Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier: ZkyOR3OT48PfRg4kuQ1JKApZq8jCkQ9RUHG2AQyi4X0=
Subject key identifier: 52:8D:94:44:23:85:25:04:F7:9A:C2:8E:B5:46:8C:48:8E:93:C3:97
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 0194BBCE4F5A816CAFBCAD5229EB41B3B0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number: 0AFC
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: cLim36sao5pMYIlwI2yEy34s8Cc.roa (hash: uIZpeW0rixxT3YTztBsC073cFEv/iEgh04bRU5ug8RI=)
2: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: w0MbP95Fnjynhhk5BvmBwdhm6DnzWguSseNk8PP4tnw=)
3: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (hash: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:5a:81:6c:af:bc:ad:52:29:eb:41:b3:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=528d944423852504f79ac28eb5468c488e93c397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:be:c6:6e:dc:88:7c:29:6b:d1:b8:2a:05:
da:bb:bb:48:40:64:3b:e0:a0:0c:de:50:81:b4:bd:
30:49:11:81:5f:1a:e5:c7:8c:8a:6e:a9:59:c6:c8:
4b:13:3b:0d:f0:59:48:7f:e3:e1:2a:76:0d:c9:ad:
7d:bc:4b:a6:e9:0d:75:7c:1b:03:b4:90:46:ff:b4:
82:ec:23:0f:c3:2f:51:53:8c:98:95:2b:d6:87:40:
ce:b3:e3:93:1f:7f:7e:06:37:b4:0c:6f:47:69:b2:
21:24:e8:2c:d4:bf:ea:df:96:c1:de:0b:70:89:9a:
88:f9:aa:b2:63:97:6e:ac:88:5d:3f:dc:67:04:47:
5f:bb:db:9d:c5:37:32:8e:c2:ea:d9:6a:6c:2f:2f:
19:e6:e1:e7:35:81:8a:0e:da:b3:db:b7:23:40:23:
d0:50:99:cc:96:11:d3:60:6e:9c:3a:9f:2a:62:4a:
7d:12:4b:3e:a6:22:c7:40:8d:76:62:16:05:b4:4b:
67:2c:e7:f8:bb:b1:e0:73:84:ff:e5:c9:7c:10:ef:
63:d2:2a:e7:20:2a:43:ce:d2:d6:44:0e:24:25:d3:
22:b2:77:78:93:ab:47:c2:98:8e:a6:e5:ea:d5:cd:
25:7b:9c:96:b9:3d:0d:fc:a5:a2:ee:9f:e6:c6:15:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:94:44:23:85:25:04:F7:9A:C2:8E:B5:46:8C:48:8E:93:C3:97
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bd:de:d9:97:7b:5c:2a:1c:18:05:f5:53:45:ce:3f:5f:b9:
6f:a7:aa:58:04:c0:0a:e9:db:59:e8:43:78:12:5a:5a:e5:99:
24:a5:15:81:47:27:f7:a5:67:94:66:27:5c:52:3f:bd:1b:e5:
68:da:f5:56:b3:5e:0c:bd:09:39:25:7e:24:19:82:88:9c:76:
e3:8c:fc:fb:59:71:67:15:c0:72:39:0a:b7:4b:65:76:25:db:
b8:e1:10:4e:50:a4:ff:ef:bc:cf:8c:83:d8:47:6d:3e:2a:a1:
bb:02:b5:b2:ab:14:ce:8d:e5:d6:66:62:1e:b6:6f:b8:d6:be:
35:f2:15:7c:1f:3f:ed:96:71:92:0a:8f:66:e2:16:ab:59:50:
57:5c:53:93:a0:cc:d5:ba:c6:3b:c8:f7:a8:97:30:70:4d:31:
b9:e4:08:86:08:b8:9c:1c:31:dc:f2:43:e5:b3:f2:cd:52:ad:
1c:5f:0f:c0:09:b2:a5:1a:67:08:e0:4d:d5:87:df:ff:f5:fe:
a7:a7:1d:8b:ef:3e:af:49:bf:ac:73:50:8e:84:7e:8f:fe:b0:
d8:cf:24:44:51:92:65:d3:fe:75:52:57:30:03:cc:60:19:29:
1b:3f:b5:86:ea:ca:2f:91:5a:c2:f7:29:a3:fb:51:91:e7:73:
c7:ce:1b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk9agWyvvK1SKetBs7DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyM2I2ZjNiN2FmODdiYjhlZjZkZDg0M2JlYmQ2ZDgxYjA1
NTkyMTMwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg1MjhkOTQ0NDIzODUyNTA0Zjc5YWMyOGViNTQ2OGM0ODhlOTNjMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxO+xm7ciHwpa9G4KgXau7tIQGQ7
4KAM3lCBtL0wSRGBXxrlx4yKbqlZxshLEzsN8FlIf+PhKnYNya19vEum6Q11fBsD
tJBG/7SC7CMPwy9RU4yYlSvWh0DOs+OTH39+Bje0DG9HabIhJOgs1L/q35bB3gtw
iZqI+aqyY5durIhdP9xnBEdfu9udxTcyjsLq2WpsLy8Z5uHnNYGKDtqz27cjQCPQ
UJnMlhHTYG6cOp8qYkp9Eks+piLHQI12YhYFtEtnLOf4u7Hgc4T/5cl8EO9j0irn
ICpDztLWRA4kJdMisnd4k6tHwpiOpuXq1c0le5yWuT0N/KWi7p/mxhWywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKNlEQjhSUE95rCjrVGjEiOk8OXMB8GA1UdIwQY
MBaAFII7bzt6+Hu4723YQ769bYGwVZITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2p0dk8zcjRlN2p2YmRoRHZyMXRnYkJWa2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDk0Y2ItMjUxNy00MWE4LWE0NTct
ZTcxMGMyYTE0YmNlLzEvZ2p0dk8zcjRlN2p2YmRoRHZyMXRnYkJWa2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNDk0Y2ItMjUxNy00MWE4LWE0NTctZTcxMGMyYTE0YmNl
LzEvZ2p0dk8zcjRlN2p2YmRoRHZyMXRnYkJWa2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb3e2Zd7
XCocGAX1U0XOP1+5b6eqWATACunbWehDeBJaWuWZJKUVgUcn96VnlGYnXFI/vRvl
aNr1VrNeDL0JOSV+JBmCiJx244z8+1lxZxXAcjkKt0tldiXbuOEQTlCk/++8z4yD
2EdtPiqhuwK1sqsUzo3l1mZiHrZvuNa+NfIVfB8/7ZZxkgqPZuIWq1lQV1xTk6DM
1brGO8j3qJcwcE0xueQIhgi4nBwx3PJD5bPyzVKtHF8PwAmypRpnCOBN1Yff//X+
p6cdi+8+r0m/rHNQjoR+j/6w2M8kRFGSZdP+dVJXMAPMYBkpGz+1hurKL5Fawvcp
o/tRkedzx84b+w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:24 2025 by rpki-client