Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File: GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier: HDBaVQKq6SJo9Bcsxy0efRRlv30rrL6IWG9r7rasFFk=
Subject key identifier: AC:B6:D2:A1:02:74:69:45:EA:D4:25:61:B4:02:C2:D1:B0:B6:48:6C
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer: /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial: 0194BD4EBF388074CCB419F296AB06EFA34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: 6nFNhhnsfYhvU4He4nF2W3+rbKtf4c/F3mgKSvqBOzA=)
2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bf:38:80:74:cc:b4:19:f2:96:ab:06:ef:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=acb6d2a102746945ead42561b402c2d1b0b6486c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:81:5b:c8:c7:f9:8c:c3:ee:2f:31:5d:ea:
f0:4a:0d:1f:e2:2b:02:61:61:6a:6f:13:65:98:43:
f8:1e:d1:c4:32:15:76:ef:37:96:c9:5d:a2:a4:8f:
10:9b:23:10:e9:37:03:6b:39:04:c4:03:e1:00:ac:
90:7e:a0:01:d8:a7:c7:7d:b1:e7:30:29:97:3d:c7:
80:9d:4a:bc:86:05:ce:bc:f6:f9:84:57:8d:c4:67:
42:c0:13:10:11:f5:ad:e5:06:a4:4d:8c:84:89:ca:
5e:4b:52:84:7c:d9:d4:58:1c:f9:24:cd:ed:9c:4e:
bc:ed:b2:8a:77:95:a4:ee:d7:b4:72:39:03:33:6d:
1f:a4:cd:8a:5b:28:bb:e6:36:f5:a7:7f:83:fc:b5:
4c:8b:d3:8b:57:51:41:53:2f:34:41:13:ee:5f:00:
79:f6:ee:6e:36:73:e8:f4:25:bc:12:86:61:aa:ab:
d7:9d:3f:8e:68:be:47:f3:9a:fd:94:bd:a0:55:e6:
89:17:fa:15:04:14:8a:73:50:e3:a0:1b:1a:46:c2:
fe:0c:83:16:8e:c9:9e:91:fa:71:75:63:1f:ac:a1:
a1:a1:11:41:58:43:c9:82:68:b0:ca:1b:5f:e0:d9:
d0:40:d6:45:f8:38:d5:b3:3d:f9:4e:66:ac:41:b9:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B6:D2:A1:02:74:69:45:EA:D4:25:61:B4:02:C2:D1:B0:B6:48:6C
X509v3 Authority Key Identifier:
keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:23:fc:b6:ac:75:3c:a1:aa:05:b1:fd:41:ed:72:81:17:00:
4b:9a:d2:af:10:06:a0:95:f9:cb:6d:11:92:17:91:ea:3f:a7:
a9:4b:e1:40:29:66:02:d8:c0:c0:d7:5e:09:43:61:69:09:9c:
b7:3d:e8:f8:74:b9:96:d8:8b:94:c2:7a:8a:7b:ae:0e:bf:d2:
06:73:30:c1:7b:7a:97:6d:97:f5:91:a2:1c:b3:47:27:fb:04:
7f:14:3a:da:41:94:ae:12:a7:64:f5:de:f9:52:7e:d2:c7:68:
73:98:ee:0b:55:1e:8e:68:94:90:ad:8e:a0:3a:e5:11:60:fc:
97:b6:f0:ee:73:86:f7:4f:92:30:a9:7c:58:a5:25:60:d1:80:
74:84:42:8b:99:3c:5b:51:13:f8:5a:f8:fa:10:31:f6:a1:e2:
0c:02:2d:2a:b8:77:a0:2c:db:ad:58:49:c4:4a:ab:df:a2:ac:
0e:15:1e:9d:9f:53:54:30:ba:2d:87:20:6b:56:0f:2a:39:71:
7d:b2:48:a7:8e:e7:07:70:6a:34:70:3d:ba:d3:cf:ae:1c:ee:
41:83:91:c1:24:c6:cd:30:bb:8a:b9:28:b1:72:04:5f:da:06:
51:23:34:a8:e5:fb:dd:c4:4e:c5:91:a3:6d:b3:9d:5c:96:b8:
2b:e4:c7:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tr84gHTMtBnylqsG76NOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTJlMzdkYzhjZjQ1NjM0YjJjZGJjZjNmMTAwNTRhMWM2
MTE2OTcwHhcNMjUwMTMxMTcwMDQyWhcNMjUwMjAxMTcwMDQyWjAzMTEwLwYDVQQD
EyhhY2I2ZDJhMTAyNzQ2OTQ1ZWFkNDI1NjFiNDAyYzJkMWIwYjY0ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGWBW8jH+YzD7i8xXerwSg0f4isC
YWFqbxNlmEP4HtHEMhV27zeWyV2ipI8QmyMQ6TcDazkExAPhAKyQfqAB2KfHfbHn
MCmXPceAnUq8hgXOvPb5hFeNxGdCwBMQEfWt5QakTYyEicpeS1KEfNnUWBz5JM3t
nE687bKKd5Wk7te0cjkDM20fpM2KWyi75jb1p3+D/LVMi9OLV1FBUy80QRPuXwB5
9u5uNnPo9CW8EoZhqqvXnT+OaL5H85r9lL2gVeaJF/oVBBSKc1DjoBsaRsL+DIMW
jsmekfpxdWMfrKGhoRFBWEPJgmiwyhtf4NnQQNZF+DjVsz35TmasQbmpMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy20qECdGlF6tQlYbQCwtGwtkhsMB8GA1UdIwQY
MBaAFBqS433Iz0VjSyzbzz8QBUocYRaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEt
NDU3MjcyODM3YWE2LzEvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEtNDU3MjcyODM3YWE2
LzEvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCP8tqx1
PKGqBbH9Qe1ygRcAS5rSrxAGoJX5y20RkheR6j+nqUvhQClmAtjAwNdeCUNhaQmc
tz3o+HS5ltiLlMJ6inuuDr/SBnMwwXt6l22X9ZGiHLNHJ/sEfxQ62kGUrhKnZPXe
+VJ+0sdoc5juC1UejmiUkK2OoDrlEWD8l7bw7nOG90+SMKl8WKUlYNGAdIRCi5k8
W1ET+Fr4+hAx9qHiDAItKrh3oCzbrVhJxEqr36KsDhUenZ9TVDC6LYcga1YPKjlx
fbJIp47nB3BqNHA9utPPrhzuQYORwSTGzTC7irkosXIEX9oGUSM0qOX73cROxZGj
bbOdXJa4K+TH/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:48 2025 by rpki-client