Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: Y0Dd7yHWqQlnvtN+OLiN/hEhKovTQ+f2H6IHlYk5zi4=
Subject key identifier: F1:4A:05:A1:F2:53:B2:31:D7:66:E0:DB:86:DA:A2:51:B1:68:3B:D3
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 0194BCA98CA208DA1D06AF8A335FD92285F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 1132
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: ieTXs+ViOY7o5lf/Zlz321Ij6G1V3WnmAC8F2wa0zww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:a2:08:da:1d:06:af:8a:33:5f:d9:22:85:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=f14a05a1f253b231d766e0db86daa251b1683bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:b2:9c:36:21:fe:fe:3d:05:5d:5c:37:37:
cf:2c:71:8e:79:4f:ff:84:26:93:41:c2:73:57:da:
23:cc:e9:f7:2f:6d:9c:45:ca:1f:eb:72:9c:e7:42:
b0:ea:f8:44:6d:ad:14:ab:a1:53:47:26:27:52:a1:
34:3e:66:80:a0:68:ad:44:61:5a:3a:e2:f3:b8:e7:
c6:3d:80:5c:34:11:d2:9d:2e:57:da:2c:3a:37:d5:
ee:0e:e2:be:06:c0:d0:7d:c0:dc:61:13:be:d6:19:
d8:7f:89:7e:7a:3d:bd:fa:6b:f9:1a:39:06:30:ae:
8b:3f:b0:29:9a:16:60:25:3a:62:95:db:5f:09:3c:
b2:1e:b1:a9:67:5d:63:10:cc:57:51:ea:83:f5:f8:
80:1e:da:10:71:1d:5a:06:1b:9a:fd:c9:8e:be:53:
e1:d4:54:55:c0:07:cf:47:ad:1d:e9:9b:46:70:da:
0a:d7:e6:7a:ae:f0:ea:35:03:e7:a5:15:40:a9:de:
ba:6e:3b:22:ed:a4:66:90:df:10:c8:0b:19:7e:98:
56:6b:2d:38:57:72:de:30:27:c0:0f:56:31:57:34:
9e:97:fb:f6:f5:73:c2:80:2b:14:e3:5a:ab:59:c2:
b1:18:82:bc:9c:5b:8d:99:75:54:fe:be:9c:95:17:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:05:A1:F2:53:B2:31:D7:66:E0:DB:86:DA:A2:51:B1:68:3B:D3
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1f:ac:71:7c:fd:bb:91:3d:cd:a2:44:03:80:13:e5:fa:0e:
a2:9f:e9:ec:ab:fc:e2:a7:c0:58:de:7a:8f:5f:55:15:53:10:
d6:b2:bd:b4:3f:e8:25:14:f3:65:6d:03:26:9f:fd:ff:5b:bc:
6c:36:96:a3:70:7a:a4:b8:b3:32:93:f9:a8:3a:d3:50:4b:0c:
81:4a:7f:13:1a:59:e2:1e:a3:b6:82:fb:97:a6:93:cd:56:ea:
91:81:45:a5:de:44:81:c7:30:0e:85:d0:2b:37:34:2d:1e:33:
0f:9f:e2:d0:66:09:b5:16:53:84:77:02:91:50:f1:41:2b:66:
29:dd:a8:c5:f4:a7:4b:35:c2:c7:87:5a:f0:e8:b7:eb:cd:5a:
32:75:b7:15:cc:2b:7b:b0:ca:37:ec:a9:58:9a:af:e5:65:1f:
73:6d:2e:4a:c5:f3:30:59:f6:5e:09:9d:51:f5:3c:0c:5d:9e:
8e:75:3f:c6:0b:91:02:01:a5:d4:9c:6f:3e:55:93:cc:f1:29:
4a:d3:b0:69:a0:70:e8:7f:be:6c:06:62:e8:e9:6a:87:98:22:
5f:98:05:1c:bf:a5:dd:8a:f2:db:26:8d:d9:3c:02:06:c6:f6:
85:dc:81:0b:12:ab:24:17:88:ad:c4:ed:06:5a:32:3f:3c:01:
44:a0:de:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYyiCNodBq+KM1/ZIoX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmIzNGIyMWEwZWY4YzQwMTkxYzBlMDdjM2I0NTI0ZTMy
M2IyY2YwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
EyhmMTRhMDVhMWYyNTNiMjMxZDc2NmUwZGI4NmRhYTI1MWIxNjgzYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynWynDYh/v49BV1cNzfPLHGOeU//
hCaTQcJzV9ojzOn3L22cRcof63Kc50Kw6vhEba0Uq6FTRyYnUqE0PmaAoGitRGFa
OuLzuOfGPYBcNBHSnS5X2iw6N9XuDuK+BsDQfcDcYRO+1hnYf4l+ej29+mv5GjkG
MK6LP7ApmhZgJTpildtfCTyyHrGpZ11jEMxXUeqD9fiAHtoQcR1aBhua/cmOvlPh
1FRVwAfPR60d6ZtGcNoK1+Z6rvDqNQPnpRVAqd66bjsi7aRmkN8QyAsZfphWay04
V3LeMCfAD1YxVzSel/v29XPCgCsU41qrWcKxGIK8nFuNmXVU/r6clRc5rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFKBaHyU7Ix12bg24baolGxaDvTMB8GA1UdIwQY
MBaAFIP7NLIaDvjEAZHA4Hw7RSTjI7LPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTct
ZjIzYjA3N2VkYjk2LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTctZjIzYjA3N2VkYjk2
LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATx+scXz9
u5E9zaJEA4AT5foOop/p7Kv84qfAWN56j19VFVMQ1rK9tD/oJRTzZW0DJp/9/1u8
bDaWo3B6pLizMpP5qDrTUEsMgUp/ExpZ4h6jtoL7l6aTzVbqkYFFpd5EgccwDoXQ
Kzc0LR4zD5/i0GYJtRZThHcCkVDxQStmKd2oxfSnSzXCx4da8Oi3681aMnW3Fcwr
e7DKN+ypWJqv5WUfc20uSsXzMFn2XgmdUfU8DF2ejnU/xguRAgGl1JxvPlWTzPEp
StOwaaBw6H++bAZi6Olqh5giX5gFHL+l3Yry2yaN2TwCBsb2hdyBCxKrJBeIrcTt
BloyPzwBRKDetA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:40 2025 by rpki-client