Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: l2RtfkhRAk0FxoeTQkCigH+bTwJtUiQqLJMpWP8EJM0=
Subject key identifier: 56:98:D2:CB:02:82:C4:6A:E5:D3:A5:4B:4B:B6:93:12:97:68:08:2F
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0194BCE0850065444CA3A08FFB9C045CAFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: 608AhM3O0FjBLhPwaSMdmdKyKYzig74p/A89zSI38LA=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:00:65:44:4c:a3:a0:8f:fb:9c:04:5c:af:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=5698d2cb0282c46ae5d3a54b4bb693129768082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:13:cb:88:77:4a:60:4a:d8:d1:25:b3:8b:
e8:98:24:6e:0f:73:6c:fc:db:e1:3e:14:12:8b:3a:
e7:56:98:e3:8c:be:8c:97:06:99:58:ed:89:f4:15:
c6:a2:c4:c1:a6:e0:6c:2f:c9:a5:16:9e:ff:a9:f4:
87:45:36:f9:a1:35:62:c7:ad:34:62:1c:1a:33:88:
62:d8:45:2d:20:8a:cc:66:24:34:52:1a:a8:81:85:
21:22:46:6b:0e:b9:72:ac:1d:9f:70:88:13:20:69:
b8:f1:c8:ef:f2:b4:70:dd:1b:39:eb:b2:33:cf:83:
ce:df:f7:00:40:a9:a5:72:71:a9:1c:a6:c9:57:9f:
5d:61:18:e5:d0:78:b4:6a:d5:bc:76:bb:71:fd:dc:
6c:ce:6d:57:85:44:b9:e0:71:ed:27:d7:9f:a4:94:
0b:14:c7:ad:2b:8f:28:10:db:74:cc:de:42:7e:8d:
04:05:d3:40:21:eb:90:81:6f:5e:aa:4c:6d:37:c0:
f9:53:c2:73:24:b3:e1:68:f6:13:f4:9b:70:f5:5c:
9a:32:b9:16:2b:24:4b:12:03:6d:5a:d6:c1:29:82:
8f:c6:58:0b:8e:84:1c:2c:a1:0d:31:1c:fa:93:3c:
f2:f1:ff:d6:8b:4b:8e:b1:7a:0d:43:5e:0b:e9:c6:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:D2:CB:02:82:C4:6A:E5:D3:A5:4B:4B:B6:93:12:97:68:08:2F
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9f:65:67:91:72:52:28:48:27:7f:c0:f6:fc:dd:88:fd:f8:
ef:58:4a:79:80:70:bd:65:7b:ee:70:2d:c2:ba:42:f0:74:06:
e6:0c:62:88:fb:85:d1:3d:b7:62:c8:65:85:0b:56:ee:b7:d1:
35:30:b8:44:cc:29:ee:e6:89:d6:48:9c:f4:84:90:f4:91:65:
1f:2b:1e:d9:2f:2b:96:61:3d:75:3e:64:ac:73:28:3a:39:90:
69:17:e4:fb:b3:0a:98:e9:bc:45:c1:69:eb:c4:f6:c2:09:ea:
23:ed:4a:ee:07:11:ea:4f:79:7d:43:5f:9f:a9:ca:6c:64:bc:
43:9b:d6:1e:21:e4:45:29:4b:77:2b:27:87:1a:d9:eb:f3:b4:
52:4a:11:1d:39:c8:a3:2f:b0:76:83:0d:f1:aa:4a:97:a6:10:
83:59:a8:5d:02:7b:c1:31:47:07:f8:c7:9e:5c:04:51:5e:6f:
5e:44:f0:e7:57:a8:68:53:d5:da:07:7b:e7:dd:dd:d4:65:33:
10:a0:3d:55:f3:4a:83:15:ad:9e:8e:ec:8a:0b:4d:83:55:1d:
34:d8:69:9d:cd:4b:9b:7a:f7:26:b3:1d:ac:5b:36:f6:74:88:
f9:b1:1e:b8:6e:f7:1a:36:43:bf:26:2f:0b:26:61:3f:54:9a:
10:ca:60:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IUAZURMo6CP+5wEXK/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjUwMTMxMTUwMDE4WhcNMjUwMjAxMTUwMDE4WjAzMTEwLwYDVQQD
Eyg1Njk4ZDJjYjAyODJjNDZhZTVkM2E1NGI0YmI2OTMxMjk3NjgwODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhsTy4h3SmBK2NEls4vomCRuD3Ns
/NvhPhQSizrnVpjjjL6MlwaZWO2J9BXGosTBpuBsL8mlFp7/qfSHRTb5oTVix600
YhwaM4hi2EUtIIrMZiQ0UhqogYUhIkZrDrlyrB2fcIgTIGm48cjv8rRw3Rs567Iz
z4PO3/cAQKmlcnGpHKbJV59dYRjl0Hi0atW8drtx/dxszm1XhUS54HHtJ9efpJQL
FMetK48oENt0zN5Cfo0EBdNAIeuQgW9eqkxtN8D5U8JzJLPhaPYT9Jtw9VyaMrkW
KyRLEgNtWtbBKYKPxlgLjoQcLKENMRz6kzzy8f/Wi0uOsXoNQ14L6caMVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaY0ssCgsRq5dOlS0u2kxKXaAgvMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX59lZ5Fy
UihIJ3/A9vzdiP3471hKeYBwvWV77nAtwrpC8HQG5gxiiPuF0T23YshlhQtW7rfR
NTC4RMwp7uaJ1kic9ISQ9JFlHyse2S8rlmE9dT5krHMoOjmQaRfk+7MKmOm8RcFp
68T2wgnqI+1K7gcR6k95fUNfn6nKbGS8Q5vWHiHkRSlLdysnhxrZ6/O0UkoRHTnI
oy+wdoMN8apKl6YQg1moXQJ7wTFHB/jHnlwEUV5vXkTw51eoaFPV2gd7593d1GUz
EKA9VfNKgxWtno7sigtNg1UdNNhpnc1Lm3r3JrMdrFs29nSI+bEeuG73GjZDvyYv
CyZhP1SaEMpghA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:26:13 2025 by rpki-client