Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: T7+8/bvPd9mkoam7T+H4w2OCbJslLptBzxqVAYhGpJg=
Subject key identifier: 5D:BC:F2:55:2D:7A:CD:98:60:BF:AF:2F:38:97:8D:D1:CD:2E:59:C8
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 0194BC3BD53654E105599A8FE54A71E26850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: Fdo7K4Y1LLbzlecl62lw2yDPcdJkguWwZAJ/2UPxo4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:36:54:e1:05:59:9a:8f:e5:4a:71:e2:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=5dbcf2552d7acd9860bfaf2f38978dd1cd2e59c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:81:d5:ff:fd:01:fc:99:1b:12:13:c5:e4:
22:bd:3b:c3:8e:ab:3f:19:c8:b9:2a:3f:27:54:68:
b6:7b:2e:73:2f:dc:1c:77:df:b6:b5:63:35:aa:63:
99:aa:5c:1c:cb:6a:c7:bf:ee:49:9d:67:3d:8c:2a:
5b:c9:0f:09:e8:61:39:fa:2c:f6:57:2f:c1:af:74:
43:a1:03:56:9d:32:83:6b:48:34:45:10:9c:06:13:
11:ab:19:9f:53:ba:d3:24:ab:b3:8f:d1:e8:e7:ab:
59:36:06:c1:d7:ec:9f:12:98:0f:bb:fe:5d:ad:08:
78:fa:e4:a8:0a:95:fb:a2:be:be:4d:c8:ba:76:2f:
d3:17:08:b3:f5:d2:31:55:13:f9:d5:36:e6:44:9a:
85:e4:3c:2e:ac:19:f0:2c:80:0f:c7:3f:8b:07:2e:
d5:25:f7:14:07:06:3f:26:01:f1:30:21:be:3c:52:
78:70:80:9a:d4:7b:37:a2:df:13:83:a3:09:e1:f4:
3f:44:70:c9:d9:bf:3c:d8:a4:19:46:cc:91:0c:1a:
31:97:83:c0:4a:26:1d:3f:f9:ce:dd:2f:e2:bc:a0:
fe:85:1e:af:25:29:f9:aa:03:d8:eb:ad:ab:74:8c:
96:0a:c4:ea:45:87:01:49:f8:62:2f:02:5a:99:c2:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:F2:55:2D:7A:CD:98:60:BF:AF:2F:38:97:8D:D1:CD:2E:59:C8
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:99:61:06:55:16:3b:e1:53:31:c8:31:15:c8:61:3f:3b:
ca:d1:49:ae:a8:09:a5:8b:74:fb:70:1e:f4:f8:e3:38:a0:cf:
4d:53:8f:6e:5e:95:b0:d3:73:86:53:23:f5:73:17:cb:a6:6e:
4d:c9:23:34:6e:d5:3e:a9:2f:a4:78:30:2f:33:12:b8:00:eb:
67:f5:f9:d3:50:ea:40:7a:d9:31:22:2b:3b:ae:f8:d0:4d:78:
82:73:5e:f4:57:32:96:79:30:96:ac:a8:8a:2c:c5:83:b5:d1:
79:34:21:06:08:17:62:4b:09:cf:ae:2a:22:01:70:8e:ef:be:
45:d8:d4:00:6b:28:9f:b5:a4:46:5c:92:ca:33:25:e1:c5:49:
59:d2:20:5a:c9:96:60:96:55:01:1a:4a:ce:1b:96:b1:c4:85:
29:4e:d1:75:1e:a3:9a:8f:8e:61:14:52:8b:1e:4b:55:e5:ed:
43:97:59:2c:4d:7e:aa:75:9e:6f:3f:6d:96:c2:91:3b:f0:ef:
e6:85:35:a8:69:e5:89:f6:89:6f:3f:56:0f:eb:df:5f:76:8f:
e7:79:dd:45:49:97:fe:83:84:e2:42:1d:e7:f5:3f:f3:a7:f4:
05:58:66:b7:8c:a7:4a:1a:6b:38:ff:b8:ea:45:96:24:fa:d4:
8d:5f:3d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9U2VOEFWZqP5Upx4mhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWYzYzMzZmIwMTEzYjQ1ZDQ1OTI5YTRjMDZmMjhjNzE0
ZGNhNGIwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
Eyg1ZGJjZjI1NTJkN2FjZDk4NjBiZmFmMmYzODk3OGRkMWNkMmU1OWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4eB1f/9AfyZGxITxeQivTvDjqs/
Gci5Kj8nVGi2ey5zL9wcd9+2tWM1qmOZqlwcy2rHv+5JnWc9jCpbyQ8J6GE5+iz2
Vy/Br3RDoQNWnTKDa0g0RRCcBhMRqxmfU7rTJKuzj9Ho56tZNgbB1+yfEpgPu/5d
rQh4+uSoCpX7or6+Tci6di/TFwiz9dIxVRP51TbmRJqF5DwurBnwLIAPxz+LBy7V
JfcUBwY/JgHxMCG+PFJ4cICa1Hs3ot8Tg6MJ4fQ/RHDJ2b882KQZRsyRDBoxl4PA
SiYdP/nO3S/ivKD+hR6vJSn5qgPY662rdIyWCsTqRYcBSfhiLwJamcLpIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF288lUtes2YYL+vLziXjdHNLlnIMB8GA1UdIwQY
MBaAFBhfPDP7ARO0XUWSmkwG8oxxTcpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWIt
NzYzYWJhYjk3MTAxLzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWItNzYzYWJhYjk3MTAx
LzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPaZYQZV
FjvhUzHIMRXIYT87ytFJrqgJpYt0+3Ae9PjjOKDPTVOPbl6VsNNzhlMj9XMXy6Zu
TckjNG7VPqkvpHgwLzMSuADrZ/X501DqQHrZMSIrO6740E14gnNe9Fcylnkwlqyo
iizFg7XReTQhBggXYksJz64qIgFwju++RdjUAGson7WkRlySyjMl4cVJWdIgWsmW
YJZVARpKzhuWscSFKU7RdR6jmo+OYRRSix5LVeXtQ5dZLE1+qnWebz9tlsKRO/Dv
5oU1qGnlifaJbz9WD+vfX3aP53ndRUmX/oOE4kId5/U/86f0BVhmt4ynShprOP+4
6kWWJPrUjV89WQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:11 2025 by rpki-client