Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier: W1KhbYNyeJgaceVqzJKvAERfvDmIONqjlA+n7us14b0=
Subject key identifier: 42:B2:52:BB:2C:E0:4B:50:BB:27:1F:F5:F0:1E:D3:59:C3:84:05:90
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial: 0194BCAA2C1CE1595D4E89079512509A4335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: re2Jnm7hFIu0pYAIS3Ea3ZpjObnzIlbTfdy9n8pgedA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:1c:e1:59:5d:4e:89:07:95:12:50:9a:43:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=42b252bb2ce04b50bb271ff5f01ed359c3840590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:66:52:23:4a:1b:49:eb:b7:ce:af:18:ce:
34:f6:d3:47:3f:5b:cd:de:cf:13:d8:70:56:de:87:
33:86:28:b2:31:73:a7:4c:56:ce:62:55:5d:58:66:
93:8e:d8:32:e5:df:6b:a2:58:1e:00:ea:e2:e4:86:
1e:84:de:14:6c:26:54:65:c9:3f:39:a5:27:6a:18:
30:44:5f:3a:f9:4a:1d:6e:46:a4:56:d1:6c:6f:ca:
2a:e6:41:78:c8:6a:fa:e1:98:0a:44:0a:67:83:a3:
c3:1b:3a:2f:73:7c:b6:33:9a:34:e6:d0:38:15:55:
26:ec:5f:03:4f:9a:87:73:c4:99:2e:60:2c:03:13:
fb:85:6d:e6:69:e1:5d:c4:f2:49:3e:7f:63:3f:ba:
61:63:e7:c3:9d:ea:1c:27:66:a3:1a:de:6b:67:39:
77:9a:1f:9e:6d:b5:62:78:3e:36:59:17:f8:da:ca:
1f:0e:7e:75:11:9d:d0:2b:84:81:9f:a4:ee:31:4f:
66:37:41:ad:a5:18:ba:89:61:88:ff:ce:64:ab:c9:
64:10:c8:47:30:35:8d:6b:05:11:6e:14:9f:b7:6c:
cd:e5:87:a6:fc:62:14:c7:18:20:93:45:59:2e:88:
57:87:d8:01:3a:46:26:3a:c1:35:c4:a1:6d:76:b3:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:52:BB:2C:E0:4B:50:BB:27:1F:F5:F0:1E:D3:59:C3:84:05:90
X509v3 Authority Key Identifier:
keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cb:e7:10:cf:b7:c4:a0:f8:c4:5d:d4:51:bb:6f:89:a2:36:
da:f6:f5:39:3f:b5:f2:6a:19:b1:5b:e7:5b:b3:32:8e:d6:bc:
10:62:20:fa:12:c2:d5:c8:5c:79:0d:58:15:52:e1:30:8d:76:
c3:b1:7f:e5:9e:73:a1:11:78:52:5c:69:97:cb:4c:17:4b:33:
e3:f5:b8:29:88:06:ee:c5:bf:26:f8:3e:b4:86:9c:55:b8:e0:
0f:23:38:a3:81:e9:04:e3:81:df:ae:fe:98:ad:b9:48:7d:04:
1c:a6:14:a9:1e:50:17:9a:36:d0:02:f0:ce:d6:c2:5a:de:95:
10:a8:43:77:fd:36:e9:f8:30:d3:19:c5:82:f3:53:37:e2:89:
6b:28:b5:1e:ed:c8:a8:e5:1c:e0:81:b4:fa:6d:ec:56:2b:1a:
ee:48:66:ec:4b:94:b9:e4:1b:cf:36:1b:49:d1:2c:91:31:8c:
d8:34:31:1f:9c:75:8a:f1:7d:46:0d:07:2a:51:91:44:1d:94:
7f:a7:db:8d:c5:35:f2:f1:38:c0:0c:fc:54:27:3c:06:2c:55:
28:c5:74:5e:8d:a2:2c:6e:08:28:02:42:40:39:8d:dd:b4:7d:
ce:b7:dd:bf:c1:42:77:33:28:c0:39:32:4a:04:a6:1f:db:23:
7e:40:f1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiwc4VldTokHlRJQmkM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2FhODNmYzlhNDEwYmRiM2UwZmQyZDg0ODcyMDEzNDc3
MWJlY2YwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
Eyg0MmIyNTJiYjJjZTA0YjUwYmIyNzFmZjVmMDFlZDM1OWMzODQwNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6lmUiNKG0nrt86vGM409tNHP1vN
3s8T2HBW3oczhiiyMXOnTFbOYlVdWGaTjtgy5d9rolgeAOri5IYehN4UbCZUZck/
OaUnahgwRF86+UodbkakVtFsb8oq5kF4yGr64ZgKRApng6PDGzovc3y2M5o05tA4
FVUm7F8DT5qHc8SZLmAsAxP7hW3maeFdxPJJPn9jP7phY+fDneocJ2ajGt5rZzl3
mh+ebbVieD42WRf42sofDn51EZ3QK4SBn6TuMU9mN0GtpRi6iWGI/85kq8lkEMhH
MDWNawURbhSft2zN5Yem/GIUxxggk0VZLohXh9gBOkYmOsE1xKFtdrNT4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKyUrss4EtQuycf9fAe01nDhAWQMB8GA1UdIwQY
MBaAFBvKqD/JpBC9s+D9LYSHIBNHcb7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhxb1A4bWtFTDJ6NFAwdGhJY2dFMGR4dnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNTZmYmMtMThjZi00NzY1LThhNGMt
Y2Q3MDEzOGU2MzgzLzEvRzhxb1A4bWtFTDJ6NFAwdGhJY2dFMGR4dnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNTZmYmMtMThjZi00NzY1LThhNGMtY2Q3MDEzOGU2Mzgz
LzEvRzhxb1A4bWtFTDJ6NFAwdGhJY2dFMGR4dnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMvnEM+3
xKD4xF3UUbtviaI22vb1OT+18moZsVvnW7Myjta8EGIg+hLC1chceQ1YFVLhMI12
w7F/5Z5zoRF4Ulxpl8tMF0sz4/W4KYgG7sW/Jvg+tIacVbjgDyM4o4HpBOOB367+
mK25SH0EHKYUqR5QF5o20ALwztbCWt6VEKhDd/026fgw0xnFgvNTN+KJayi1Hu3I
qOUc4IG0+m3sVisa7khm7EuUueQbzzYbSdEskTGM2DQxH5x1ivF9Rg0HKlGRRB2U
f6fbjcU18vE4wAz8VCc8BixVKMV0Xo2iLG4IKAJCQDmN3bR9zrfdv8FCdzMowDky
SgSmH9sjfkDx1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:29 2025 by rpki-client