Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: SRJs08VyUm0Phq7RmjwHjR+ES/Le84Vg//HqjVTvQFQ=
Subject key identifier: F7:21:CE:DE:67:65:2F:5C:C6:45:3B:BB:7E:98:9B:52:6E:6B:AD:C4
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 0194BBCE8F8A9C01DD852C9015A574B4C505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: Tuq+Rf4e3YK/CLkaA0gBVrGlbKc7Wa8FRXScvJmWsLE=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8f:8a:9c:01:dd:85:2c:90:15:a5:74:b4:c5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=f721cede67652f5cc6453bbb7e989b526e6badc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:93:39:23:19:fe:bc:0a:18:da:99:ac:17:
bb:95:84:8a:be:70:97:e3:bf:64:88:4c:89:f7:8c:
f2:8f:eb:3d:fd:1b:96:9c:fe:d2:55:3d:43:1c:e6:
79:e1:00:bd:ee:0e:8b:fb:81:db:f1:7b:a1:db:ea:
8f:c4:8f:88:4a:fd:f1:3e:1a:91:21:9f:c8:2f:21:
b2:cc:39:a3:4d:47:32:79:de:40:80:94:2c:be:30:
15:bf:23:05:bd:2b:e7:93:68:33:47:8e:55:c9:25:
73:6b:30:9a:d0:32:cf:f5:9d:be:ec:20:15:85:45:
93:5c:3b:94:d8:05:96:b3:eb:4e:0e:6c:a4:b5:ef:
19:8b:da:ab:e1:89:54:25:fe:b8:88:1e:42:5c:d1:
e7:f5:e6:a2:87:12:b7:52:9c:8c:c2:d4:78:12:a1:
1c:7f:a4:ff:84:ec:23:29:52:98:e3:0e:a2:ae:00:
9d:c5:4b:c3:2f:94:9e:d0:b6:67:19:19:1a:86:fd:
13:b4:8f:77:99:de:6a:be:6a:ba:d7:58:56:7e:4b:
72:8f:40:86:63:10:42:33:18:23:8a:f7:b6:8a:c1:
38:55:b1:41:e6:36:fa:55:a5:f7:84:a3:ae:b8:c7:
d0:3c:f4:7e:27:a0:a9:3f:6b:de:2e:5c:02:44:fc:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:CE:DE:67:65:2F:5C:C6:45:3B:BB:7E:98:9B:52:6E:6B:AD:C4
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:87:b0:16:f0:c5:83:e8:aa:b5:17:d0:bc:e0:53:76:4b:
05:f4:eb:f9:fb:78:62:43:aa:74:65:08:18:30:ec:24:8b:04:
0e:65:90:79:da:72:63:27:93:66:09:1c:f6:58:c4:21:6e:6d:
a2:e5:5b:b1:0c:a4:a3:64:91:27:a1:1b:2a:92:f4:73:ac:4f:
d2:9a:fb:45:62:3a:a2:8b:2f:79:e7:aa:e0:fd:8b:a4:bf:69:
6b:f5:7d:34:b2:10:91:4a:26:3a:06:13:5c:ac:4d:a5:5e:bd:
99:da:46:9b:a9:d2:1b:8a:7d:65:cd:66:4f:55:97:ca:39:3e:
8e:0f:de:58:8e:ad:e0:5d:b3:71:38:c0:42:03:b2:c1:90:7f:
fc:d2:a0:94:02:00:61:29:f2:f5:68:31:f4:ca:e0:a0:d9:1e:
f6:88:0f:21:e1:80:44:ae:64:22:2a:8e:e9:eb:22:b3:7b:5b:
f1:84:36:93:42:c2:ce:98:b4:7d:ae:51:7f:2f:51:21:4c:0d:
b1:ef:df:65:67:09:1d:59:c6:8a:0c:80:19:86:ff:96:b2:80:
ad:9b:de:2d:eb:02:5b:7d:04:e9:c0:6a:0a:b2:26:4d:80:ab:
61:a8:e3:e5:cf:c1:74:87:0a:bf:85:92:4f:53:95:c8:52:17:
07:78:b8:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zo+KnAHdhSyQFaV0tMUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4
NjYxOWIwHhcNMjUwMTMxMTAwMTAzWhcNMjUwMjAxMTAwMTAzWjAzMTEwLwYDVQQD
EyhmNzIxY2VkZTY3NjUyZjVjYzY0NTNiYmI3ZTk4OWI1MjZlNmJhZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb+TOSMZ/rwKGNqZrBe7lYSKvnCX
479kiEyJ94zyj+s9/RuWnP7SVT1DHOZ54QC97g6L+4Hb8Xuh2+qPxI+ISv3xPhqR
IZ/ILyGyzDmjTUcyed5AgJQsvjAVvyMFvSvnk2gzR45VySVzazCa0DLP9Z2+7CAV
hUWTXDuU2AWWs+tODmykte8Zi9qr4YlUJf64iB5CXNHn9eaihxK3UpyMwtR4EqEc
f6T/hOwjKVKY4w6irgCdxUvDL5Se0LZnGRkahv0TtI93md5qvmq611hWfktyj0CG
YxBCMxgjive2isE4VbFB5jb6VaX3hKOuuMfQPPR+J6CpP2veLlwCRPyIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPchzt5nZS9cxkU7u36Ym1Jua63EMB8GA1UdIwQY
MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt
YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy
LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN+HsBbw
xYPoqrUX0LzgU3ZLBfTr+ft4YkOqdGUIGDDsJIsEDmWQedpyYyeTZgkc9ljEIW5t
ouVbsQyko2SRJ6EbKpL0c6xP0pr7RWI6oosveeeq4P2LpL9pa/V9NLIQkUomOgYT
XKxNpV69mdpGm6nSG4p9Zc1mT1WXyjk+jg/eWI6t4F2zcTjAQgOywZB//NKglAIA
YSny9Wgx9MrgoNke9ogPIeGARK5kIiqO6esis3tb8YQ2k0LCzpi0fa5Rfy9RIUwN
se/fZWcJHVnGigyAGYb/lrKArZveLesCW30E6cBqCrImTYCrYajj5c/BdIcKv4WS
T1OVyFIXB3i4JA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:03 2025 by rpki-client