Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: RQoXM+8mQkIy8fi+4s1ijfC2Gxn8z8Ez5QuVT3V/k6U=
Subject key identifier: D3:DB:CD:5E:FA:14:25:C1:D3:08:19:49:2D:62:33:84:22:50:68:C9
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 0194BC3C36FC78E3DFF68B5DF84C3E508EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: JnAP/PCoFpvrbH5L1Myn2YuprfXmn2Z0jTZKrCzUi0k=)
2: O5QhbWQn7dWKFexdmAB0vuhHoFI.roa (hash: /pwNLph/P93dkfSWFLVF4Own/TwxuOW3vKc23GnS0Fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:36:fc:78:e3:df:f6:8b:5d:f8:4c:3e:50:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=d3dbcd5efa1425c1d30819492d623384225068c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:9f:1d:58:05:ee:6d:0e:24:c0:82:37:3e:
dd:78:16:c1:5b:01:20:5e:58:25:7d:80:59:a8:2f:
a5:88:a4:b4:ff:61:1f:b4:f7:29:59:71:33:c9:a3:
2a:4f:56:49:45:8a:54:97:fd:df:21:51:da:fd:d7:
a3:de:50:20:44:63:88:8c:e2:6b:b1:ca:47:12:36:
7b:c4:76:04:00:8e:fd:10:28:a3:e6:c9:0a:ad:da:
d0:ef:55:d9:44:b8:77:24:8e:8c:6e:00:78:4c:a4:
05:a0:12:93:32:f9:bc:b7:3d:85:87:62:6a:ab:2d:
56:43:6f:75:da:d7:8e:c4:e6:65:e0:46:d6:06:23:
35:40:67:4c:20:da:17:f9:97:46:f3:75:84:a9:c4:
51:7b:97:43:73:06:1e:ed:bb:77:5d:e8:ec:c7:25:
23:bf:69:f1:cf:55:84:dd:3f:61:b9:cc:a1:22:44:
bc:3b:3e:48:82:94:96:19:06:54:b5:01:bc:06:26:
a7:c0:a3:6b:bb:8c:10:dd:46:47:1f:6b:c0:82:07:
c2:b9:0f:43:fd:d2:b7:e2:0e:66:d0:a2:4d:24:ce:
52:f0:28:ff:be:cf:eb:32:a9:27:51:4e:fc:78:b8:
51:7e:a5:2e:a3:48:d6:62:d1:ed:5a:1a:cb:be:87:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DB:CD:5E:FA:14:25:C1:D3:08:19:49:2D:62:33:84:22:50:68:C9
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e6:76:d0:79:ec:da:32:ba:67:ce:2c:52:a5:a3:74:4a:ed:
ac:33:26:3c:4f:66:ab:47:fb:6d:d1:a9:7f:60:da:26:51:ca:
8c:a6:9f:8f:60:2a:e5:48:aa:fd:ba:c7:df:0b:ea:8c:72:d2:
90:80:df:99:f6:54:09:f2:dd:4a:c8:90:82:f1:21:ac:31:77:
12:41:d6:f2:64:eb:53:78:d2:41:05:88:c6:e0:b4:fb:f2:d9:
ac:03:66:c1:c3:77:a8:21:0d:57:33:5b:f2:4f:d0:71:54:08:
8d:9a:eb:fc:31:21:db:9b:6e:63:95:a5:65:a9:27:6b:ef:64:
8c:1e:2c:6b:e2:75:53:e9:fd:19:8c:dd:2d:da:fd:93:51:8a:
cf:ee:a4:e0:da:cc:12:b4:38:e7:62:07:2d:67:95:c7:4a:2d:
14:5d:8a:82:40:de:1c:71:4a:ee:58:f1:72:cb:61:d3:7b:07:
0a:92:32:91:2e:09:58:d5:80:7b:ed:72:00:e7:08:3d:2e:c3:
40:a8:8c:f5:97:05:fb:e7:c1:44:5a:a5:b9:97:46:4e:53:e1:
4b:40:ed:b1:99:e0:2c:9a:3a:36:09:e6:26:1d:0f:c9:4c:06:
18:bf:1f:bf:5d:19:b0:89:44:ca:af:e8:96:87:e0:ed:83:47:
81:03:ff:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDb8eOPf9otd+Ew+UI7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhOTI1ZjhkNjY4NGM4NjEwN2QyNzU2YjRhYTkzODgx
ZjAyYWUwHhcNMjUwMTMxMTIwMDUwWhcNMjUwMjAxMTIwMDUwWjAzMTEwLwYDVQQD
EyhkM2RiY2Q1ZWZhMTQyNWMxZDMwODE5NDkyZDYyMzM4NDIyNTA2OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JSfHVgF7m0OJMCCNz7deBbBWwEg
XlglfYBZqC+liKS0/2EftPcpWXEzyaMqT1ZJRYpUl/3fIVHa/dej3lAgRGOIjOJr
scpHEjZ7xHYEAI79ECij5skKrdrQ71XZRLh3JI6MbgB4TKQFoBKTMvm8tz2Fh2Jq
qy1WQ2912teOxOZl4EbWBiM1QGdMINoX+ZdG83WEqcRRe5dDcwYe7bt3XejsxyUj
v2nxz1WE3T9hucyhIkS8Oz5IgpSWGQZUtQG8BianwKNru4wQ3UZHH2vAggfCuQ9D
/dK34g5m0KJNJM5S8Cj/vs/rMqknUU78eLhRfqUuo0jWYtHtWhrLvodUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPbzV76FCXB0wgZSS1iM4QiUGjJMB8GA1UdIwQY
MBaAFApBqSX41mhMhhB9J1a0qpOIHwKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDkt
MzQyMDY4NGM3ZTQxLzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDktMzQyMDY4NGM3ZTQx
LzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeZ20Hns
2jK6Z84sUqWjdErtrDMmPE9mq0f7bdGpf2DaJlHKjKafj2Aq5Uiq/brH3wvqjHLS
kIDfmfZUCfLdSsiQgvEhrDF3EkHW8mTrU3jSQQWIxuC0+/LZrANmwcN3qCENVzNb
8k/QcVQIjZrr/DEh25tuY5WlZakna+9kjB4sa+J1U+n9GYzdLdr9k1GKz+6k4NrM
ErQ452IHLWeVx0otFF2KgkDeHHFK7ljxcsth03sHCpIykS4JWNWAe+1yAOcIPS7D
QKiM9ZcF++fBRFqluZdGTlPhS0DtsZngLJo6NgnmJh0PyUwGGL8fv10ZsIlEyq/o
lofg7YNHgQP/Hw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:31 2025 by rpki-client