Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File: G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier: NFa1LuIlpkc8csSJzt9/LZ5DJr4/oQ7CeqE3kIxRBwk=
Subject key identifier: DE:20:BA:9A:F2:B0:43:02:92:04:A3:26:33:EC:E7:94:6E:C5:7D:48
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial: 0194BD17AEFE7AD3578B671252D9CF80ADC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number: 094E
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: i2c8z41I9i29eXwD+bDTAIhkh9PPb0MHAbnxXm7wsV4=)
2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:fe:7a:d3:57:8b:67:12:52:d9:cf:80:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=de20ba9af2b043029204a32633ece7946ec57d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:40:3c:c2:c6:78:26:0a:4e:b7:cb:15:ae:
53:be:d2:cb:9e:fd:f5:77:ac:4e:f0:02:b0:97:9c:
64:dd:e8:b6:95:ee:a0:b2:58:29:ed:8d:5a:29:e6:
57:97:64:11:fb:00:20:bb:c8:a0:98:8c:4c:01:7e:
c8:a4:22:cb:31:23:7f:89:cd:fb:1b:b9:10:7f:8e:
7f:9a:f4:3f:76:a4:20:40:1d:c8:47:c2:ce:a9:d6:
5e:b0:34:fb:16:c3:cb:cf:a5:c4:5a:f0:9b:c5:62:
be:0d:57:1e:90:f2:ce:89:a1:f2:b5:26:a8:cc:4e:
cd:fc:87:6b:4d:48:d3:8f:22:81:95:ca:27:bf:cb:
3a:46:af:1c:65:34:eb:55:85:e6:2e:46:82:1c:ae:
b9:43:df:fd:db:2c:86:53:7e:2f:7d:9c:ec:aa:54:
32:19:41:44:23:ac:85:4b:d4:10:14:e5:ae:ff:91:
f1:bb:7a:fe:0c:72:3a:53:28:cf:5d:bf:ac:94:71:
dc:08:9e:d0:86:ae:f7:9a:bd:b0:8a:f3:47:e5:db:
47:98:0f:70:4d:55:1d:a9:fb:ae:3e:8b:c4:86:74:
40:55:3f:ff:29:50:cf:da:65:91:0f:9f:c4:0b:a7:
16:d9:b8:ec:94:89:b4:29:9c:b2:89:2b:3f:bd:c1:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:20:BA:9A:F2:B0:43:02:92:04:A3:26:33:EC:E7:94:6E:C5:7D:48
X509v3 Authority Key Identifier:
keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:0e:b2:6b:59:40:59:26:8a:0f:68:f4:bc:28:5c:34:cc:
4d:f9:95:67:a3:d0:68:0e:5f:06:db:75:90:fd:76:55:77:65:
8e:35:55:0f:64:b6:51:89:c3:d8:9d:2e:14:9e:c2:ac:0c:43:
c4:d2:cf:d7:d3:d2:0c:f3:95:6b:3c:37:14:52:9d:d8:82:b3:
64:88:38:cd:c5:71:39:6d:d3:fd:0e:85:13:39:52:e7:d2:05:
49:a6:5c:a2:57:f5:1b:f6:7e:cc:6b:39:03:f5:7c:30:8e:6b:
cb:d4:d4:a4:62:21:22:c4:7c:30:f9:4b:83:b1:95:d2:a3:47:
12:6c:0e:1f:bf:8f:87:20:1e:42:a1:85:62:1e:86:bb:65:64:
02:b4:7f:41:34:50:ea:b7:89:19:c4:1a:6c:43:cd:d4:68:c7:
17:df:63:10:5f:68:97:37:e7:8f:29:4f:d7:f9:b1:18:4f:6d:
f1:32:e5:42:8d:94:08:6e:0b:3c:d9:ee:9e:b4:71:4e:ca:e4:
f2:26:2a:a6:f1:a5:01:32:d5:67:17:b3:4f:be:40:92:1c:83:
92:85:44:a7:a9:58:ff:ae:f7:21:42:23:e7:e0:d5:f4:00:a8:
3c:e8:18:40:79:cc:c7:11:9d:c5:0d:3e:81:03:1c:8c:28:a6:
02:91:db:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F67+etNXi2cSUtnPgK3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjgwYjRhMzMyN2M1ODNhZWNkYjAzY2VmM2Y2NGYzM2Jk
NTliMDgwHhcNMjUwMTMxMTYwMDMzWhcNMjUwMjAxMTYwMDMzWjAzMTEwLwYDVQQD
EyhkZTIwYmE5YWYyYjA0MzAyOTIwNGEzMjYzM2VjZTc5NDZlYzU3ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VVAPMLGeCYKTrfLFa5TvtLLnv31
d6xO8AKwl5xk3ei2le6gslgp7Y1aKeZXl2QR+wAgu8igmIxMAX7IpCLLMSN/ic37
G7kQf45/mvQ/dqQgQB3IR8LOqdZesDT7FsPLz6XEWvCbxWK+DVcekPLOiaHytSao
zE7N/IdrTUjTjyKBlconv8s6Rq8cZTTrVYXmLkaCHK65Q9/92yyGU34vfZzsqlQy
GUFEI6yFS9QQFOWu/5Hxu3r+DHI6UyjPXb+slHHcCJ7Qhq73mr2wivNH5dtHmA9w
TVUdqfuuPovEhnRAVT//KVDP2mWRD5/EC6cW2bjslIm0KZyyiSs/vcEjewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4guprysEMCkgSjJjPs55RuxX1IMB8GA1UdIwQY
MBaAFBu4C0ozJ8WDrs2wPO8/ZPM71ZsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzIt
ODA3YjdjMmQ2Mzg5LzEvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzItODA3YjdjMmQ2Mzg5
LzEvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1gOsmtZ
QFkmig9o9LwoXDTMTfmVZ6PQaA5fBtt1kP12VXdljjVVD2S2UYnD2J0uFJ7CrAxD
xNLP19PSDPOVazw3FFKd2IKzZIg4zcVxOW3T/Q6FEzlS59IFSaZcolf1G/Z+zGs5
A/V8MI5ry9TUpGIhIsR8MPlLg7GV0qNHEmwOH7+PhyAeQqGFYh6Gu2VkArR/QTRQ
6reJGcQabEPN1GjHF99jEF9olzfnjylP1/mxGE9t8TLlQo2UCG4LPNnunrRxTsrk
8iYqpvGlATLVZxezT75AkhyDkoVEp6lY/673IUIj5+DV9ACoPOgYQHnMxxGdxQ0+
gQMcjCimApHbMg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:40 2025 by rpki-client