d:6d:42:2a:
1a:94:4f:82:e7:69:05:b6:f4:88:6c:11:43:17:23:76:a0:ed:
91:d7:77:7a:4b:7e:6b:d3:59:4b:bb:a7:54:3b:b7:e7:d9:5a:
ed:23:61:5f:31:13:7f:f4:d4:be:f1:d6:34:64:f7:78:56:d9:
49:12:64:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5zRNcw0qR0LuJ3s3GVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjAzZGI4YmY2NjAwMTkzYmU0OGZiMTBlNmUzMTZiOGI1
Zjg4ZTMwHhcNMjUwMTMxMTYwMDI4WhcNMjUwMjAxMTYwMDI4WjAzMTEwLwYDVQQD
Eyg0NTk1ZjJmYmVjODlmM2ZkYWI4NjMxOWIzMzUzOTU0MzhjYWM3ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRZDUf0mneN1LxWrGVGALVvv7u3z
6CzM4/Fa9/UD/a1NwYQqRGIhL0kBqpWnzM9ienaWabGEdsUYAmbgjs1U82RM3vTF
nj3DsONjTDqLKqem/HJKIA51/pjUNF7jYFCyZf+hx7s+ZVstuPoEUeiU2LuJky3j
0jGOwd4zmKiPGiI6xC6wOk951yERDhgQkwCiT5VEHMd1Whrr78F2ZqBlRRg5AS6/
YFjV/KJImhcU5SA2D688qtdPiMkPgMWJN0BA1r5bsQXjnbJn3Y4TxyeiGxXoaxum
sKmoP5BzzSbiHTV3bZx8+5N9COJK7/kbp2hZmejzaBCTgvP+5/w+ZRtJxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWV8vvsifP9q4YxmzNTlUOMrH8JMB8GA1UdIwQY
MBaAFBvwPbi/ZgAZO+SPsQ5uMWuLX4jjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19BOXVMOW1BQms3NUkteERtNHhhNHRmaU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNjA3NTItY2E3ZS00YWNmLThjZDEt
ZWU1OTg4ZTg3M2UxLzEvR19BOXVMOW1BQms3NUkteERtNHhhNHRmaU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNjA3NTItY2E3ZS00YWNmLThjZDEtZWU1OTg4ZTg3M2Ux
LzEvR19BOXVMOW1BQms3NUkteERtNHhhNHRmaU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfptb4izL
VYq1sssOF15Bh9pZKouP6QnJWLekawUsKiLGQqibbR8jz99C7AI9WAXFnGhVCRKK
lv4jhP1hkCY7NSmmo1VTkHtI/e3kYNU5MgMpiLZZbhJCVwIgYzAijW6KUEUzt1aM
aIhf2tI5peqD2af4wCRDNzMyCUbxsXsdS0kD+ektpgKW3sxHRKGKD7wNVu6IlMxS
6SFOmwFhXY9sTwFH0vE6MwaqHDw+fGhYeCH215TufQpgvB5Fvypn1eZHjdodbUIq
GpRPgudpBbb0iGwRQxcjdqDtkdd3ekt+a9NZS7unVDu359la7SNhXzETf/TUvvHW
NGT3eFbZSRJk4A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:31 2025 by rpki-client