Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: JOWSClBLJKtLV8Paw4RPAjqA4UTlnPY5b7yui5lTX/8=
Subject key identifier: B5:2C:BE:97:74:AB:45:6F:13:1F:92:2B:57:C9:CA:E8:02:D5:3E:BB
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 0194BBCE329E8F71EE0C765ADCAF261F63B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: 5me2j0Cyvarm8QY8x5YhzhlSSg0.roa (hash: sKiJZe8RaefjgKohQbn9AZs+RGQ3H8yqOKmDOKion8I=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: 4zCICKhd7bpcUnptxodQoJLQuI3tfIw92eJB/4gg+E0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:9e:8f:71:ee:0c:76:5a:dc:af:26:1f:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=b52cbe9774ab456f131f922b57c9cae802d53ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:5d:fa:0c:4e:f9:3c:ad:e7:fc:93:3c:36:
84:e6:cf:11:27:d1:ac:3c:97:21:0f:2a:bb:c0:20:
2c:8d:1c:c5:e8:d5:54:b3:93:fb:b2:ef:f3:e6:3a:
82:4e:9d:b7:d5:46:d4:67:e1:24:f9:6a:e0:96:d3:
0c:40:56:39:15:12:b8:16:46:d8:82:db:54:59:0d:
94:60:77:7b:7b:eb:d5:b3:97:71:67:0d:e5:a4:a7:
f3:8f:ce:63:fd:71:45:d2:e9:e4:18:db:5e:e4:9c:
21:9a:4b:a5:08:ae:d3:95:3a:c3:5f:bb:2e:e6:0c:
fc:d7:a9:cf:ee:a5:9b:e7:62:13:89:c7:36:3b:a6:
be:4f:17:7b:d6:c3:b4:53:97:5e:82:5d:66:8a:1c:
a9:e4:52:37:c3:bf:f4:bd:6e:af:7a:1e:8b:1a:58:
5a:51:73:7b:17:cc:de:39:39:1c:24:69:27:01:9b:
1e:ef:44:70:db:cc:60:1f:17:df:46:b9:cd:df:65:
92:98:69:1b:09:e0:24:72:b8:59:f5:d0:93:6b:3d:
77:74:2b:ad:73:d7:d6:e1:96:65:e8:c4:ae:5c:cf:
a6:71:dd:1a:c1:66:2e:86:dc:f5:58:77:74:bc:8b:
ef:d4:8c:a8:d9:5c:c3:fe:79:ef:f2:b0:23:3c:d0:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:BE:97:74:AB:45:6F:13:1F:92:2B:57:C9:CA:E8:02:D5:3E:BB
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:3e:a1:ee:01:fb:75:bd:c1:8a:b8:53:ff:ef:df:8f:d2:
c5:f5:c5:a7:f4:f8:f9:d2:a6:a4:81:19:6d:88:58:45:7e:f0:
14:54:d6:c9:61:bc:20:58:67:01:3e:06:68:fa:de:ef:ce:ab:
dd:3e:39:ca:0f:68:f3:2a:10:d6:69:88:71:87:db:80:20:17:
e6:04:10:00:36:89:9e:45:9d:30:6a:35:bc:fa:27:c3:56:ee:
48:19:e8:27:e3:12:20:a5:b0:51:5f:be:58:0b:10:a3:03:6b:
23:73:4f:29:e3:06:5f:74:16:f5:17:df:07:da:48:60:22:64:
10:dc:17:19:b3:f2:91:a7:55:13:c0:c2:85:97:16:1a:7e:27:
dc:ed:bc:31:aa:4d:d0:85:91:3e:99:01:d0:14:52:b8:cf:2b:
6d:eb:e6:50:55:ef:f7:8f:ab:b5:f0:c3:a8:3b:89:0d:01:27:
30:c0:b1:10:0c:8a:2b:b5:49:b8:33:f5:02:a7:39:c4:28:ed:
15:b1:1b:79:f9:01:ff:fa:3a:c8:35:bc:e9:f7:c6:65:5b:07:
4d:ca:af:69:44:19:6e:6c:08:20:38:bf:2b:e5:28:1f:05:5f:
fc:f8:88:72:95:5d:0a:4f:ae:0a:5a:e8:c3:1c:f7:f4:58:b0:
f7:17:b5:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjKej3HuDHZa3K8mH2OxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh
Y2YyNTEwHhcNMjUwMTMxMTAwMDQwWhcNMjUwMjAxMTAwMDQwWjAzMTEwLwYDVQQD
EyhiNTJjYmU5Nzc0YWI0NTZmMTMxZjkyMmI1N2M5Y2FlODAyZDUzZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE1d+gxO+Tyt5/yTPDaE5s8RJ9Gs
PJchDyq7wCAsjRzF6NVUs5P7su/z5jqCTp231UbUZ+Ek+WrgltMMQFY5FRK4FkbY
gttUWQ2UYHd7e+vVs5dxZw3lpKfzj85j/XFF0unkGNte5JwhmkulCK7TlTrDX7su
5gz816nP7qWb52ITicc2O6a+Txd71sO0U5degl1mihyp5FI3w7/0vW6veh6LGlha
UXN7F8zeOTkcJGknAZse70Rw28xgHxffRrnN32WSmGkbCeAkcrhZ9dCTaz13dCut
c9fW4ZZl6MSuXM+mcd0awWYuhtz1WHd0vIvv1Iyo2VzD/nnv8rAjPNCNzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUsvpd0q0VvEx+SK1fJyugC1T67MB8GA1UdIwQY
MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt
MDA2NDIwZTQzNDRkLzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk
LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1Y+oe4B
+3W9wYq4U//v34/SxfXFp/T4+dKmpIEZbYhYRX7wFFTWyWG8IFhnAT4GaPre786r
3T45yg9o8yoQ1mmIcYfbgCAX5gQQADaJnkWdMGo1vPonw1buSBnoJ+MSIKWwUV++
WAsQowNrI3NPKeMGX3QW9RffB9pIYCJkENwXGbPykadVE8DChZcWGn4n3O28MapN
0IWRPpkB0BRSuM8rbevmUFXv94+rtfDDqDuJDQEnMMCxEAyKK7VJuDP1Aqc5xCjt
FbEbefkB//o6yDW86ffGZVsHTcqvaUQZbmwIIDi/K+UoHwVf/PiIcpVdCk+uClro
wxz39Fiw9xe1eA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:11 2025 by rpki-client