Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: sm2xKUtoGIbhhI4KBtL28z0mdVrYt3kBY/ZQZWd7RQk=
Subject key identifier: B2:12:78:76:CE:7A:E3:7B:8A:BF:46:3A:04:F5:41:C0:D8:88:34:81
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 0194BD17F4650C9CE7FBAB608ECBB19F47F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 04EA
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: P0E3W6CL5hGXQYE6m2TjXDPd/FBCH5JkNqeixqDIUWA=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f4:65:0c:9c:e7:fb:ab:60:8e:cb:b1:9f:47:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=b2127876ce7ae37b8abf463a04f541c0d8883481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:b9:0e:2c:6f:d7:b5:ab:c8:84:c5:08:7f:
b6:04:35:fa:5a:12:6d:6a:8c:06:25:9e:97:80:7d:
9b:5c:65:19:81:bb:84:e3:1f:26:f1:ec:8c:97:0d:
ab:3c:f3:8f:0e:0e:a6:e9:e8:60:d7:ab:bc:22:a2:
c6:77:7c:ec:91:ac:26:4a:b5:c8:d8:fe:e8:e8:20:
31:a7:30:35:67:24:f2:2b:2b:e9:f2:48:7e:af:df:
be:d0:98:5d:c4:6a:07:86:28:eb:9a:e3:71:8d:07:
c5:65:13:84:0b:4f:3c:9c:60:0b:c2:10:90:7f:e9:
15:e4:7b:58:44:82:84:f1:c6:59:30:ea:ab:82:85:
30:ab:e0:09:1f:bb:9d:8d:3a:d9:86:43:99:2c:08:
6f:74:f8:18:2f:e0:d5:39:92:f7:02:ba:6c:ff:f2:
9a:b7:d3:d6:69:0a:aa:fe:65:3b:62:16:e3:46:a2:
28:92:45:07:8c:fa:9a:5b:d6:59:12:4d:fa:ab:af:
27:e1:ae:56:fc:09:07:4c:5f:14:5d:b4:a2:29:e3:
d7:6c:27:a8:bd:09:04:74:c5:a7:f0:ef:34:d1:ca:
87:0a:aa:68:37:b9:43:cf:81:14:83:4d:a0:1b:ee:
d0:9c:df:22:93:79:d1:9c:c0:5f:6e:fc:88:30:69:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:78:76:CE:7A:E3:7B:8A:BF:46:3A:04:F5:41:C0:D8:88:34:81
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:17:5d:22:7c:d3:92:65:6d:0b:56:77:71:e5:66:44:c7:5d:
90:02:e6:43:54:0f:a6:c0:fa:78:8b:e1:a3:93:4b:2e:14:da:
73:6d:07:14:4f:4d:37:ef:1a:89:96:bc:f7:6d:70:2d:23:5f:
ce:e8:e7:53:39:3b:05:40:d4:04:81:ff:b7:75:14:49:7a:e6:
0c:bb:c4:50:19:0d:f1:a5:c4:c2:7c:ff:78:9d:99:ad:77:b1:
db:94:df:ec:29:35:35:46:9c:a7:f5:cf:1c:14:f0:89:71:d5:
b2:d5:cd:94:9e:ba:10:73:7e:70:40:b6:e6:d5:18:9c:22:56:
bf:f3:a0:f0:3e:93:17:e0:6d:a6:35:83:cf:9f:f6:db:f3:49:
53:41:49:a6:b2:ce:60:40:ab:20:ab:53:fa:f2:c7:c3:5e:5a:
c5:94:6a:c2:7c:72:5c:35:62:b2:a4:8a:df:05:68:53:91:0f:
1f:9c:6d:e4:7a:a2:49:da:97:f8:1b:cf:58:9f:f2:4f:e3:76:
ed:6d:cf:f1:12:6e:92:51:7d:7b:31:95:04:47:b7:f7:6b:54:
3a:92:20:98:bf:7f:0d:78:62:e9:8e:a0:c5:35:fa:a0:e7:8a:
e3:79:1c:08:b2:f7:d9:84:f4:7a:76:c6:70:38:d1:8d:e7:e6:
3f:3f:ab:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/RlDJzn+6tgjsuxn0f0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWVmMWI0ZWI2YTBmODEyNTExYjZiYjI3MDQ4MDFhMzMx
MWY3MDkwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
EyhiMjEyNzg3NmNlN2FlMzdiOGFiZjQ2M2EwNGY1NDFjMGQ4ODgzNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruu5Dixv17WryITFCH+2BDX6WhJt
aowGJZ6XgH2bXGUZgbuE4x8m8eyMlw2rPPOPDg6m6ehg16u8IqLGd3zskawmSrXI
2P7o6CAxpzA1ZyTyKyvp8kh+r9++0JhdxGoHhijrmuNxjQfFZROEC088nGALwhCQ
f+kV5HtYRIKE8cZZMOqrgoUwq+AJH7udjTrZhkOZLAhvdPgYL+DVOZL3Arps//Ka
t9PWaQqq/mU7YhbjRqIokkUHjPqaW9ZZEk36q68n4a5W/AkHTF8UXbSiKePXbCeo
vQkEdMWn8O800cqHCqpoN7lDz4EUg02gG+7QnN8ik3nRnMBfbvyIMGlz8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLISeHbOeuN7ir9GOgT1QcDYiDSBMB8GA1UdIwQY
MBaAFBme8bTrag+BJRG2uycEgBozEfcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYt
MDdhMjhhZDNjYjY0LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYtMDdhMjhhZDNjYjY0
LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhddInzT
kmVtC1Z3ceVmRMddkALmQ1QPpsD6eIvho5NLLhTac20HFE9NN+8aiZa8921wLSNf
zujnUzk7BUDUBIH/t3UUSXrmDLvEUBkN8aXEwnz/eJ2ZrXex25Tf7Ck1NUacp/XP
HBTwiXHVstXNlJ66EHN+cEC25tUYnCJWv/Og8D6TF+BtpjWDz5/22/NJU0FJprLO
YECrIKtT+vLHw15axZRqwnxyXDVisqSK3wVoU5EPH5xt5HqiSdqX+BvPWJ/yT+N2
7W3P8RJuklF9ezGVBEe392tUOpIgmL9/DXhi6Y6gxTX6oOeK43kcCLL32YT0enbG
cDjRjefmPz+r0g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:25 2025 by rpki-client