Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File: gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier: ASUkXDKswaM6tcFXdwHcRz+8KgE42aXVJjWg3NgwlVY=
Subject key identifier: 5C:FB:1A:18:19:46:75:01:E5:DC:9D:49:30:BE:FF:5E:BE:8A:BC:0D
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer: /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial: 0194BCA9F673702ED3BB94E6CC93D1A652A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=)
2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: AfX4eDy4gr2m0CXKDUtwmVngDz8f6P3f/lK3+OChDDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f6:73:70:2e:d3:bb:94:e6:cc:93:d1:a6:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=5cfb1a1819467501e5dc9d4930beff5ebe8abc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:ce:c2:4b:cf:17:da:c8:4c:25:d2:48:7d:
4e:13:d2:a2:2c:18:4a:8f:6d:1f:c5:29:9c:22:35:
a4:50:f4:64:35:d1:f5:93:c5:e0:28:1f:38:28:88:
59:72:c7:3b:76:83:8a:43:92:5a:d9:8b:8e:65:e4:
d5:17:05:36:c6:91:dc:37:25:c6:d6:92:85:3a:55:
58:1b:59:d0:6a:ec:70:3b:d0:d7:57:b0:47:f6:04:
11:a2:fa:cd:bb:94:3b:ba:8c:aa:7d:1a:48:71:12:
83:56:36:9e:7f:72:b9:ff:f6:1c:fb:c6:29:1a:64:
88:20:47:8b:ec:2b:46:d4:fa:f7:33:db:7c:91:0a:
a5:2f:a5:b6:12:c0:dc:48:ca:93:bb:00:af:45:2c:
c3:1e:f8:98:b5:67:f8:e7:65:bc:99:55:02:bc:4c:
d6:c7:06:5a:38:79:0f:0d:7f:19:06:24:f1:5c:e8:
ee:dd:80:ec:bf:be:bd:c6:a9:74:40:dc:61:0d:2a:
bc:2c:f2:ef:53:13:fb:63:11:06:4b:db:ca:c4:22:
93:bb:77:fb:cf:2a:ca:42:18:0f:f7:c2:ca:43:34:
40:c0:09:06:f2:b2:10:5f:29:7c:26:33:ba:11:c5:
ea:90:4f:21:43:19:ab:49:dd:2d:25:97:7f:c7:65:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FB:1A:18:19:46:75:01:E5:DC:9D:49:30:BE:FF:5E:BE:8A:BC:0D
X509v3 Authority Key Identifier:
keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ce:67:bb:a1:3e:b5:22:92:59:06:be:b0:27:6b:84:c0:81:
dd:d3:a7:00:c0:f5:28:5c:9d:73:55:e8:91:59:3b:92:b4:2d:
35:ff:f9:58:83:f1:77:7a:e4:33:5e:11:23:11:77:44:dc:20:
6b:cb:2c:63:48:96:82:3c:89:82:ca:7f:cc:3c:8a:be:26:64:
08:f3:a4:6d:bf:cd:af:f1:7a:fa:d2:cb:a5:08:18:0c:c9:d3:
29:c2:12:03:05:27:96:27:e7:42:89:85:93:42:87:46:26:94:
bb:a9:84:6d:c3:6d:e8:45:a3:af:c4:0a:76:5b:79:c9:39:d1:
7c:59:4c:a5:04:26:65:04:c6:45:f1:75:f3:2d:a1:78:6a:f7:
ae:c5:1f:a4:f5:00:88:6e:4c:07:cc:2c:68:fa:db:88:be:f8:
7d:7e:c3:b4:24:b1:e3:e9:a8:6b:35:7b:e7:eb:f1:36:da:a2:
11:e5:24:ef:09:16:29:d1:40:c0:66:60:86:28:45:ab:5f:b7:
47:84:ee:83:db:a3:ac:6c:dd:ae:c3:1c:8d:1b:8e:45:d2:67:
58:01:b2:7e:60:25:94:a0:e3:63:b2:96:86:7c:90:2c:4b:f7:
09:ac:f5:2d:14:3f:b7:c1:16:1e:7c:bd:50:81:6b:90:6c:1b:
17:6e:b6:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfZzcC7Tu5TmzJPRplKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzA5NTY4M2IyOTQ3ZGRkNDllZWVhYzBkYmQ5ZWE5NTRh
ZWExNDQwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
Eyg1Y2ZiMWExODE5NDY3NTAxZTVkYzlkNDkzMGJlZmY1ZWJlOGFiYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNvOwkvPF9rITCXSSH1OE9KiLBhK
j20fxSmcIjWkUPRkNdH1k8XgKB84KIhZcsc7doOKQ5Ja2YuOZeTVFwU2xpHcNyXG
1pKFOlVYG1nQauxwO9DXV7BH9gQRovrNu5Q7uoyqfRpIcRKDVjaef3K5//Yc+8Yp
GmSIIEeL7CtG1Pr3M9t8kQqlL6W2EsDcSMqTuwCvRSzDHviYtWf452W8mVUCvEzW
xwZaOHkPDX8ZBiTxXOju3YDsv769xql0QNxhDSq8LPLvUxP7YxEGS9vKxCKTu3f7
zyrKQhgP98LKQzRAwAkG8rIQXyl8JjO6EcXqkE8hQxmrSd0tJZd/x2VUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz7GhgZRnUB5dydSTC+/16+irwNMB8GA1UdIwQY
MBaAFIAwlWg7KUfd1J7urA29nqlUrqFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMt
NmJkZDM0NzhkMTBjLzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMtNmJkZDM0NzhkMTBj
LzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs5nu6E+
tSKSWQa+sCdrhMCB3dOnAMD1KFydc1XokVk7krQtNf/5WIPxd3rkM14RIxF3RNwg
a8ssY0iWgjyJgsp/zDyKviZkCPOkbb/Nr/F6+tLLpQgYDMnTKcISAwUnlifnQomF
k0KHRiaUu6mEbcNt6EWjr8QKdlt5yTnRfFlMpQQmZQTGRfF18y2heGr3rsUfpPUA
iG5MB8wsaPrbiL74fX7DtCSx4+moazV75+vxNtqiEeUk7wkWKdFAwGZghihFq1+3
R4Tug9ujrGzdrsMcjRuORdJnWAGyfmAllKDjY7KWhnyQLEv3Caz1LRQ/t8EWHny9
UIFrkGwbF262uQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:58 2025 by rpki-client