Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: 4+CMvh+tDI2KW5j7E7zTOB3gKg4xfJafiMp2mzFt9Hc=
Subject key identifier: 02:62:1D:F9:DA:73:4B:DD:6E:5C:A7:A4:54:E0:A1:CF:51:D0:86:74
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0194BCAA2214FF9A0A794FCEF1E5F905EE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 0288
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: 6AkxaveJahLaYwcbO7GTtuesL9X5KOwduiAEc2fbTTI=)
3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:14:ff:9a:0a:79:4f:ce:f1:e5:f9:05:ee:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=02621df9da734bdd6e5ca7a454e0a1cf51d08674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:bc:5a:13:71:75:c6:30:90:37:67:e3:7f:
41:62:b3:6d:b2:af:73:cc:45:51:4d:0b:ea:00:88:
b1:7b:e3:3b:bd:e8:7b:68:bc:e4:49:74:26:fa:9e:
94:04:f4:ea:d3:e9:16:52:fc:59:9a:fe:8f:54:aa:
fe:2f:99:13:e3:4d:4b:e2:fa:a0:c3:91:04:2b:4e:
b8:70:c3:b0:ca:c8:e4:da:59:c7:e1:5d:e6:13:59:
f8:66:7d:b1:f2:da:36:63:87:d4:5d:43:12:77:d3:
59:6d:e7:a8:01:d2:00:3d:28:f8:08:b6:3b:02:19:
b1:f7:4a:94:3d:21:bd:3b:e1:10:48:ef:b6:7c:69:
88:b5:9f:68:75:ea:6e:de:c5:03:0e:3e:a6:c3:d0:
a4:9b:67:b4:40:33:f1:78:e6:2b:b8:7b:51:97:a0:
30:03:c8:86:60:17:b3:64:70:b5:ea:c3:e1:b7:cd:
62:7f:a2:13:6a:f0:c3:b2:77:8c:45:25:c2:ba:20:
ae:56:7b:e2:8f:6c:75:de:0a:dd:9a:81:f2:91:9a:
10:f4:45:3c:8c:66:9f:3f:d3:a3:f7:b5:30:8e:4d:
2b:e8:be:fe:cd:ee:73:73:cc:d6:e3:1e:5f:ba:95:
93:01:80:e0:7b:29:84:f7:22:61:3d:99:80:33:27:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:62:1D:F9:DA:73:4B:DD:6E:5C:A7:A4:54:E0:A1:CF:51:D0:86:74
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:f5:8e:9a:c4:bb:29:28:06:97:58:ba:41:12:11:1e:81:
d6:df:39:e6:40:9d:b2:f8:77:f9:0b:8f:68:66:e2:30:2d:e5:
12:a8:33:e1:58:81:57:21:5e:9b:eb:a9:2d:1b:f1:98:ce:29:
c3:97:f9:90:69:f4:e5:63:6e:52:05:56:e7:82:7d:50:c5:27:
4e:61:a8:83:2c:82:6a:29:b2:bb:42:4a:b9:f0:ba:d8:17:73:
8d:ab:ba:cf:9a:3d:ed:a0:f7:68:e1:01:b4:aa:c3:d7:5a:c4:
0b:dd:ca:ac:44:e2:7f:db:96:24:8a:cf:de:b4:f5:2c:73:eb:
52:bf:20:b6:60:31:a2:c0:7e:34:98:6b:aa:99:45:8c:11:90:
df:0f:5d:4a:b1:ff:51:96:90:2a:45:31:58:d5:4b:f9:94:28:
d9:a0:90:ea:1c:c5:c0:03:be:53:32:db:bf:c3:e4:5c:ce:fd:
b1:80:56:f5:e3:9a:ca:ea:93:32:89:c7:a2:dc:ec:71:5c:1a:
ad:4d:72:02:2c:1f:ba:a0:e8:6f:38:a8:09:bf:5f:60:48:bd:
96:64:46:3b:5f:49:8e:d2:6e:3f:74:2a:ae:2b:ff:45:1a:15:
40:f0:1b:fd:55:86:7e:9d:a0:5c:d7:04:9b:2b:75:82:0e:6a:
47:f8:46:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiIU/5oKeU/O8eX5Be6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz
MzRiYTUwHhcNMjUwMTMxMTQwMDUzWhcNMjUwMjAxMTQwMDUzWjAzMTEwLwYDVQQD
EygwMjYyMWRmOWRhNzM0YmRkNmU1Y2E3YTQ1NGUwYTFjZjUxZDA4Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fO8WhNxdcYwkDdn439BYrNtsq9z
zEVRTQvqAIixe+M7veh7aLzkSXQm+p6UBPTq0+kWUvxZmv6PVKr+L5kT401L4vqg
w5EEK064cMOwysjk2lnH4V3mE1n4Zn2x8to2Y4fUXUMSd9NZbeeoAdIAPSj4CLY7
Ahmx90qUPSG9O+EQSO+2fGmItZ9odepu3sUDDj6mw9Ckm2e0QDPxeOYruHtRl6Aw
A8iGYBezZHC16sPht81if6ITavDDsneMRSXCuiCuVnvij2x13grdmoHykZoQ9EU8
jGafP9Oj97Uwjk0r6L7+ze5zc8zW4x5fupWTAYDgeymE9yJhPZmAMycK5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJiHfnac0vdblynpFTgoc9R0IZ0MB8GA1UdIwQY
MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt
MDY0ZDdhZGY0YmUzLzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz
LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO71jprE
uykoBpdYukESER6B1t855kCdsvh3+QuPaGbiMC3lEqgz4ViBVyFem+upLRvxmM4p
w5f5kGn05WNuUgVW54J9UMUnTmGogyyCaimyu0JKufC62Bdzjau6z5o97aD3aOEB
tKrD11rEC93KrETif9uWJIrP3rT1LHPrUr8gtmAxosB+NJhrqplFjBGQ3w9dSrH/
UZaQKkUxWNVL+ZQo2aCQ6hzFwAO+UzLbv8PkXM79sYBW9eOayuqTMonHotzscVwa
rU1yAiwfuqDobzioCb9fYEi9lmRGO19JjtJuP3Qqriv/RRoVQPAb/VWGfp2gXNcE
myt1gg5qR/hG2Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:04 2025 by rpki-client