Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: zINg/la9+UC2GC+/N5cVvaHVNixX6lSFAhPabLsr3DA=
Subject key identifier: 0D:20:66:CF:2A:60:84:A7:8B:56:B5:B2:DD:9A:DE:1D:CC:23:81:A1
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 0194BD85AFA6401174A90C7EE8B4BDB9419A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 0399
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: BznmRhP5MtPNsx9AfAPDy7AR/ErI7Il/80/7vUmUA6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:a6:40:11:74:a9:0c:7e:e8:b4:bd:b9:41:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=0d2066cf2a6084a78b56b5b2dd9ade1dcc2381a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:45:39:9d:fe:f6:cc:57:b0:96:d5:82:ff:
5f:b3:51:01:17:70:4c:4e:7e:d6:d1:7c:44:86:d9:
2a:6c:60:f7:8b:4b:a1:f5:0b:56:27:8d:66:c5:7c:
ae:69:74:42:b2:a4:c4:83:42:00:b3:f4:ed:c9:b9:
d1:4a:f1:98:df:2c:c7:d6:82:9f:38:1e:72:bd:aa:
d5:d1:88:e8:12:c4:c2:e9:3a:ef:aa:d9:e7:68:4b:
f1:b2:07:ba:bd:7a:23:2e:a2:90:3f:f0:b6:f6:c0:
da:6e:75:99:d1:6e:b4:f9:65:6e:d9:62:f3:95:a7:
87:9a:77:a9:93:1b:cb:e3:77:f6:1e:f8:75:49:3d:
21:2c:ef:0d:a7:1f:c6:17:28:65:32:40:c0:24:b3:
5b:d9:e9:e5:54:c7:1c:e7:04:f9:fc:fb:d8:64:0a:
da:b5:00:0f:03:1c:d6:83:bb:87:c7:c7:76:00:dd:
25:4d:2a:ff:88:ef:82:42:ea:10:bc:cb:e6:0f:27:
28:f4:40:04:06:93:71:88:fd:48:46:39:e9:a3:ee:
fc:0c:72:9d:7c:8d:8c:11:3c:e9:a5:f0:68:2c:2c:
b5:e6:ea:29:02:5a:b2:67:e2:49:24:0b:dd:0c:2f:
db:6a:a1:46:21:e9:45:62:2e:07:9d:6c:f3:93:5c:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:20:66:CF:2A:60:84:A7:8B:56:B5:B2:DD:9A:DE:1D:CC:23:81:A1
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4a:30:60:68:80:4d:91:db:ef:36:19:f5:b6:4a:12:71:d0:
46:84:8e:42:31:be:75:f3:74:81:5b:5c:24:d0:47:ff:2f:04:
48:a3:40:f8:d9:cb:a9:c0:c1:b6:97:3f:f2:71:6a:7a:a6:cd:
16:26:79:2b:f2:ee:8f:1c:b1:7b:3c:63:e2:af:0c:d7:0a:ef:
21:f9:58:6e:f3:b3:74:ce:bb:ca:14:39:50:55:b3:6a:d5:66:
f6:bf:6b:2b:18:25:8f:3a:70:fb:2c:20:9a:47:1d:d2:8c:e7:
4e:af:8f:b6:01:26:d1:7f:d2:ae:1a:47:ae:52:31:bd:ae:59:
72:9a:ce:93:1f:c4:bf:54:32:da:7d:b9:c1:ad:52:43:29:12:
fa:f7:23:29:fc:36:1e:6e:cd:2a:1b:ed:ec:5b:2b:ac:d7:45:
cc:a1:df:62:bb:f0:17:11:e2:db:bf:93:3d:39:01:fc:88:36:
8d:40:72:b9:7f:17:22:a6:88:e1:4c:0b:0e:4d:fd:2e:7d:6a:
5b:c6:84:63:c8:3b:b7:ed:bf:99:1d:d8:bb:46:5a:56:3b:9d:
9a:a1:0f:75:33:a7:e4:b8:c2:6c:db:74:b6:a4:37:79:6a:29:
e6:d7:3a:d3:10:05:2e:e6:02:1f:b0:c1:1d:14:d6:91:ae:12:
69:ba:b2:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha+mQBF0qQx+6LS9uUGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMTlkY2E2MGQ0N2JkNjAzYjhlOWNjNWRlYmQ5NmM1YzRi
YTE0NWIwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EygwZDIwNjZjZjJhNjA4NGE3OGI1NmI1YjJkZDlhZGUxZGNjMjM4MWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng9FOZ3+9sxXsJbVgv9fs1EBF3BM
Tn7W0XxEhtkqbGD3i0uh9QtWJ41mxXyuaXRCsqTEg0IAs/TtybnRSvGY3yzH1oKf
OB5yvarV0YjoEsTC6TrvqtnnaEvxsge6vXojLqKQP/C29sDabnWZ0W60+WVu2WLz
laeHmnepkxvL43f2Hvh1ST0hLO8Npx/GFyhlMkDAJLNb2enlVMcc5wT5/PvYZAra
tQAPAxzWg7uHx8d2AN0lTSr/iO+CQuoQvMvmDyco9EAEBpNxiP1IRjnpo+78DHKd
fI2METzppfBoLCy15uopAlqyZ+JJJAvdDC/baqFGIelFYi4HnWzzk1xJjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0gZs8qYISni1a1st2a3h3MI4GhMB8GA1UdIwQY
MBaAFIEZ3KYNR71gO46cxd69lsXEuhRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAt
N2UzOWQ5NjNhNTM3LzEvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAtN2UzOWQ5NjNhNTM3
LzEvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0owYGiA
TZHb7zYZ9bZKEnHQRoSOQjG+dfN0gVtcJNBH/y8ESKNA+NnLqcDBtpc/8nFqeqbN
FiZ5K/Lujxyxezxj4q8M1wrvIflYbvOzdM67yhQ5UFWzatVm9r9rKxgljzpw+ywg
mkcd0oznTq+PtgEm0X/SrhpHrlIxva5ZcprOkx/Ev1Qy2n25wa1SQykS+vcjKfw2
Hm7NKhvt7FsrrNdFzKHfYrvwFxHi27+TPTkB/Ig2jUByuX8XIqaI4UwLDk39Ln1q
W8aEY8g7t+2/mR3Yu0ZaVjudmqEPdTOn5LjCbNt0tqQ3eWop5tc60xAFLuYCH7DB
HRTWka4SabqyUw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:16 2025 by rpki-client