Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: ZKEoh+4AtbgH6NAU1Snd+98Q8H6NirtHEBhpUnUSqQM=
Subject key identifier: A7:04:82:5A:C4:C1:F1:86:F9:46:53:C0:58:4D:BD:8B:CA:C8:7F:2C
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 0194BD858AF57AA04715AB18B83BD5616EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1031
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: IKcljrWhNno774ezglLscStWG3wSfpkF/234+Qh/fQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8a:f5:7a:a0:47:15:ab:18:b8:3b:d5:61:6e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=a704825ac4c1f186f94653c0584dbd8bcac87f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:1c:29:6d:04:44:c0:ac:a8:58:65:1d:a4:
97:ef:01:31:fa:1c:d0:42:2c:1b:0a:0f:83:e7:34:
6d:58:94:69:bd:29:30:e2:d7:ee:ab:67:7c:80:33:
93:d7:f6:60:7f:98:10:56:7d:23:2e:f5:0b:ff:f7:
38:d2:f5:8f:db:03:ad:09:3d:bc:78:94:e7:b3:11:
df:32:f5:c0:61:fb:3a:94:4f:34:14:c5:5c:c1:9c:
6d:d6:10:2f:a9:52:68:82:08:14:10:63:fa:1a:e8:
c7:4a:be:7a:bf:95:49:9a:ff:f4:ba:95:0f:81:71:
5b:40:ed:ef:58:30:e7:5f:ca:80:a8:0b:9a:29:b2:
44:40:e6:ad:df:d6:8f:c9:b4:83:ac:f0:bb:ad:80:
dd:28:c4:4f:e0:1b:f3:1f:1a:e0:a0:ef:b0:90:5f:
14:24:80:3f:c9:cf:ce:27:5d:27:bf:f1:6f:c7:18:
47:3d:42:34:95:45:69:ba:ed:ca:16:ed:73:98:cc:
4b:c3:81:84:a7:b4:50:5e:9a:75:40:83:28:ca:a3:
a9:f8:0d:3c:46:2b:1a:03:13:f2:26:7a:45:35:48:
cd:61:20:3f:89:f0:6c:95:19:38:47:4c:29:42:09:
96:9c:62:36:2d:6c:4f:dc:e8:5a:86:67:82:9c:85:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:04:82:5A:C4:C1:F1:86:F9:46:53:C0:58:4D:BD:8B:CA:C8:7F:2C
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ea:e6:87:7d:ab:73:62:f1:f0:c7:93:d8:d4:92:06:fe:64:
81:e1:91:38:39:40:3f:80:a6:6e:22:2a:56:94:3b:e4:2f:5c:
e0:99:24:92:4d:bd:54:af:6a:25:ad:7e:c7:de:cb:71:08:56:
41:61:b2:3d:93:0b:0a:e3:eb:09:be:6e:8d:39:f0:18:df:70:
2e:f1:b7:4d:55:06:0b:fc:8a:a8:2c:35:2f:10:ad:a1:22:0d:
45:e8:db:64:09:60:d5:b2:a0:d1:25:35:8e:fb:57:d5:c9:a7:
a7:6d:96:57:44:98:4f:69:18:d6:f1:d8:bc:eb:d0:6e:29:86:
78:14:5a:64:b5:fc:c5:7d:e5:bc:01:cd:e0:22:5a:41:94:9d:
75:e7:2c:76:1a:28:fe:5c:d4:e9:ef:a0:42:b9:61:ff:c4:76:
57:5e:6f:12:2c:f9:b4:87:ac:2b:84:b0:ce:cd:29:53:6f:17:
21:12:5b:60:22:49:e3:67:6e:82:6d:40:6e:13:86:c5:4f:33:
82:95:08:a4:e1:65:61:41:ba:a6:b4:62:a8:65:30:ab:a9:cb:
1b:e8:03:b8:a4:4e:83:4b:dd:ee:ff:3f:e3:d5:2a:f9:f5:7f:
79:ee:95:64:a1:1f:a8:5d:5d:74:02:32:53:f0:9e:10:f6:22:
85:45:1a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYr1eqBHFasYuDvVYW77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3
NTk2ZDcwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
EyhhNzA0ODI1YWM0YzFmMTg2Zjk0NjUzYzA1ODRkYmQ4YmNhYzg3ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h4cKW0ERMCsqFhlHaSX7wEx+hzQ
QiwbCg+D5zRtWJRpvSkw4tfuq2d8gDOT1/Zgf5gQVn0jLvUL//c40vWP2wOtCT28
eJTnsxHfMvXAYfs6lE80FMVcwZxt1hAvqVJogggUEGP6GujHSr56v5VJmv/0upUP
gXFbQO3vWDDnX8qAqAuaKbJEQOat39aPybSDrPC7rYDdKMRP4BvzHxrgoO+wkF8U
JIA/yc/OJ10nv/FvxxhHPUI0lUVpuu3KFu1zmMxLw4GEp7RQXpp1QIMoyqOp+A08
RisaAxPyJnpFNUjNYSA/ifBslRk4R0wpQgmWnGI2LWxP3OhahmeCnIWmWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcEglrEwfGG+UZTwFhNvYvKyH8sMB8GA1UdIwQY
MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt
NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw
LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx+rmh32r
c2Lx8MeT2NSSBv5kgeGRODlAP4CmbiIqVpQ75C9c4Jkkkk29VK9qJa1+x97LcQhW
QWGyPZMLCuPrCb5ujTnwGN9wLvG3TVUGC/yKqCw1LxCtoSINRejbZAlg1bKg0SU1
jvtX1cmnp22WV0SYT2kY1vHYvOvQbimGeBRaZLX8xX3lvAHN4CJaQZSddecsdhoo
/lzU6e+gQrlh/8R2V15vEiz5tIesK4Swzs0pU28XIRJbYCJJ42dugm1AbhOGxU8z
gpUIpOFlYUG6prRiqGUwq6nLG+gDuKROg0vd7v8/49Uq+fV/ee6VZKEfqF1ddAIy
U/CeEPYihUUanw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:26 2025 by rpki-client