Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
File: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft (raw, json)
Hash identifier: JHfLkjqYz47e3yWakbVondFnvsO9aPCp542Fir5dTIs=
Subject key identifier: FF:18:14:0E:77:AB:B1:AE:11:55:42:9B:57:E5:8A:97:E9:55:4D:E3
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 0194BBCE2E3BA9707C351C96686CEABFAE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (hash: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=)
2: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl (hash: OizrpwFI5/iwS/I9fPMOEJm7SqZDhWfPlBm5WG6LiwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:3b:a9:70:7c:35:1c:96:68:6c:ea:bf:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=ff18140e77abb1ae1155429b57e58a97e9554de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:f4:77:4c:00:e6:5b:4f:9f:65:88:49:2e:
34:96:58:91:ac:1a:5e:4a:8d:48:d0:78:0a:45:50:
74:d3:54:1e:c5:f4:09:c2:f8:e0:bd:c8:7c:31:1a:
18:40:dc:9e:0a:b5:34:91:cd:59:6e:88:0c:15:7c:
b5:f8:c2:0d:4b:e0:c2:28:a9:32:a0:b1:58:2e:6c:
2b:bb:de:30:55:56:db:23:ce:a9:d1:94:01:ad:8f:
5e:f9:63:fc:4b:f0:d1:54:33:a5:3e:72:b9:b9:a9:
e6:53:a8:a3:5c:32:07:7d:74:40:2b:93:ea:55:39:
61:ba:82:c3:22:89:6b:38:6f:ff:81:74:2e:0b:3c:
aa:f1:e5:58:0e:34:7f:ae:9d:07:8a:19:b5:14:09:
04:8b:37:45:3c:b9:3f:85:45:6f:dd:98:b2:34:ec:
6f:f2:d9:95:f9:e4:35:d1:ab:67:63:08:90:b7:b2:
af:19:06:c6:a7:7e:c7:f6:3c:a4:d1:db:7a:2d:70:
4d:3a:89:b9:8e:5c:ab:87:aa:b8:8c:09:dd:5b:1b:
fe:e6:f7:df:ad:26:08:d8:fe:aa:5c:91:98:03:64:
78:ea:cc:0e:06:ed:70:86:62:9b:99:72:14:0c:e7:
55:5e:97:f4:1a:24:9e:7e:db:90:9b:40:e1:8d:76:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:14:0E:77:AB:B1:AE:11:55:42:9B:57:E5:8A:97:E9:55:4D:E3
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:92:99:03:15:30:6b:dd:9f:4e:d6:fd:57:9a:05:73:18:ea:
45:d8:1b:52:f9:14:ae:be:14:5f:6c:8f:04:32:5a:23:ae:e4:
bb:20:30:43:40:f8:bc:4f:d0:d0:0a:15:5d:3c:cb:aa:19:09:
32:dd:92:86:99:0a:1e:d8:77:dc:84:93:3a:b1:15:f0:0e:ec:
8f:85:be:17:f4:5c:b7:6e:41:67:1d:15:50:e8:92:d4:b1:2e:
5e:48:e0:eb:dc:e1:b6:80:b6:00:53:ec:bb:6f:1f:da:1a:c5:
a2:c7:3b:b7:65:0b:d4:ba:56:20:fb:ee:07:58:a4:82:da:9a:
5e:37:dc:ad:11:08:f9:1f:3a:23:2f:22:f1:c5:c1:e6:df:7f:
52:57:71:aa:c1:52:12:e5:dc:3b:12:49:c1:9e:8b:46:4c:90:
33:0b:a6:5d:91:0a:98:66:47:d3:35:4b:31:a9:8d:59:3a:ee:
a6:5f:0b:52:81:6b:76:78:21:74:25:02:e4:78:c7:82:dc:97:
44:58:c2:92:49:9a:ed:65:93:d2:1f:bf:77:71:49:f6:c7:0b:
f5:ce:a9:4b:04:83:bc:c8:a2:17:ac:96:f7:c7:34:47:7e:34:
53:fd:66:e1:b8:18:2b:42:74:9d:c4:d6:1f:11:43:f9:eb:90:
9e:07:77:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi47qXB8NRyWaGzqv66HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjk2YTgxMzcyMzU3YjVmMWVkN2M4MmNjYWE5OTNhOTgw
ZDU0ZTcwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
EyhmZjE4MTQwZTc3YWJiMWFlMTE1NTQyOWI1N2U1OGE5N2U5NTU0ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCX0d0wA5ltPn2WISS40lliRrBpe
So1I0HgKRVB001QexfQJwvjgvch8MRoYQNyeCrU0kc1ZbogMFXy1+MINS+DCKKky
oLFYLmwru94wVVbbI86p0ZQBrY9e+WP8S/DRVDOlPnK5uanmU6ijXDIHfXRAK5Pq
VTlhuoLDIolrOG//gXQuCzyq8eVYDjR/rp0Hihm1FAkEizdFPLk/hUVv3ZiyNOxv
8tmV+eQ10atnYwiQt7KvGQbGp37H9jyk0dt6LXBNOom5jlyrh6q4jAndWxv+5vff
rSYI2P6qXJGYA2R46swOBu1whmKbmXIUDOdVXpf0GiSeftuQm0DhjXb4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8YFA53q7GuEVVCm1flipfpVU3jMB8GA1UdIwQY
MBaAFIFpaoE3I1e18e18gsyqmTqYDVTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZTI0ZTItNjhiZS00N2Q3LTk1MGIt
YzZiODgwMGFhODU4LzEvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZTI0ZTItNjhiZS00N2Q3LTk1MGItYzZiODgwMGFhODU4
LzEvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpKZAxUw
a92fTtb9V5oFcxjqRdgbUvkUrr4UX2yPBDJaI67kuyAwQ0D4vE/Q0AoVXTzLqhkJ
Mt2ShpkKHth33ISTOrEV8A7sj4W+F/Rct25BZx0VUOiS1LEuXkjg69zhtoC2AFPs
u28f2hrFosc7t2UL1LpWIPvuB1ikgtqaXjfcrREI+R86Iy8i8cXB5t9/UldxqsFS
EuXcOxJJwZ6LRkyQMwumXZEKmGZH0zVLMamNWTrupl8LUoFrdnghdCUC5HjHgtyX
RFjCkkma7WWT0h+/d3FJ9scL9c6pSwSDvMiiF6yW98c0R340U/1m4bgYK0J0ncTW
HxFD+euQngd30A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:11 2025 by rpki-client