Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File: GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier: Irp79QNMcwyuvw/sTdkOWrDVXHd0XLuMcoLp+4IOqVo=
Subject key identifier: 95:47:58:A5:A2:6C:BE:DD:E0:02:EC:29:BD:E0:26:1A:61:C4:C3:BE
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 0194BBCDCBF3B1B200991FC391FE72870E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number: 0736
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: feYr+MOyRybURxcE6zXK4Jfv48LghTiyn+0tf17tck0=)
2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=)
3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=)
4: rPbyx3eagwVe_OLgsm2HXO39flc.roa (hash: +A/qYPHq/9G5UEl5XmiqFSBixSHmc8xUD+k7eyiMoCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cb:f3:b1:b2:00:99:1f:c3:91:fe:72:87:0e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=954758a5a26cbedde002ec29bde0261a61c4c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:a3:05:82:32:fd:ec:d1:e1:13:c6:9a:ff:
cd:91:39:53:1b:84:35:69:f2:e7:b3:c7:78:52:69:
ec:20:8d:9f:de:28:c5:86:40:04:17:6a:79:13:56:
6d:e3:75:52:9e:c5:64:18:c8:ad:1e:b9:b9:23:fb:
72:ec:43:77:13:02:9f:76:15:ae:eb:28:ee:92:16:
22:77:77:6b:bf:84:c8:c7:fd:c8:a1:c4:54:bd:87:
3f:48:bd:3a:7c:1c:e0:eb:8e:63:43:b7:20:39:3f:
f2:02:01:ba:e5:17:57:40:c1:34:20:ca:fe:39:b7:
cd:36:23:98:1a:2d:df:48:ab:aa:af:22:05:08:eb:
b4:bd:b8:e6:c7:58:6f:bf:49:99:c0:06:b0:7f:99:
97:7a:4d:cf:ea:58:99:ba:2a:ce:48:ac:b5:07:eb:
b3:2b:37:b0:28:e6:7d:29:3b:1c:88:30:ac:08:f1:
d7:13:fc:b2:64:91:72:2a:44:e7:b7:d0:07:55:36:
11:49:4c:9f:2f:5f:c9:e4:76:62:15:bc:49:f0:14:
07:62:5b:53:14:61:19:b5:bd:cc:dc:89:98:f7:2e:
33:86:55:30:c8:e8:e7:a6:d7:bb:e0:53:5e:bc:9b:
ee:85:91:49:e7:25:33:a1:c7:a2:78:1c:86:14:2e:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:47:58:A5:A2:6C:BE:DD:E0:02:EC:29:BD:E0:26:1A:61:C4:C3:BE
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:8e:aa:2b:99:27:8f:99:15:3e:4b:5a:86:4e:23:99:23:
5c:36:24:db:96:d6:7f:c6:e0:19:a6:23:4a:bd:98:2f:ae:13:
8b:9a:95:6c:71:25:b3:da:b3:ea:a8:54:ef:52:36:df:46:09:
53:7e:95:1e:18:16:a3:b3:45:4e:5f:76:eb:f1:ff:4f:43:33:
62:f3:f1:19:a0:86:0f:64:d6:28:ec:78:8e:3c:87:77:dd:1e:
df:20:29:46:84:40:21:2f:59:64:11:2f:7e:66:7d:dc:ed:58:
6a:9b:9a:59:de:da:df:35:2f:9b:41:20:ee:1f:bf:82:64:21:
a6:94:1b:45:53:25:4c:49:b0:ef:95:de:9f:f4:9b:ed:10:11:
21:75:c1:4e:2d:27:f2:28:1a:c5:39:7e:cf:51:0e:f6:62:e8:
e1:6e:fa:36:a9:2c:dc:6e:8d:86:8e:46:9d:38:68:25:7d:d4:
25:05:54:23:3d:da:cb:12:1f:b9:70:ed:7f:55:e6:b3:11:13:
9a:f4:6d:a9:b6:91:f7:5c:cf:59:d8:c0:31:f2:cb:04:ac:65:
5e:94:ac:8c:2f:19:a0:9a:d9:78:b6:fc:93:b7:7e:b8:1d:87:
e5:3a:99:b8:dd:85:49:5b:a9:6c:55:76:82:ef:dd:84:e0:d3:
dd:9d:96:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcvzsbIAmR/Dkf5yhw5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2
ODQ3NjkwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
Eyg5NTQ3NThhNWEyNmNiZWRkZTAwMmVjMjliZGUwMjYxYTYxYzRjM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmESjBYIy/ezR4RPGmv/NkTlTG4Q1
afLns8d4UmnsII2f3ijFhkAEF2p5E1Zt43VSnsVkGMitHrm5I/ty7EN3EwKfdhWu
6yjukhYid3drv4TIx/3IocRUvYc/SL06fBzg645jQ7cgOT/yAgG65RdXQME0IMr+
ObfNNiOYGi3fSKuqryIFCOu0vbjmx1hvv0mZwAawf5mXek3P6liZuirOSKy1B+uz
KzewKOZ9KTsciDCsCPHXE/yyZJFyKkTnt9AHVTYRSUyfL1/J5HZiFbxJ8BQHYltT
FGEZtb3M3ImY9y4zhlUwyOjnpte74FNevJvuhZFJ5yUzoceieByGFC4Z0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVHWKWibL7d4ALsKb3gJhphxMO+MB8GA1UdIwQY
MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt
OWY5NTM2YmIyYzM3LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3
LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfGOqiuZ
J4+ZFT5LWoZOI5kjXDYk25bWf8bgGaYjSr2YL64Ti5qVbHEls9qz6qhU71I230YJ
U36VHhgWo7NFTl926/H/T0MzYvPxGaCGD2TWKOx4jjyHd90e3yApRoRAIS9ZZBEv
fmZ93O1YapuaWd7a3zUvm0Eg7h+/gmQhppQbRVMlTEmw75Xen/Sb7RARIXXBTi0n
8igaxTl+z1EO9mLo4W76Nqks3G6Nho5GnThoJX3UJQVUIz3ayxIfuXDtf1XmsxET
mvRtqbaR91zPWdjAMfLLBKxlXpSsjC8ZoJrZeLb8k7d+uB2H5TqZuN2FSVupbFV2
gu/dhODT3Z2WLQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:57 2025 by rpki-client