Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
File: g2gKwOhPwS_HIje4rtjl7YX43r0.mft (raw, json)
Hash identifier: I7w23FyYHRGhfoNsz3rcU9grEy1XXs6KAU+/1cp6GWQ=
Subject key identifier: F5:73:3A:D6:7D:34:C4:C3:73:54:C2:64:78:27:15:05:CA:A4:C8:2F
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial: 0194BD85AC51DDB1A88895D905742D3D5C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa (hash: yisuPZkgdD2MViPM9oU55ZAf5YPozXvdCbB7qiW4Gcw=)
2: g2gKwOhPwS_HIje4rtjl7YX43r0.crl (hash: vcvw/0zhyQ3bxNYoMRgjtsKXl7K6GtVMV7//1rQIiKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:51:dd:b1:a8:88:95:d9:05:74:2d:3d:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=f5733ad67d34c4c37354c26478271505caa4c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:5c:6e:5a:ba:c5:7c:73:9e:a7:42:2e:ec:
93:62:75:81:fb:f7:0c:ac:65:80:0d:d4:f5:c2:c6:
42:8f:58:e1:c2:db:bf:58:04:5e:6c:51:5d:cd:43:
57:93:fb:c1:24:bb:84:e1:7d:b9:d9:a2:9e:1d:27:
0d:42:12:5f:86:b1:59:1f:c3:b7:ad:17:f5:15:98:
e5:af:b3:0e:85:37:92:3e:d1:19:7c:14:01:fd:ba:
f2:f4:83:ec:62:76:cc:31:89:f9:94:8b:73:18:64:
4f:81:bd:f1:64:8b:01:47:e7:1c:7a:02:c3:16:2a:
5e:99:c2:80:85:12:65:1f:54:88:f3:96:3a:15:fa:
84:73:1a:a4:06:8c:ab:40:c9:c7:b5:2b:8c:17:5d:
3f:29:fe:19:85:80:9e:b0:26:f3:a8:d3:fd:a4:de:
b9:ea:62:dd:ee:72:82:63:7e:75:7b:a7:eb:ba:6f:
06:4d:d4:72:70:c3:f4:f4:ec:54:57:c5:58:fe:8a:
13:fa:9f:11:fc:c6:21:e5:01:94:c3:a1:43:04:32:
8d:15:30:b2:c7:ea:23:67:61:e1:56:d7:73:f8:df:
7a:71:e8:f4:1d:fe:57:e4:ca:d1:e8:13:e2:87:77:
03:93:55:30:b7:06:cd:23:3b:45:68:6a:9a:06:c6:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:3A:D6:7D:34:C4:C3:73:54:C2:64:78:27:15:05:CA:A4:C8:2F
X509v3 Authority Key Identifier:
keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f2:4d:db:a1:bd:02:e1:28:60:fd:56:87:c3:f1:7f:17:9a:
d5:7e:cc:05:d7:be:25:30:3f:79:1e:ef:c4:be:bf:9e:9d:42:
70:40:e2:3c:10:32:e9:d0:8e:4a:7a:ed:ec:09:2e:8b:d0:95:
e1:d4:3e:64:5e:84:5b:8c:41:81:7c:e7:e3:a0:72:ab:7f:b0:
9d:88:bf:f2:3b:fe:d7:4b:c4:12:32:ca:e4:16:4f:36:6c:b8:
54:5d:45:81:7e:23:5a:6a:b1:57:17:78:af:48:a5:5e:ef:02:
7e:89:6d:65:ba:43:e6:3c:45:7c:6a:5f:5b:60:11:db:26:d9:
38:79:4d:d5:6c:37:05:a8:4c:ee:5f:3b:b7:d7:fb:1f:93:d5:
94:60:1e:6c:8b:1a:49:53:83:36:5e:b3:df:ca:38:87:04:92:
17:22:99:e4:a5:c2:90:4c:03:88:a4:15:60:11:0d:a7:19:fc:
ef:17:a4:e6:f2:6f:88:d6:74:c2:65:f6:d0:71:5c:c9:3d:82:
fa:e3:27:27:87:1c:60:bc:da:50:38:2c:3b:9f:a9:bf:19:c3:
2a:04:7a:38:82:b0:8d:3e:98:1f:22:0c:09:58:dd:6d:60:e0:
f6:97:98:e1:12:45:6f:31:a8:a7:56:72:be:47:07:3a:af:9b:
a6:44:52:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haxR3bGoiJXZBXQtPVxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjgwYWMwZTg0ZmMxMmZjNzIyMzdiOGFlZDhlNWVkODVm
OGRlYmQwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EyhmNTczM2FkNjdkMzRjNGMzNzM1NGMyNjQ3ODI3MTUwNWNhYTRjODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5xcblq6xXxznqdCLuyTYnWB+/cM
rGWADdT1wsZCj1jhwtu/WARebFFdzUNXk/vBJLuE4X252aKeHScNQhJfhrFZH8O3
rRf1FZjlr7MOhTeSPtEZfBQB/bry9IPsYnbMMYn5lItzGGRPgb3xZIsBR+ccegLD
FipemcKAhRJlH1SI85Y6FfqEcxqkBoyrQMnHtSuMF10/Kf4ZhYCesCbzqNP9pN65
6mLd7nKCY351e6frum8GTdRycMP09OxUV8VY/ooT+p8R/MYh5QGUw6FDBDKNFTCy
x+ojZ2HhVtdz+N96cej0Hf5X5MrR6BPih3cDk1UwtwbNIztFaGqaBsaN7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVzOtZ9NMTDc1TCZHgnFQXKpMgvMB8GA1UdIwQY
MBaAFINoCsDoT8EvxyI3uK7Y5e2F+N69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgt
ZmZhY2QyOWZkYTNhLzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgtZmZhY2QyOWZkYTNh
LzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/JN26G9
AuEoYP1Wh8Pxfxea1X7MBde+JTA/eR7vxL6/np1CcEDiPBAy6dCOSnrt7Akui9CV
4dQ+ZF6EW4xBgXzn46Byq3+wnYi/8jv+10vEEjLK5BZPNmy4VF1FgX4jWmqxVxd4
r0ilXu8CfoltZbpD5jxFfGpfW2AR2ybZOHlN1Ww3BahM7l87t9f7H5PVlGAebIsa
SVODNl6z38o4hwSSFyKZ5KXCkEwDiKQVYBENpxn87xek5vJviNZ0wmX20HFcyT2C
+uMnJ4ccYLzaUDgsO5+pvxnDKgR6OIKwjT6YHyIMCVjdbWDg9peY4RJFbzGop1Zy
vkcHOq+bpkRS3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:40 2025 by rpki-client