Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: 9v+J7GERypewmrFc+vSwubEt0cxMeUGGV4GgUxB00hM=
Subject key identifier: 45:30:57:BC:60:88:A1:21:CD:D5:F7:D2:89:D3:2E:68:10:06:E0:06
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 0194BD4EAFC6D19188936F4B4D4B47D09F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0AC2
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: rVE0meHI69weJKO3QkeTsIUfg6pUQQ7dpBSMqFapB/k=)
3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:c6:d1:91:88:93:6f:4b:4d:4b:47:d0:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=453057bc6088a121cdd5f7d289d32e681006e006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:8b:0e:98:e9:e4:08:24:57:45:e4:8e:01:
ec:02:4d:0f:53:46:26:18:6d:ff:7b:51:33:ae:f4:
a3:21:90:20:c5:1a:1f:ba:dd:04:31:c1:0b:7b:0e:
69:37:98:a3:25:b3:ab:09:ae:17:16:7e:40:2c:3f:
7c:9a:45:87:e0:39:03:9f:3c:51:0d:e5:c3:84:f8:
d6:08:c3:6e:76:4b:98:42:0f:a2:85:c2:70:87:15:
55:16:6e:f4:b9:8c:88:da:d2:c7:a8:9b:fb:b0:41:
22:27:d3:61:47:86:a2:5e:e7:99:db:0d:31:1d:3b:
93:a2:b6:e1:af:72:dd:11:a1:8d:f8:75:4c:c9:7d:
f7:d1:aa:66:d3:98:39:b7:1a:1f:54:82:30:68:c5:
74:ca:98:72:55:80:cd:8b:39:da:04:9d:37:b4:9a:
d8:57:c2:e8:52:d6:32:4b:ca:ef:39:71:89:70:ff:
73:58:fc:0d:bd:78:bc:dc:60:9d:ed:11:e9:f0:a0:
6f:7e:18:e6:4b:96:21:08:a7:67:0c:29:a0:6b:04:
22:03:32:4e:3c:c6:96:75:51:db:b1:08:6b:eb:66:
11:ca:0c:96:ee:2c:1f:37:9d:e0:c5:9c:25:8b:32:
7d:03:3f:22:c3:04:b5:59:db:97:eb:36:e2:5a:2c:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:57:BC:60:88:A1:21:CD:D5:F7:D2:89:D3:2E:68:10:06:E0:06
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d7:ec:bd:66:19:ef:7c:67:82:3b:32:45:3b:3f:f1:b7:bf:
fb:2b:12:a6:39:79:02:c1:81:62:87:8c:d6:0c:42:e8:18:4a:
19:e6:67:77:5c:7d:7f:c7:bc:8e:08:0e:13:09:6b:f3:75:37:
45:4f:de:e6:f2:32:e5:dd:40:c9:9b:2a:6c:2f:b7:a5:c0:b1:
46:b0:f0:cb:3e:8c:2b:2b:e9:e2:49:19:51:e3:6f:8a:25:43:
45:58:a0:fd:ea:ab:3e:7d:9e:40:37:24:e1:e7:23:80:d4:4a:
21:49:5d:14:f5:33:aa:9f:c9:b8:80:b8:99:44:66:37:f2:79:
37:35:7f:f1:bf:f3:e0:3d:5b:7d:9b:78:ce:4e:2d:c7:6a:9a:
ce:99:c0:28:98:f5:34:6d:00:b1:b2:f8:7a:ce:f7:91:fc:d5:
a1:ef:13:78:49:8b:18:3e:0c:e7:22:34:c5:ed:8b:77:53:9e:
7f:ff:57:0a:ef:33:c0:09:ec:8d:a6:43:85:73:5c:93:71:26:
77:99:9d:3c:49:ab:79:7d:14:9a:94:4c:b7:46:5f:a3:22:48:
33:b0:49:f3:ca:89:9c:bb:9e:64:3e:00:5d:d6:6b:a2:50:a9:
7c:59:00:b1:63:51:95:df:fe:bb:b2:64:a0:23:72:c6:03:57:
e2:86:7b:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tq/G0ZGIk29LTUtH0J93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmNhN2E1ODNiMjQ5N2MzNjdlOWU4NmRlYjc5Y2I3YTcz
NzVhNDcwHhcNMjUwMTMxMTcwMDM4WhcNMjUwMjAxMTcwMDM4WjAzMTEwLwYDVQQD
Eyg0NTMwNTdiYzYwODhhMTIxY2RkNWY3ZDI4OWQzMmU2ODEwMDZlMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL+LDpjp5AgkV0XkjgHsAk0PU0Ym
GG3/e1EzrvSjIZAgxRofut0EMcELew5pN5ijJbOrCa4XFn5ALD98mkWH4DkDnzxR
DeXDhPjWCMNudkuYQg+ihcJwhxVVFm70uYyI2tLHqJv7sEEiJ9NhR4aiXueZ2w0x
HTuTorbhr3LdEaGN+HVMyX330apm05g5txofVIIwaMV0yphyVYDNiznaBJ03tJrY
V8LoUtYyS8rvOXGJcP9zWPwNvXi83GCd7RHp8KBvfhjmS5YhCKdnDCmgawQiAzJO
PMaWdVHbsQhr62YRygyW7iwfN53gxZwlizJ9Az8iwwS1WduX6zbiWiyk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUwV7xgiKEhzdX30onTLmgQBuAGMB8GA1UdIwQY
MBaAFBosp6WDskl8Nn6eht63nLenN1pHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAt
ODRjNjViMTkzNzU4LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAtODRjNjViMTkzNzU4
LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9fsvWYZ
73xngjsyRTs/8be/+ysSpjl5AsGBYoeM1gxC6BhKGeZnd1x9f8e8jggOEwlr83U3
RU/e5vIy5d1AyZsqbC+3pcCxRrDwyz6MKyvp4kkZUeNviiVDRVig/eqrPn2eQDck
4ecjgNRKIUldFPUzqp/JuIC4mURmN/J5NzV/8b/z4D1bfZt4zk4tx2qazpnAKJj1
NG0AsbL4es73kfzVoe8TeEmLGD4M5yI0xe2Ld1Oef/9XCu8zwAnsjaZDhXNck3Em
d5mdPEmreX0UmpRMt0ZfoyJIM7BJ88qJnLueZD4AXdZrolCpfFkAsWNRld/+u7Jk
oCNyxgNX4oZ7vQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:50 2025 by rpki-client