Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: D9/YgsP/yTtu4Y2PqLApqRQ4wzp9BsTuK9JoFYNtQlw=
Subject key identifier: 46:52:A4:71:EE:AF:CC:CD:1F:BD:F9:0D:A2:38:25:E1:2B:9A:AF:10
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 0194BD854341C7B1AF1844D9193534DF72AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 1302
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: rKcdUkDP/Bnrchn7kepDsG6coJ+SIkr7UXItARfliaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:41:c7:b1:af:18:44:d9:19:35:34:df:72:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=4652a471eeafcccd1fbdf90da23825e12b9aaf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:57:1a:09:83:c4:c7:a1:50:84:9a:17:13:
ba:f8:1d:f4:40:f7:c3:c6:74:49:44:38:0f:04:c1:
03:2d:91:30:09:a6:0e:78:81:64:54:29:5a:05:24:
e8:64:b6:15:47:94:e0:e7:47:ca:65:0f:89:49:42:
8f:51:8d:42:d5:89:1f:f8:cb:a2:3c:4a:06:75:ea:
9a:fc:0a:6f:f6:fa:5e:f8:95:b9:90:7f:23:7a:e6:
0d:c2:6b:7a:81:d7:ce:28:9d:40:cd:d3:90:6c:16:
2e:af:59:bf:f6:72:01:c7:39:f8:da:4e:95:78:f7:
3f:c6:eb:69:97:08:65:1b:7e:f8:c4:57:4a:64:78:
c8:48:b8:23:ad:36:3f:d4:a2:b5:7a:16:49:00:f4:
d4:5f:02:83:3e:bf:cc:46:0e:1f:0b:46:15:7d:c5:
86:3a:6e:7d:8b:5e:d4:b2:47:e2:c1:70:41:62:b5:
b5:93:c6:3b:fc:c2:17:b7:57:63:c9:4f:b1:01:71:
b5:2c:bf:ef:9a:3a:23:8a:55:f1:0f:ff:26:ca:3f:
c6:fe:c8:bd:d8:ef:84:b7:5d:f6:3b:66:5b:a8:38:
7c:cf:3a:bb:fa:46:0d:17:c5:71:33:4e:f6:ed:0f:
e1:97:f3:48:de:94:74:4f:88:d4:96:fa:32:e1:a1:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:A4:71:EE:AF:CC:CD:1F:BD:F9:0D:A2:38:25:E1:2B:9A:AF:10
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:65:2c:3c:b5:dc:fc:3d:f9:2f:bf:08:66:a4:f4:81:41:ca:
02:e0:d7:f1:e4:9b:89:a2:89:4e:1a:5e:a5:9d:a5:9e:36:8c:
d8:6e:f9:18:f9:c6:00:30:ad:f6:44:7a:43:8f:48:f1:30:ce:
5e:28:e9:29:57:6e:0a:3c:b1:1c:e3:19:d9:dd:1d:66:bd:78:
fa:5e:6e:fb:74:f7:7f:6d:a2:98:50:dd:51:e3:24:bf:b0:5c:
c0:0b:eb:32:1f:a5:54:87:5c:90:a2:06:c1:03:59:14:8d:fa:
64:4c:84:24:86:03:3a:e2:11:06:27:58:72:7d:e1:96:4c:71:
68:c5:ad:a2:00:c2:84:c9:a7:67:9d:69:7f:55:d5:ba:41:11:
e2:b9:e2:81:23:13:70:db:5d:8d:f1:e7:47:a8:8e:cd:32:45:
e8:6a:61:69:79:87:0d:4d:73:31:39:7d:92:be:eb:ad:92:cf:
8d:21:53:6e:20:5e:1b:3a:9b:d9:80:d2:ce:70:2c:fd:2a:42:
3b:ee:01:60:8b:71:09:ab:f4:1a:ae:86:9e:b6:55:9c:44:fe:
c2:a2:00:97:5d:42:bd:f2:4b:60:76:82:09:72:8a:4d:3c:42:
84:99:2a:e4:8e:2f:70:2f:37:c0:2d:06:1f:32:26:e1:4a:2a:
bc:c7:ab:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUNBx7GvGETZGTU033KqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZGYwY2JkZDU1NzFlNTgwZWE1N2UxOGE0NDBjYTJiZWE0
ODA2ZjgwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
Eyg0NjUyYTQ3MWVlYWZjY2NkMWZiZGY5MGRhMjM4MjVlMTJiOWFhZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k9XGgmDxMehUISaFxO6+B30QPfD
xnRJRDgPBMEDLZEwCaYOeIFkVClaBSToZLYVR5Tg50fKZQ+JSUKPUY1C1Ykf+Mui
PEoGdeqa/Apv9vpe+JW5kH8jeuYNwmt6gdfOKJ1AzdOQbBYur1m/9nIBxzn42k6V
ePc/xutplwhlG374xFdKZHjISLgjrTY/1KK1ehZJAPTUXwKDPr/MRg4fC0YVfcWG
Om59i17UskfiwXBBYrW1k8Y7/MIXt1djyU+xAXG1LL/vmjojilXxD/8myj/G/si9
2O+Et132O2ZbqDh8zzq7+kYNF8VxM0727Q/hl/NI3pR0T4jUlvoy4aF/+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZSpHHur8zNH735DaI4JeErmq8QMB8GA1UdIwQY
MBaAFIDfDL3VVx5YDqV+GKRAyivqSAb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMt
YmQ3NWVmOWI1Nzk4LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMtYmQ3NWVmOWI1Nzk4
LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmUsPLXc
/D35L78IZqT0gUHKAuDX8eSbiaKJThpepZ2lnjaM2G75GPnGADCt9kR6Q49I8TDO
XijpKVduCjyxHOMZ2d0dZr14+l5u+3T3f22imFDdUeMkv7BcwAvrMh+lVIdckKIG
wQNZFI36ZEyEJIYDOuIRBidYcn3hlkxxaMWtogDChMmnZ51pf1XVukER4rnigSMT
cNtdjfHnR6iOzTJF6GphaXmHDU1zMTl9kr7rrZLPjSFTbiBeGzqb2YDSznAs/SpC
O+4BYItxCav0Gq6GnrZVnET+wqIAl11CvfJLYHaCCXKKTTxChJkq5I4vcC83wC0G
HzIm4UoqvMerWg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:13 2025 by rpki-client