Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: UZ+yoPBUom1+6rogYOwnkJ/xlJurdc+vvrbCvy6i4Aw=
Subject key identifier: FC:CD:97:AF:03:92:8B:DC:50:CE:71:05:A0:9C:41:62:5D:EB:07:0E
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 0194BD855EE61420CC0B777919F9D8EC94E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0854
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: I0mLregW7eoENANPNYjIlz7nU5VRVcgwUYSJ35cNPjM=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5e:e6:14:20:cc:0b:77:79:19:f9:d8:ec:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=fccd97af03928bdc50ce7105a09c41625deb070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:c7:00:ac:df:9f:9f:ba:02:08:1b:c5:8b:
60:0a:5e:1c:c9:f3:2e:28:f4:9c:31:37:68:29:e4:
fc:a2:0e:3a:2a:31:09:f9:67:17:3c:bc:d6:8a:f0:
5e:ff:5a:ce:d0:10:28:5f:7b:22:e0:d4:c7:a8:a3:
ca:48:72:3b:0f:97:5b:bc:20:21:48:a7:e7:db:4e:
b1:a4:a8:c3:c3:02:71:6d:f8:3b:63:81:e3:9e:92:
6c:44:b5:88:1c:bd:20:90:bb:11:15:f9:41:c4:b6:
ec:a1:80:e4:df:ad:4b:c3:b5:b0:70:82:a3:46:6d:
80:9f:e7:77:fd:3c:56:b2:d2:ed:3d:9b:42:8e:5d:
7d:61:fe:10:5d:99:19:c0:cf:d7:02:9e:a4:6d:02:
67:9c:37:e3:39:77:dc:cb:28:93:e6:07:f2:df:eb:
50:df:e7:f6:26:b4:28:e2:78:56:1f:c2:aa:f8:52:
c9:55:0b:b1:44:c2:bf:c2:6b:9e:d4:cc:de:d9:b6:
ad:6e:35:43:40:c1:27:1c:40:2d:01:63:39:30:ed:
5d:e0:55:80:ff:81:bb:62:77:75:e4:66:19:35:42:
18:71:c1:95:e4:56:dd:4f:41:db:5c:2d:e3:a8:88:
81:62:66:89:c9:ea:a5:5b:b6:a3:90:63:d0:38:92:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:97:AF:03:92:8B:DC:50:CE:71:05:A0:9C:41:62:5D:EB:07:0E
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:32:ae:62:7e:ad:c1:2b:82:02:b5:e8:59:d8:6b:12:c8:6a:
8c:e6:ff:6f:06:28:f3:ff:4c:8e:37:9b:3a:fc:41:4e:d2:6a:
ac:e1:c6:e4:cc:c7:ef:eb:9d:79:2d:cb:c7:99:2c:cd:2e:6c:
1d:45:7b:86:47:1c:85:bb:84:11:56:de:f1:2b:22:7c:25:61:
02:71:35:0a:26:ac:73:22:fc:98:e6:b8:4b:74:e1:2f:3c:0b:
3f:36:a6:ad:df:f3:b9:b7:71:25:ab:94:ce:c1:ea:b7:09:d2:
7b:f6:43:c1:ac:cb:f9:84:a1:f7:b9:5a:65:75:bf:17:cf:94:
8c:af:96:ec:80:19:67:8b:71:a2:40:e4:3d:2a:6f:40:37:d9:
61:bf:16:46:a4:91:23:8e:a0:81:3a:8d:06:33:d0:62:28:0e:
ae:17:2e:91:d3:90:c6:ff:7f:32:48:bf:dc:90:97:24:3f:df:
c4:e9:35:5c:27:6c:18:20:b8:87:c5:a1:37:25:24:cc:fb:8e:
23:63:6d:0a:3f:4f:75:6b:54:e7:9c:cf:e1:06:36:5c:ba:36:
cf:2c:a9:7a:1b:24:8c:0b:b3:7b:60:29:03:78:cc:4e:e7:4b:
51:61:94:62:89:7e:5f:5e:26:2b:d7:10:d6:4e:3e:43:ed:3a:
b8:34:f5:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hV7mFCDMC3d5GfnY7JThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk
ODNkYzAwHhcNMjUwMTMxMTgwMDIxWhcNMjUwMjAxMTgwMDIxWjAzMTEwLwYDVQQD
EyhmY2NkOTdhZjAzOTI4YmRjNTBjZTcxMDVhMDljNDE2MjVkZWIwNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sDHAKzfn5+6AggbxYtgCl4cyfMu
KPScMTdoKeT8og46KjEJ+WcXPLzWivBe/1rO0BAoX3si4NTHqKPKSHI7D5dbvCAh
SKfn206xpKjDwwJxbfg7Y4HjnpJsRLWIHL0gkLsRFflBxLbsoYDk361Lw7WwcIKj
Rm2An+d3/TxWstLtPZtCjl19Yf4QXZkZwM/XAp6kbQJnnDfjOXfcyyiT5gfy3+tQ
3+f2JrQo4nhWH8Kq+FLJVQuxRMK/wmue1Mze2batbjVDQMEnHEAtAWM5MO1d4FWA
/4G7Ynd15GYZNUIYccGV5FbdT0HbXC3jqIiBYmaJyeqlW7ajkGPQOJKWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzNl68DkovcUM5xBaCcQWJd6wcOMB8GA1UdIwQY
MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt
NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3
LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTKuYn6t
wSuCArXoWdhrEshqjOb/bwYo8/9MjjebOvxBTtJqrOHG5MzH7+udeS3Lx5kszS5s
HUV7hkcchbuEEVbe8SsifCVhAnE1CiascyL8mOa4S3ThLzwLPzamrd/zubdxJauU
zsHqtwnSe/ZDwazL+YSh97laZXW/F8+UjK+W7IAZZ4txokDkPSpvQDfZYb8WRqSR
I46ggTqNBjPQYigOrhcukdOQxv9/Mki/3JCXJD/fxOk1XCdsGCC4h8WhNyUkzPuO
I2NtCj9PdWtU55zP4QY2XLo2zyypehskjAuze2ApA3jMTudLUWGUYol+X14mK9cQ
1k4+Q+06uDT1vg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:59 2025 by rpki-client