Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: jOZx4FLWeVKhHMrzZAuNIhXVj/CD6xubjvgIO7l0V+w=
Subject key identifier: 8E:0B:FF:7C:5D:C9:CA:90:80:1D:E7:A2:05:34:89:0C:81:58:62:31
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0194BCE09353346B4BF45546659F5DE67B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: QYt1kOzYYD9trgHtzQcxbQsgOmBbpqql3vujFh6mEOo=)
2: kgq39cG2-THrWvpc0x3M2SFDQTk.roa (hash: 3gB7a3Q32qGjK2EZEKxa95uj+Y7WZ3y01C1TiOtuHMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:53:34:6b:4b:f4:55:46:65:9f:5d:e6:7b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=8e0bff7c5dc9ca90801de7a20534890c81586231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:6d:30:49:db:0d:32:cb:87:eb:2a:58:ec:
bd:8e:88:1c:a7:ea:40:9d:cc:eb:01:17:70:89:c4:
15:98:02:b0:3c:16:c1:6b:7e:a8:46:d1:83:24:d1:
e3:8a:95:63:e0:11:8a:fa:42:d6:cd:b8:72:c4:0d:
c7:28:91:57:85:72:48:84:4d:b5:8d:54:45:58:64:
9f:85:21:80:c5:c8:c4:5d:9e:01:52:6e:e4:70:e5:
4b:7f:36:f1:b5:0a:98:0d:42:59:1e:1a:2f:55:28:
fa:d5:41:23:a2:4b:98:42:df:06:c2:96:57:d9:95:
9e:56:ba:2d:a4:22:4c:c5:05:15:36:bf:20:7b:b2:
04:6d:7b:3a:49:4a:e0:9b:b9:5b:cc:5d:c1:1d:b0:
a7:85:09:94:7a:c5:af:d6:5b:32:bd:f9:dd:f6:61:
a2:c3:c8:36:2b:ed:07:b1:ff:4e:46:0c:ad:ae:ee:
93:bc:19:b7:cc:1b:39:61:25:f8:0f:d8:31:77:6b:
f9:3c:1c:fb:11:67:2d:01:08:7b:e3:ff:88:90:1f:
8e:ce:90:7e:76:7e:3e:6b:d9:7f:08:86:02:bd:75:
bf:e1:a6:8c:c5:1f:ac:f0:40:16:b8:7e:6a:52:fd:
94:84:04:51:b2:da:85:11:a9:6c:3e:b2:c7:18:39:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0B:FF:7C:5D:C9:CA:90:80:1D:E7:A2:05:34:89:0C:81:58:62:31
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2a:8d:27:69:5b:e9:e3:00:24:fe:a0:c3:e9:fb:a2:c7:44:
61:02:5f:39:31:50:ad:82:ee:39:6d:6d:67:71:d5:57:61:33:
72:20:5b:76:28:86:fc:e4:70:f5:f6:a5:5e:c6:18:f5:43:4a:
50:59:d0:d6:e2:4c:42:60:b1:76:38:8b:27:8b:44:11:4c:12:
97:6f:6a:a5:0d:8e:49:b2:1f:20:7b:22:13:ca:f4:1c:05:8c:
67:d8:8e:8f:2d:85:52:ca:c0:6c:b4:83:67:73:87:2c:b1:ff:
06:8e:4f:f1:1c:04:a1:dd:bc:3b:aa:7d:38:1b:44:5e:68:db:
c1:c2:2f:da:44:7b:fd:96:33:a2:1f:66:ca:0f:88:cd:0d:57:
69:8c:0b:a6:d6:a3:cb:e3:28:11:7e:c7:2a:14:20:fd:2a:0a:
31:86:40:4a:69:95:7e:48:37:5b:43:fd:f1:1c:9e:1b:96:57:
02:a1:c0:4f:21:84:02:1b:34:80:3e:b8:ec:cf:97:59:47:6f:
2c:e8:33:d3:0e:f1:c2:4c:7b:f5:c7:56:89:32:94:aa:90:4f:
e4:dd:a3:58:bb:72:22:cf:e4:08:70:37:b3:45:08:7b:af:f8:
67:57:96:6f:ab:c2:22:8c:33:a2:36:32:4e:67:c8:cd:8b:e6:
c8:27:dc:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JNTNGtL9FVGZZ9d5nt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmZmZjI4OWYyZGFkMGZjMDg0NTZiMGJhZDU0ZDdiYTQ0
OWE0OTIwHhcNMjUwMTMxMTUwMDIxWhcNMjUwMjAxMTUwMDIxWjAzMTEwLwYDVQQD
Eyg4ZTBiZmY3YzVkYzljYTkwODAxZGU3YTIwNTM0ODkwYzgxNTg2MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyVtMEnbDTLLh+sqWOy9jogcp+pA
nczrARdwicQVmAKwPBbBa36oRtGDJNHjipVj4BGK+kLWzbhyxA3HKJFXhXJIhE21
jVRFWGSfhSGAxcjEXZ4BUm7kcOVLfzbxtQqYDUJZHhovVSj61UEjokuYQt8GwpZX
2ZWeVrotpCJMxQUVNr8ge7IEbXs6SUrgm7lbzF3BHbCnhQmUesWv1lsyvfnd9mGi
w8g2K+0Hsf9ORgytru6TvBm3zBs5YSX4D9gxd2v5PBz7EWctAQh74/+IkB+OzpB+
dn4+a9l/CIYCvXW/4aaMxR+s8EAWuH5qUv2UhARRstqFEalsPrLHGDkbawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4L/3xdycqQgB3nogU0iQyBWGIxMB8GA1UdIwQY
MBaAFBn//yifLa0PwIRWsLrVTXukSaSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMt
ZDUyNTcxOGFhNDRhLzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMtZDUyNTcxOGFhNDRh
LzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiqNJ2lb
6eMAJP6gw+n7osdEYQJfOTFQrYLuOW1tZ3HVV2EzciBbdiiG/ORw9falXsYY9UNK
UFnQ1uJMQmCxdjiLJ4tEEUwSl29qpQ2OSbIfIHsiE8r0HAWMZ9iOjy2FUsrAbLSD
Z3OHLLH/Bo5P8RwEod28O6p9OBtEXmjbwcIv2kR7/ZYzoh9myg+IzQ1XaYwLptaj
y+MoEX7HKhQg/SoKMYZASmmVfkg3W0P98RyeG5ZXAqHATyGEAhs0gD647M+XWUdv
LOgz0w7xwkx79cdWiTKUqpBP5N2jWLtyIs/kCHA3s0UIe6/4Z1eWb6vCIowzojYy
TmfIzYvmyCfc5Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:40 2025 by rpki-client