Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft
File: Gvq72Ih6kieJRewu74JDoSlq33g.mft (raw, json)
Hash identifier: Drfc3j/acwJonkfTqdkCitC36Lm7FFgRXtjipGjbVck=
Subject key identifier: 94:3C:15:DF:22:1B:35:3A:EB:21:D7:A8:02:38:88:39:94:D7:13:24
Authority key identifier: 1A:FA:BB:D8:88:7A:92:27:89:45:EC:2E:EF:82:43:A1:29:6A:DF:78
Certificate issuer: /CN=1afabbd8887a92278945ec2eef8243a1296adf78
Certificate serial: 0194BBCE3CAF4FE1D14B0541A7FA11B8BFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gvq72Ih6kieJRewu74JDoSlq33g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: Gvq72Ih6kieJRewu74JDoSlq33g.crl (hash: FrIxsCtYNp3Cr+818P+i8ki1j8R5HU9Rv4+wyiKLKSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:af:4f:e1:d1:4b:05:41:a7:fa:11:b8:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afabbd8887a92278945ec2eef8243a1296adf78
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=943c15df221b353aeb21d7a80238883994d71324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:8c:b4:34:f8:b5:c2:72:f7:db:26:38:91:
0c:ea:97:21:4a:7d:11:ae:4c:b3:20:89:c6:42:58:
61:ed:8d:7c:17:bd:32:2d:96:97:d7:a0:61:66:4f:
f2:55:cf:e5:c6:61:0b:f6:7c:5c:07:41:63:58:e1:
c7:44:0c:21:d9:80:21:65:c2:0f:a4:bb:70:9f:6c:
f4:45:88:57:e4:29:e2:5d:c4:b8:e1:c1:17:03:8b:
78:50:ff:bd:21:8c:86:1b:a3:b5:05:4c:22:e5:bf:
24:4f:66:00:79:7a:0c:47:4d:4d:32:48:96:c8:3a:
c6:68:cd:80:a7:3d:2d:a2:50:a0:d9:b2:71:e6:2b:
21:70:13:85:11:26:bf:2b:7d:84:42:6b:53:2a:6c:
3d:0f:96:f8:07:ae:3a:06:52:51:63:3d:cd:75:2e:
08:bf:f0:d5:f0:ec:6a:fb:b2:62:31:48:51:54:8c:
05:80:95:86:84:b9:3c:b3:d4:74:7d:77:fd:bf:c5:
f4:1c:0f:58:7e:6b:d7:eb:a2:29:01:de:1f:5f:3a:
13:68:72:ed:80:af:85:fd:75:7b:f9:11:8f:fd:90:
ca:8d:88:23:7b:f8:9f:e1:12:d1:6b:51:5c:89:47:
c2:f0:81:fc:3a:bf:c0:c7:a3:79:fd:5f:56:b9:2e:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3C:15:DF:22:1B:35:3A:EB:21:D7:A8:02:38:88:39:94:D7:13:24
X509v3 Authority Key Identifier:
keyid:1A:FA:BB:D8:88:7A:92:27:89:45:EC:2E:EF:82:43:A1:29:6A:DF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvq72Ih6kieJRewu74JDoSlq33g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:13:dc:84:2b:d5:29:58:83:a0:a6:3c:b9:85:43:aa:17:66:
71:89:73:36:43:e4:bf:e7:35:6a:2d:24:d0:93:9f:26:3f:aa:
e4:dd:4c:af:90:ad:6c:f2:1b:43:ac:b2:af:00:f2:e7:6a:ca:
ee:e7:11:50:c7:f3:06:61:4f:f5:77:95:6b:61:74:d0:d9:1e:
9a:89:f3:0c:bc:1b:4e:6e:2f:68:19:a6:b6:d2:68:39:dc:2f:
a0:6a:4a:bd:52:b1:1c:9b:bc:a3:3b:1a:96:62:dd:f8:06:18:
41:24:7e:59:d9:99:ef:da:d1:55:b7:d7:6f:9a:a9:f8:df:48:
01:c7:7d:a3:88:23:51:08:2b:19:f2:20:fd:d4:d1:04:9a:8d:
74:62:67:fb:4a:6c:a7:9d:ea:fb:e0:b4:8e:13:de:d1:3c:22:
66:8a:92:8f:13:51:e4:e8:9e:69:82:e3:05:0e:20:8e:d9:77:
ab:03:10:97:8e:89:bb:b7:cd:9f:8e:3a:4f:ec:f0:e1:dc:31:
86:96:e0:b2:ec:87:3c:13:1a:03:be:29:50:80:80:ac:ea:5a:
fb:32:ca:c9:d0:a8:13:77:0a:4c:c1:18:37:5d:8a:71:98:2a:
95:e3:02:8b:df:66:87:e0:69:d5:c2:a9:a8:87:fb:1d:90:b9:
88:30:48:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjyvT+HRSwVBp/oRuL/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmFiYmQ4ODg3YTkyMjc4OTQ1ZWMyZWVmODI0M2ExMjk2
YWRmNzgwHhcNMjUwMTMxMTAwMDQyWhcNMjUwMjAxMTAwMDQyWjAzMTEwLwYDVQQD
Eyg5NDNjMTVkZjIyMWIzNTNhZWIyMWQ3YTgwMjM4ODgzOTk0ZDcxMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqCMtDT4tcJy99smOJEM6pchSn0R
rkyzIInGQlhh7Y18F70yLZaX16BhZk/yVc/lxmEL9nxcB0FjWOHHRAwh2YAhZcIP
pLtwn2z0RYhX5CniXcS44cEXA4t4UP+9IYyGG6O1BUwi5b8kT2YAeXoMR01NMkiW
yDrGaM2Apz0tolCg2bJx5ishcBOFESa/K32EQmtTKmw9D5b4B646BlJRYz3NdS4I
v/DV8Oxq+7JiMUhRVIwFgJWGhLk8s9R0fXf9v8X0HA9YfmvX66IpAd4fXzoTaHLt
gK+F/XV7+RGP/ZDKjYgje/if4RLRa1FciUfC8IH8Or/Ax6N5/V9WuS7lvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ8Fd8iGzU66yHXqAI4iDmU1xMkMB8GA1UdIwQY
MBaAFBr6u9iIepIniUXsLu+CQ6Epat94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZxNzJJaDZraWVKUmV3dTc0SkRvU2xxMzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZjdhNGMtMjU0OC00MGRkLTkwMGUt
NTE2MDY1YjZjZmE1LzEvR3ZxNzJJaDZraWVKUmV3dTc0SkRvU2xxMzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kZjdhNGMtMjU0OC00MGRkLTkwMGUtNTE2MDY1YjZjZmE1
LzEvR3ZxNzJJaDZraWVKUmV3dTc0SkRvU2xxMzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThPchCvV
KViDoKY8uYVDqhdmcYlzNkPkv+c1ai0k0JOfJj+q5N1Mr5CtbPIbQ6yyrwDy52rK
7ucRUMfzBmFP9XeVa2F00NkemonzDLwbTm4vaBmmttJoOdwvoGpKvVKxHJu8ozsa
lmLd+AYYQSR+WdmZ79rRVbfXb5qp+N9IAcd9o4gjUQgrGfIg/dTRBJqNdGJn+0ps
p53q++C0jhPe0TwiZoqSjxNR5OieaYLjBQ4gjtl3qwMQl46Ju7fNn446T+zw4dwx
hpbgsuyHPBMaA74pUICArOpa+zLKydCoE3cKTMEYN12KcZgqleMCi99mh+Bp1cKp
qIf7HZC5iDBI6w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:20:34 2025 by rpki-client