Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
File: gU3w5sDcpazuCDqMcwTUXz0z1W0.mft (raw, json)
Hash identifier: 2XUy7w4rWREMKBerxRFyj2pDvYHaTCeNxsw1d6Rq1s8=
Subject key identifier: C1:B3:0C:1E:43:BD:97:30:96:7C:DF:53:FD:8B:18:54:F3:45:98:D3
Authority key identifier: 81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
Certificate issuer: /CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Certificate serial: 0194BBCEFE1616D02C1B7C27047F649F9C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: gU3w5sDcpazuCDqMcwTUXz0z1W0.crl (hash: XZ+/50xEkAsIgTL4IWUxqXI4bRTCKhEmGFQlx+fHOcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:16:16:d0:2c:1b:7c:27:04:7f:64:9f:9c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=c1b30c1e43bd9730967cdf53fd8b1854f34598d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:d9:89:5c:e5:99:e0:3e:a8:83:d5:2f:cb:
b9:ff:10:0d:94:5b:83:d1:b8:51:c9:e2:44:10:11:
2b:48:32:61:1e:81:fe:7d:48:45:3d:03:d3:6e:73:
f0:04:86:33:d8:f9:e7:d0:c4:e0:ae:5c:34:7d:10:
13:2d:4d:6a:9b:d1:ec:90:da:4c:97:24:ac:11:ac:
41:60:4c:36:b9:6f:f5:1c:ac:07:d4:f9:68:13:e7:
dc:69:9e:82:06:36:a8:d8:79:27:36:1a:ed:58:80:
9d:fa:6b:10:3e:98:f4:5d:f0:4f:74:46:62:22:66:
6e:c5:88:0f:8a:c0:1e:1f:04:20:6b:6a:cc:db:77:
0e:2f:ad:fe:aa:f2:2f:fe:27:b0:4a:6f:47:1e:72:
ee:7d:ce:24:e0:5a:eb:38:a8:ad:3f:d2:52:6c:0f:
04:6d:81:63:a8:94:29:77:c5:8b:b5:0f:b1:ea:de:
04:9d:37:ee:6f:2c:8d:5d:5c:79:d6:85:f3:1c:88:
6d:78:49:35:43:23:c4:0c:c2:dc:79:d6:0e:a7:06:
ef:5b:97:be:37:9d:10:d3:b7:89:e0:a7:03:e3:e3:
85:28:78:ff:70:cf:a3:ff:57:6c:c8:d9:65:27:d6:
cb:a2:c8:4d:da:2d:75:63:71:39:47:2b:e5:88:31:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:0C:1E:43:BD:97:30:96:7C:DF:53:FD:8B:18:54:F3:45:98:D3
X509v3 Authority Key Identifier:
keyid:81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:50:38:78:3e:bf:17:84:6b:22:6b:58:6a:68:c5:5b:a6:
62:42:24:65:54:f8:e4:a2:cb:c6:32:77:d2:06:b3:f5:4a:61:
08:4c:97:0c:12:ae:a3:ec:86:da:d6:42:a9:fc:3e:d5:d5:41:
79:dd:98:ae:60:f2:ce:5e:4c:db:fe:67:e2:ee:50:09:7e:58:
80:dc:a0:e5:22:bb:9a:7d:2d:27:a8:99:20:59:f6:6b:40:59:
26:39:4f:60:e3:fc:e3:5a:3a:65:d2:36:f6:a9:a6:8f:5d:aa:
56:a2:e2:f1:d5:b0:f2:8d:16:a5:aa:9d:07:9b:19:cd:be:36:
5e:ca:28:ac:4a:12:5f:ce:73:09:09:a4:02:e8:b9:9a:1d:3d:
c6:b6:99:32:06:70:b1:51:00:2f:98:a7:6e:fc:c7:73:4c:59:
f0:61:fd:04:9c:8f:87:5a:02:cc:69:9f:bc:22:8b:a2:6e:de:
67:92:9e:52:0c:b9:fb:ec:85:81:8e:d2:d5:af:55:c9:78:6d:
7a:eb:71:3b:cd:d0:a8:e1:db:b9:17:20:e4:18:4f:89:1f:1e:
a5:8f:e0:4d:48:a0:ca:93:96:c6:79:c1:e3:81:1a:77:64:aa:
4d:aa:24:e8:da:66:f5:5a:4c:5d:3a:f2:99:27:ca:c2:d6:50:
89:a6:6d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zv4WFtAsG3wnBH9kn5yBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNGRmMGU2YzBkY2E1YWNlZTA4M2E4YzczMDRkNDVmM2Qz
M2Q1NmQwHhcNMjUwMTMxMTAwMTMyWhcNMjUwMjAxMTAwMTMyWjAzMTEwLwYDVQQD
EyhjMWIzMGMxZTQzYmQ5NzMwOTY3Y2RmNTNmZDhiMTg1NGYzNDU5OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvInZiVzlmeA+qIPVL8u5/xANlFuD
0bhRyeJEEBErSDJhHoH+fUhFPQPTbnPwBIYz2Pnn0MTgrlw0fRATLU1qm9HskNpM
lySsEaxBYEw2uW/1HKwH1PloE+fcaZ6CBjao2HknNhrtWICd+msQPpj0XfBPdEZi
ImZuxYgPisAeHwQga2rM23cOL63+qvIv/iewSm9HHnLufc4k4FrrOKitP9JSbA8E
bYFjqJQpd8WLtQ+x6t4EnTfubyyNXVx51oXzHIhteEk1QyPEDMLcedYOpwbvW5e+
N50Q07eJ4KcD4+OFKHj/cM+j/1dsyNllJ9bLoshN2i11Y3E5RyvliDEmbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGzDB5DvZcwlnzfU/2LGFTzRZjTMB8GA1UdIwQY
MBaAFIFN8ObA3KWs7gg6jHME1F89M9VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MTQwZWUtNmZlZi00NmFjLWJlMzIt
ZDBkMmYyY2E4Y2JjLzEvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MTQwZWUtNmZlZi00NmFjLWJlMzItZDBkMmYyY2E4Y2Jj
LzEvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxRQOHg+
vxeEayJrWGpoxVumYkIkZVT45KLLxjJ30gaz9UphCEyXDBKuo+yG2tZCqfw+1dVB
ed2YrmDyzl5M2/5n4u5QCX5YgNyg5SK7mn0tJ6iZIFn2a0BZJjlPYOP841o6ZdI2
9qmmj12qVqLi8dWw8o0WpaqdB5sZzb42XsoorEoSX85zCQmkAui5mh09xraZMgZw
sVEAL5inbvzHc0xZ8GH9BJyPh1oCzGmfvCKLom7eZ5KeUgy5++yFgY7S1a9VyXht
eutxO83QqOHbuRcg5BhPiR8epY/gTUigypOWxnnB44Ead2SqTaok6Npm9VpMXTry
mSfKwtZQiaZt5g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:21 2025 by rpki-client