Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: xF817u9r7NUHCD6+V4BnNPVWMbuz6ELflPwxfLkQ+KU=
Subject key identifier: 8C:7A:4E:95:B4:14:B7:59:05:34:74:49:F8:67:4F:19:CA:8F:4A:D7
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 0194BD4E539D7F4EBDC69B11BABF694CC33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: Pobv1P12tWaDw1iANOEqWXTEgMifCKbeGyi3gh5MmIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:9d:7f:4e:bd:c6:9b:11:ba:bf:69:4c:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=8c7a4e95b414b75905347449f8674f19ca8f4ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:01:70:3f:98:12:07:d7:b4:fe:0d:a8:3c:
65:c0:08:49:31:04:9c:53:a4:86:9d:cc:b7:47:29:
b4:e8:f6:13:71:de:42:54:9f:ed:49:21:7e:32:fc:
46:e2:7f:e7:33:4a:20:7b:ff:b0:c5:49:35:43:d7:
3c:7e:27:30:a9:b4:be:48:7a:d1:7d:95:fd:23:93:
e0:c8:25:81:5c:69:e5:17:9b:ac:a1:ba:c3:f4:f2:
bc:17:1c:c7:ad:c4:50:0c:8c:10:2f:79:1a:34:b0:
6f:fd:2f:6f:92:5a:41:68:50:51:ee:95:16:32:15:
c8:17:61:fd:1c:65:74:f7:d6:e5:cd:eb:22:46:ac:
5f:e6:8d:56:6e:48:00:eb:89:9b:33:43:8c:26:aa:
6b:84:3d:bb:12:eb:d6:f4:6e:e8:0f:14:e1:44:19:
7e:0f:5e:37:f1:5f:92:09:52:6e:bf:d3:63:e6:e8:
af:cb:aa:cc:3f:14:65:75:25:a9:4a:5e:56:5e:cf:
2e:48:67:25:8e:79:3f:a3:8f:96:fc:87:67:5a:08:
35:11:08:d3:b9:85:0d:61:b1:61:ab:d1:c8:04:0b:
17:24:58:42:a4:e9:7a:1b:9a:ad:f2:f6:98:b0:c1:
82:c8:ec:70:bf:d9:65:00:40:f9:e7:5d:33:f3:47:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:4E:95:B4:14:B7:59:05:34:74:49:F8:67:4F:19:CA:8F:4A:D7
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:d8:5d:c4:c5:16:70:d9:1b:8e:4a:a4:26:e1:e8:f7:df:
6e:3d:10:d4:f2:03:85:27:df:90:22:ce:31:12:e7:c8:29:35:
cb:83:de:fc:1a:88:1a:49:d0:18:07:27:44:d8:7d:e3:ed:c4:
e8:dd:b4:3b:72:eb:87:eb:3d:99:b4:f7:b5:29:9a:2a:27:a2:
64:6e:e1:b7:b8:63:6b:a5:a3:9a:5d:28:6e:88:6b:4f:63:8e:
ee:48:d3:b1:05:dc:bc:76:51:74:00:ec:68:ca:49:59:d2:9a:
91:e5:f9:3d:b3:7b:5e:4a:c3:a1:26:7e:79:78:8e:04:e4:9f:
33:08:9c:63:11:0f:2d:a5:a9:1d:c0:e6:d7:6d:37:1d:59:d7:
8e:ac:19:26:3c:be:50:5a:83:31:bb:3a:cf:31:91:ab:49:a3:
55:62:57:e2:81:aa:f1:6d:54:bc:9c:9d:6e:bf:04:9e:93:e7:
de:fb:29:05:61:ad:ad:7f:1b:17:26:e9:0f:a3:1e:30:a8:7d:
e4:b4:e2:76:bd:78:01:d6:3a:f0:bc:be:d1:13:be:ad:08:56:
2d:4b:14:23:ab:6d:db:02:64:3e:e9:b7:04:ab:1d:72:ee:93:
53:ae:b0:eb:ec:df:e2:9e:07:1d:a4:6e:ca:81:79:5b:22:02:
88:18:4c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlOdf069xpsRur9pTMM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy
YmZkZTYwHhcNMjUwMTMxMTcwMDE0WhcNMjUwMjAxMTcwMDE0WjAzMTEwLwYDVQQD
Eyg4YzdhNGU5NWI0MTRiNzU5MDUzNDc0NDlmODY3NGYxOWNhOGY0YWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLsBcD+YEgfXtP4NqDxlwAhJMQSc
U6SGncy3Rym06PYTcd5CVJ/tSSF+MvxG4n/nM0oge/+wxUk1Q9c8ficwqbS+SHrR
fZX9I5PgyCWBXGnlF5usobrD9PK8FxzHrcRQDIwQL3kaNLBv/S9vklpBaFBR7pUW
MhXIF2H9HGV099blzesiRqxf5o1WbkgA64mbM0OMJqprhD27EuvW9G7oDxThRBl+
D1438V+SCVJuv9Nj5uivy6rMPxRldSWpSl5WXs8uSGcljnk/o4+W/IdnWgg1EQjT
uYUNYbFhq9HIBAsXJFhCpOl6G5qt8vaYsMGCyOxwv9llAED5510z80ePmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx6TpW0FLdZBTR0SfhnTxnKj0rXMB8GA1UdIwQY
MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt
MDNiYzYzY2EyNWEzLzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz
LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLDYXcTF
FnDZG45KpCbh6Pffbj0Q1PIDhSffkCLOMRLnyCk1y4Pe/BqIGknQGAcnRNh94+3E
6N20O3Lrh+s9mbT3tSmaKieiZG7ht7hja6Wjml0obohrT2OO7kjTsQXcvHZRdADs
aMpJWdKakeX5PbN7XkrDoSZ+eXiOBOSfMwicYxEPLaWpHcDm1203HVnXjqwZJjy+
UFqDMbs6zzGRq0mjVWJX4oGq8W1UvJydbr8EnpPn3vspBWGtrX8bFybpD6MeMKh9
5LTidr14AdY68Ly+0RO+rQhWLUsUI6tt2wJkPum3BKsdcu6TU66w6+zf4p4HHaRu
yoF5WyICiBhMdA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:04 2025 by rpki-client