Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: LkCBoWFrghmFnYYCwFruQt32Adeaoyd8szMC8Hhzefc=
Subject key identifier: 2C:CA:4D:AC:8C:2F:3A:50:E3:FD:DE:68:C1:19:03:CD:86:58:49:40
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 0194BC72D118C62550B223919A183E43E11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 0341
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: OeYUrFqtwt5TjuMPY7x+YuK5FXuwHoWvSSbBHogxATc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d1:18:c6:25:50:b2:23:91:9a:18:3e:43:e1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=2cca4dac8c2f3a50e3fdde68c11903cd86584940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:9a:45:a9:b1:4a:40:2e:e2:bd:a7:8a:15:
ca:9c:ac:7b:b4:40:7c:4d:85:9a:e8:19:9b:59:92:
55:64:f7:c6:53:1d:b6:12:23:a8:ff:d7:1c:00:ff:
20:2e:c3:fd:94:99:ed:79:48:72:6d:79:27:4b:f1:
26:58:79:94:95:45:d3:56:e0:c7:63:ae:37:ba:83:
e9:3b:5c:99:97:ff:c0:c0:ec:a4:88:2f:30:84:c9:
08:4e:6a:8a:61:b8:98:eb:5d:b5:e5:a5:06:dd:e3:
ed:7c:7a:46:0b:d6:ce:ea:1d:08:26:79:03:18:22:
b0:f2:f9:95:cb:41:cb:88:0f:93:11:09:be:c9:94:
39:f2:11:a2:57:c5:af:5d:30:67:d3:45:89:1d:f6:
70:39:3c:b3:f8:65:1f:e5:16:79:b5:5a:81:45:1f:
90:1b:3c:b5:b3:b7:41:64:d6:d2:87:91:ca:6d:61:
39:aa:02:05:22:50:36:1d:7a:f9:b7:9b:f6:25:e9:
62:77:59:28:25:36:1f:ab:27:b5:26:1c:8c:e6:fa:
e3:c0:a7:15:87:bf:bd:b2:e6:6b:21:f5:b3:68:95:
69:25:10:f5:24:da:e9:de:31:d5:6b:49:a1:e0:43:
4a:7c:39:ba:6d:97:ac:b4:ea:e4:11:48:b6:29:08:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CA:4D:AC:8C:2F:3A:50:E3:FD:DE:68:C1:19:03:CD:86:58:49:40
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:89:c9:00:52:96:3e:46:8f:60:48:ef:dc:7d:c0:ab:1d:f0:
11:d9:c7:d2:65:89:1a:ac:5a:0b:46:ec:3e:5c:b6:9e:3e:00:
9b:56:96:a9:bc:9d:0d:e9:8a:38:cb:ee:2f:01:79:61:29:95:
ca:28:2d:cc:ff:25:bf:70:0c:85:da:24:ca:c8:fa:91:32:0b:
fd:15:95:97:0c:16:40:84:e1:ed:1e:31:5f:30:9f:85:e3:41:
9c:94:d3:56:66:fd:6a:d1:1d:e8:d4:f7:7e:06:a9:4e:33:4c:
5d:c0:5f:95:c5:16:b7:6c:a1:ec:7f:29:db:d3:ab:e5:81:9b:
bd:e8:89:8d:45:b3:0b:4a:3b:63:b7:33:9a:b8:86:5c:45:58:
e3:3c:50:41:89:1c:f0:d1:4a:bb:93:76:6b:81:47:9f:52:28:
45:56:61:c8:ce:80:28:1d:d2:de:59:df:89:20:27:b5:94:77:
18:15:90:43:f3:32:36:bf:0a:f9:33:f5:0c:e4:10:01:ce:6f:
b0:70:b1:89:70:04:1b:c8:9b:ea:37:75:33:61:50:38:68:f7:
bd:e9:f7:f4:90:dd:1c:a4:a3:6d:22:93:66:e3:5c:ed:40:90:
89:e0:a4:19:0c:fc:e2:03:a8:7b:aa:c7:80:ba:e0:db:8d:c3:
6d:7b:87:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctEYxiVQsiORmhg+Q+EeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMWI3MjZmY2M5ODIwMGNmMzkwMzRkZjk1OGU4ZmU4YjNj
NzljMzcwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
EygyY2NhNGRhYzhjMmYzYTUwZTNmZGRlNjhjMTE5MDNjZDg2NTg0OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjqaRamxSkAu4r2nihXKnKx7tEB8
TYWa6BmbWZJVZPfGUx22EiOo/9ccAP8gLsP9lJnteUhybXknS/EmWHmUlUXTVuDH
Y643uoPpO1yZl//AwOykiC8whMkITmqKYbiY61215aUG3ePtfHpGC9bO6h0IJnkD
GCKw8vmVy0HLiA+TEQm+yZQ58hGiV8WvXTBn00WJHfZwOTyz+GUf5RZ5tVqBRR+Q
Gzy1s7dBZNbSh5HKbWE5qgIFIlA2HXr5t5v2Jelid1koJTYfqye1JhyM5vrjwKcV
h7+9suZrIfWzaJVpJRD1JNrp3jHVa0mh4ENKfDm6bZestOrkEUi2KQh8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzKTayMLzpQ4/3eaMEZA82GWElAMB8GA1UdIwQY
MBaAFIMbcm/MmCAM85A035WOj+izx5w3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2Ut
M2MzNDM2MzY4NGU2LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2UtM2MzNDM2MzY4NGU2
LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYnJAFKW
PkaPYEjv3H3Aqx3wEdnH0mWJGqxaC0bsPly2nj4Am1aWqbydDemKOMvuLwF5YSmV
yigtzP8lv3AMhdokysj6kTIL/RWVlwwWQITh7R4xXzCfheNBnJTTVmb9atEd6NT3
fgapTjNMXcBflcUWt2yh7H8p29Or5YGbveiJjUWzC0o7Y7czmriGXEVY4zxQQYkc
8NFKu5N2a4FHn1IoRVZhyM6AKB3S3lnfiSAntZR3GBWQQ/MyNr8K+TP1DOQQAc5v
sHCxiXAEG8ib6jd1M2FQOGj3ven39JDdHKSjbSKTZuNc7UCQieCkGQz84gOoe6rH
gLrg243DbXuHhQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:49 2025 by rpki-client