Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: zC5jFPu6OIqcdSUIC5F/ZHmVuwIKij68I5X29jq/u4Y=
Subject key identifier: F4:3B:BE:B4:5E:70:1A:63:B3:B3:8B:0D:8F:AF:9A:F0:DC:C2:5A:54
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 0194BCAA232F5A7A6034206165F06ECB13ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: +ji41iqy1Fss2aiFJshuO94OIJwc8UArcuWcEDBU9As=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:2f:5a:7a:60:34:20:61:65:f0:6e:cb:13:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=f43bbeb45e701a63b3b38b0d8faf9af0dcc25a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:2e:c2:17:60:95:a9:d5:0e:2a:18:48:56:
10:b5:f8:97:85:8d:a1:c2:99:f4:6f:23:9c:69:2f:
50:fd:c2:48:67:56:59:db:50:da:40:67:d9:12:01:
96:c9:c7:c4:ba:f6:fa:95:ca:24:88:6b:01:3e:16:
f8:bb:68:57:ec:f1:2d:d1:53:53:f3:d6:c3:a7:28:
54:6d:db:4f:43:5f:07:e0:05:e5:fb:f0:cf:de:51:
4a:64:18:41:10:3b:47:bd:33:32:e8:e2:69:66:b9:
c5:d2:61:c6:c0:e2:e6:67:77:be:50:b9:c6:ad:99:
a9:9d:cb:45:73:87:fe:a2:ca:29:53:35:2f:64:7c:
38:95:9e:c0:37:89:a6:e3:61:11:39:be:7c:13:c3:
64:9b:24:1f:68:e7:c9:8e:70:b8:13:2a:ed:ed:72:
ee:7d:c7:79:8e:97:fb:91:1f:43:11:f3:90:09:19:
ed:56:05:b0:de:6c:de:cc:2d:84:f2:b3:19:3e:25:
d0:70:3e:1e:7a:fb:b3:f2:3b:48:ca:92:fa:7b:cd:
f9:21:29:b3:a9:d4:74:c1:6f:54:04:d5:99:34:c4:
79:3d:3f:0c:61:c0:33:68:0f:50:d4:a7:68:db:32:
e7:da:2a:a2:f1:d7:7f:d2:60:84:11:f3:9a:b5:a2:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3B:BE:B4:5E:70:1A:63:B3:B3:8B:0D:8F:AF:9A:F0:DC:C2:5A:54
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:19:58:60:0b:dd:40:d8:94:2a:0e:d4:b3:67:0e:da:60:
df:f3:1b:6b:9f:7e:8d:04:66:71:d4:a5:ab:13:a0:a5:f6:74:
55:bc:fb:4b:f7:fc:98:ce:c4:f4:17:bc:ad:86:3e:06:b0:77:
4b:4e:49:0c:e4:65:ac:4a:99:39:60:11:bd:26:ab:0c:05:93:
a7:f3:e4:66:15:3f:9f:9c:f7:5c:2f:27:bd:96:de:35:8c:3d:
cd:5a:aa:23:8a:d0:0a:8d:c4:fa:2a:be:db:6d:35:2d:e6:f3:
6b:92:b3:af:bd:8d:ee:e2:fa:9d:f7:57:ce:90:70:8a:69:7b:
76:e8:e2:28:da:06:c5:34:c1:eb:02:af:04:22:6f:cb:da:41:
d3:4d:01:2c:95:dc:1a:f7:ec:03:5d:21:ed:91:89:bb:1f:c9:
cf:15:9c:83:d0:17:9e:38:b9:87:12:6b:3c:4a:98:7e:85:2e:
25:e6:15:7d:47:b8:38:9b:df:b6:c1:c2:9a:23:ec:a7:f8:9e:
9a:d0:07:56:a7:07:14:e6:84:80:17:c2:56:25:53:8f:de:ba:
9d:2d:4d:50:5b:c8:aa:09:b2:31:d8:8e:ca:82:6d:01:82:55:
c4:26:97:39:4a:5f:40:4d:c0:55:c5:8d:d0:ee:11:db:b1:3f:
63:97:a4:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiMvWnpgNCBhZfBuyxPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj
NTVjNzYwHhcNMjUwMTMxMTQwMDU0WhcNMjUwMjAxMTQwMDU0WjAzMTEwLwYDVQQD
EyhmNDNiYmViNDVlNzAxYTYzYjNiMzhiMGQ4ZmFmOWFmMGRjYzI1YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGAuwhdglanVDioYSFYQtfiXhY2h
wpn0byOcaS9Q/cJIZ1ZZ21DaQGfZEgGWycfEuvb6lcokiGsBPhb4u2hX7PEt0VNT
89bDpyhUbdtPQ18H4AXl+/DP3lFKZBhBEDtHvTMy6OJpZrnF0mHGwOLmZ3e+ULnG
rZmpnctFc4f+osopUzUvZHw4lZ7AN4mm42EROb58E8NkmyQfaOfJjnC4Eyrt7XLu
fcd5jpf7kR9DEfOQCRntVgWw3mzezC2E8rMZPiXQcD4eevuz8jtIypL6e835ISmz
qdR0wW9UBNWZNMR5PT8MYcAzaA9Q1Kdo2zLn2iqi8dd/0mCEEfOataK0ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ7vrRecBpjs7OLDY+vmvDcwlpUMB8GA1UdIwQY
MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt
NmIwNGFhZGVlZjEwLzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw
LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVsZWGAL
3UDYlCoO1LNnDtpg3/Mba59+jQRmcdSlqxOgpfZ0Vbz7S/f8mM7E9Be8rYY+BrB3
S05JDORlrEqZOWARvSarDAWTp/PkZhU/n5z3XC8nvZbeNYw9zVqqI4rQCo3E+iq+
2201Lebza5Kzr72N7uL6nfdXzpBwiml7dujiKNoGxTTB6wKvBCJvy9pB000BLJXc
GvfsA10h7ZGJux/JzxWcg9AXnji5hxJrPEqYfoUuJeYVfUe4OJvftsHCmiPsp/ie
mtAHVqcHFOaEgBfCViVTj966nS1NUFvIqgmyMdiOyoJtAYJVxCaXOUpfQE3AVcWN
0O4R27E/Y5ekjQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:29 2025 by rpki-client