Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: mflmMrU0qyDOLX/M5XzJc9lKg4iBjcRLZjcwEzGnxtc=
Subject key identifier: 4A:26:C4:CE:A5:5A:3B:E8:B8:1C:95:C9:72:FC:F6:8E:1C:C8:4C:3B
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 0194BD8551D7CC0612B5BA5EDC3336318EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: RPv5r1Pqvcm0Vs4FK6hSSJ3nywOIXsbL6SZPNoIILhg=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:d7:cc:06:12:b5:ba:5e:dc:33:36:31:8e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=4a26c4cea55a3be8b81c95c972fcf68e1cc84c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:0d:a9:df:bb:fd:6f:75:ad:73:0e:f9:3a:
8c:f3:b0:c8:21:80:fb:4f:5f:9c:ce:ea:af:e7:a8:
51:2c:33:35:73:ba:66:8a:da:ff:68:36:78:b1:3a:
a7:09:83:e8:1a:93:6c:21:b9:b0:bc:a9:0c:e1:a9:
47:43:04:32:13:9d:da:72:d9:ea:30:b5:90:6b:42:
5c:74:0b:7b:fc:8c:f6:e2:3d:b1:40:76:92:76:06:
13:02:ab:f4:81:49:51:60:4b:cf:b7:9f:98:8c:10:
fa:3f:32:62:7a:6a:e7:2d:81:7d:bb:cc:93:a0:22:
92:86:f3:a9:b0:21:c5:4c:c8:58:b9:7e:6e:82:62:
9a:70:cb:cb:5f:76:6f:2c:25:d7:c7:86:f6:ef:6a:
07:6c:8f:36:dd:f5:8c:86:56:0e:96:b1:c0:c2:f5:
0a:76:90:87:04:79:9f:0c:fa:8a:b8:ae:3d:c2:d2:
57:ab:d2:a5:77:4d:df:8d:94:2f:95:e5:86:a8:18:
c6:99:e1:d7:33:8f:02:ab:0f:75:83:44:7d:e0:18:
9c:1d:e6:55:0c:c0:29:7e:ff:31:1e:9b:1a:9c:6f:
a6:67:36:74:cb:c7:3e:6a:12:9f:11:36:03:57:94:
34:9e:f5:b3:91:2a:b0:56:4f:1a:7e:9b:b5:1c:53:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:C4:CE:A5:5A:3B:E8:B8:1C:95:C9:72:FC:F6:8E:1C:C8:4C:3B
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:01:2d:57:f5:b1:a6:b9:8a:ab:bc:ec:9f:33:f8:b6:f0:c0:
83:87:cd:46:6b:ee:f0:d9:9e:46:31:f5:6c:02:c4:74:ae:3b:
05:ea:4e:09:38:a7:ad:3d:ca:d5:9d:1e:7b:32:16:b9:aa:5e:
ce:52:a9:68:3c:1f:08:5a:89:ad:97:71:f2:21:c2:4d:d5:1e:
25:0f:90:0d:1d:0c:be:8e:0c:2e:27:53:ad:25:44:57:e1:42:
1c:67:6d:f8:56:a5:8d:64:3c:ee:8c:df:6f:99:42:e3:cc:2c:
ab:bd:ef:2f:46:d1:a4:67:86:a5:33:3d:4b:cd:b2:e7:14:67:
95:cc:82:b2:40:7b:bf:91:5a:ad:d1:7c:e2:c7:93:8d:e8:f5:
3f:13:15:0d:b4:88:20:14:cb:26:de:fc:90:46:10:65:ad:fe:
34:5e:a8:2a:df:99:12:f0:45:88:32:39:3a:5a:20:45:e6:cd:
a8:e4:98:8a:ba:85:fe:6e:38:a0:88:92:d4:3f:de:48:63:be:
3f:ff:f6:8a:ab:93:b3:33:d3:25:92:77:a3:3a:49:3a:b8:45:
0d:4b:2f:25:aa:19:ac:af:9f:90:c5:2e:cf:e5:b9:79:3c:b4:
2c:b0:10:e9:e8:ff:37:5a:c9:e6:77:44:92:a9:cb:f6:03:a9:
bf:c2:15:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVHXzAYStbpe3DM2MY69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw
ODFhMjkwHhcNMjUwMTMxMTgwMDE4WhcNMjUwMjAxMTgwMDE4WjAzMTEwLwYDVQQD
Eyg0YTI2YzRjZWE1NWEzYmU4YjgxYzk1Yzk3MmZjZjY4ZTFjYzg0YzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxENqd+7/W91rXMO+TqM87DIIYD7
T1+czuqv56hRLDM1c7pmitr/aDZ4sTqnCYPoGpNsIbmwvKkM4alHQwQyE53actnq
MLWQa0JcdAt7/Iz24j2xQHaSdgYTAqv0gUlRYEvPt5+YjBD6PzJiemrnLYF9u8yT
oCKShvOpsCHFTMhYuX5ugmKacMvLX3ZvLCXXx4b272oHbI823fWMhlYOlrHAwvUK
dpCHBHmfDPqKuK49wtJXq9Kld03fjZQvleWGqBjGmeHXM48Cqw91g0R94BicHeZV
DMApfv8xHpsanG+mZzZ0y8c+ahKfETYDV5Q0nvWzkSqwVk8afpu1HFNFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEomxM6lWjvouByVyXL89o4cyEw7MB8GA1UdIwQY
MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt
NWFjNmZkZmRjMGNjLzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj
LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgEtV/Wx
prmKq7zsnzP4tvDAg4fNRmvu8NmeRjH1bALEdK47BepOCTinrT3K1Z0eezIWuape
zlKpaDwfCFqJrZdx8iHCTdUeJQ+QDR0Mvo4MLidTrSVEV+FCHGdt+FaljWQ87ozf
b5lC48wsq73vL0bRpGeGpTM9S82y5xRnlcyCskB7v5FardF84seTjej1PxMVDbSI
IBTLJt78kEYQZa3+NF6oKt+ZEvBFiDI5OlogRebNqOSYirqF/m44oIiS1D/eSGO+
P//2iquTszPTJZJ3ozpJOrhFDUsvJaoZrK+fkMUuz+W5eTy0LLAQ6ej/N1rJ5ndE
kqnL9gOpv8IVXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:11 2025 by rpki-client