Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: 4zgtPtkCWtC1rJbayW5/cdsZ1qDy+wsPzlHbjOcy060=
Subject key identifier: B3:46:8C:3C:D7:D2:06:DE:10:51:E3:DC:F3:08:0F:BD:B3:46:11:25
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 0194BCE07DAD25441BFDCF95B177824951D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=)
2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: 0ezrcyhCCK28sB2EtNRvH9srV6vUr8XzyXa1xokkPRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7d:ad:25:44:1b:fd:cf:95:b1:77:82:49:51:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=b3468c3cd7d206de1051e3dcf3080fbdb3461125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:74:60:80:e6:34:08:ab:1d:b9:9c:0a:4c:
79:43:15:9d:20:da:20:24:ca:a6:a0:c9:d4:93:7f:
df:c0:93:8c:97:4b:4f:2c:71:f4:ff:db:9e:b8:00:
bb:32:fe:a3:a3:2b:a4:fc:c0:a6:42:49:db:82:3d:
c8:4c:a4:89:5a:d4:b0:70:20:4c:6b:32:d7:5d:46:
00:63:ac:77:7c:56:58:2e:ab:3f:de:65:78:dc:ad:
d2:96:e4:84:b0:60:63:81:21:16:d5:a8:2b:05:4f:
f8:15:35:ba:e5:59:dc:ae:1b:39:c4:01:68:2d:22:
f9:01:cd:ae:67:88:90:6a:7b:63:5e:fb:8b:47:cd:
bd:61:5c:d7:8b:25:3f:62:04:9b:ce:60:b7:57:60:
2e:e7:d4:4b:73:ea:24:d8:bc:50:f1:95:7d:1d:f3:
d5:1a:d6:7f:42:a7:63:ea:01:29:ae:7d:98:55:ab:
60:2b:5f:04:64:9b:97:ee:05:bb:a6:9b:85:77:56:
4a:d8:54:d6:11:b0:21:be:bc:07:5b:29:0b:b0:87:
55:89:37:3d:ea:65:b9:b2:e8:a3:75:6c:b4:89:4e:
5a:9d:70:ef:b2:45:a7:e8:23:65:b1:c1:1b:37:36:
bf:16:79:77:07:d1:ab:56:ac:42:60:e4:90:d6:55:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:8C:3C:D7:D2:06:DE:10:51:E3:DC:F3:08:0F:BD:B3:46:11:25
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:91:e2:b4:60:d4:b6:44:67:b8:95:be:b2:93:c2:c1:e7:
51:cc:4b:db:14:78:dc:ac:4f:92:3b:31:4d:a7:7d:1e:16:dc:
5d:12:59:8b:af:d9:27:82:39:b0:59:eb:1d:95:5b:ef:aa:26:
51:a3:58:6d:78:da:01:d3:19:63:39:9f:da:c1:ac:6c:b0:96:
f7:da:c5:92:a4:97:b0:29:b4:26:7c:d1:37:62:15:70:28:03:
d4:49:64:fe:aa:22:b4:e6:f5:37:8f:53:ff:f4:41:6e:bd:54:
32:a7:70:51:24:b6:2f:19:da:20:ce:ad:4f:ef:5a:be:b2:ba:
74:d7:3b:d6:8b:10:5e:33:7d:1e:50:b9:50:6b:4d:67:e9:d5:
ef:67:98:c1:78:3f:48:a3:1d:45:c7:d8:fe:a1:eb:83:69:be:
a2:51:07:1f:58:ab:7a:85:dd:d4:c2:2f:5a:b6:84:20:48:c8:
b4:ef:04:bf:13:34:06:13:2b:22:c3:af:96:12:c3:84:a7:cd:
97:fc:82:8f:05:c2:e1:9c:4b:af:2e:8a:60:5a:71:71:6a:29:
6b:9a:30:71:72:21:bc:87:c5:26:34:88:04:53:3e:c8:5a:74:
4a:16:f9:0d:f6:8d:42:c8:59:fa:92:14:a5:5b:70:6d:76:1b:
c9:8b:02:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84H2tJUQb/c+VsXeCSVHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzhkYmYzZTg1OTU4MmZkMWVkYTJmMmRjZGU1NDIyMjk1
MTQ2ZjEwHhcNMjUwMTMxMTUwMDE2WhcNMjUwMjAxMTUwMDE2WjAzMTEwLwYDVQQD
EyhiMzQ2OGMzY2Q3ZDIwNmRlMTA1MWUzZGNmMzA4MGZiZGIzNDYxMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBd0YIDmNAirHbmcCkx5QxWdINog
JMqmoMnUk3/fwJOMl0tPLHH0/9ueuAC7Mv6joyuk/MCmQknbgj3ITKSJWtSwcCBM
azLXXUYAY6x3fFZYLqs/3mV43K3SluSEsGBjgSEW1agrBU/4FTW65Vncrhs5xAFo
LSL5Ac2uZ4iQantjXvuLR829YVzXiyU/YgSbzmC3V2Au59RLc+ok2LxQ8ZV9HfPV
GtZ/Qqdj6gEprn2YVatgK18EZJuX7gW7ppuFd1ZK2FTWEbAhvrwHWykLsIdViTc9
6mW5suijdWy0iU5anXDvskWn6CNlscEbNza/Fnl3B9GrVqxCYOSQ1lWvQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNGjDzX0gbeEFHj3PMID72zRhElMB8GA1UdIwQY
MBaAFBt42/PoWVgv0e2i8tzeVCIpUUbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMt
NzIyMjk0NzgzZTllLzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMtNzIyMjk0NzgzZTll
LzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9eR4rRg
1LZEZ7iVvrKTwsHnUcxL2xR43KxPkjsxTad9HhbcXRJZi6/ZJ4I5sFnrHZVb76om
UaNYbXjaAdMZYzmf2sGsbLCW99rFkqSXsCm0JnzRN2IVcCgD1Elk/qoitOb1N49T
//RBbr1UMqdwUSS2LxnaIM6tT+9avrK6dNc71osQXjN9HlC5UGtNZ+nV72eYwXg/
SKMdRcfY/qHrg2m+olEHH1ireoXd1MIvWraEIEjItO8EvxM0BhMrIsOvlhLDhKfN
l/yCjwXC4ZxLry6KYFpxcWopa5owcXIhvIfFJjSIBFM+yFp0Shb5DfaNQshZ+pIU
pVtwbXYbyYsCyg==
-----END CERTIFICATE-----
Generated at Thu May 1 07:19:14 2025 by rpki-client