Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: VXHwiDHisjjhvBij7gCRHvKJ3sQl6R7NEobPlgwhJeg=
Subject key identifier: B6:06:FD:9B:73:10:C9:86:17:93:C4:89:39:53:F3:6A:EF:87:B2:7D
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 0194BBCE0CB7DBA734FE0DB684C51FDF9816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: bN4imDIuLcKTvqbDATpOoEOrKqxQEXtilKD5t0Rww2w=)
2: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:b7:db:a7:34:fe:0d:b6:84:c5:1f:df:98:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=b606fd9b7310c9861793c4893953f36aef87b27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:cf:60:25:7e:61:af:d5:1a:3f:be:cc:d6:
7c:73:d4:73:6a:15:e1:76:dd:fc:a7:45:59:0b:dc:
2d:a1:38:13:c5:16:73:fa:d2:7d:38:e8:25:62:94:
28:ce:3c:72:76:51:2c:7a:b4:86:33:34:6a:b6:9f:
e6:d4:0b:01:3e:5f:50:f6:7b:47:bd:8d:3a:0b:b6:
aa:30:ad:da:39:38:40:4b:14:3d:af:a6:8a:99:af:
21:55:47:40:61:5a:8a:9e:c1:94:66:67:45:d4:67:
24:02:1d:a2:ed:e9:58:b1:33:ab:2b:7d:63:7d:bb:
e7:d3:95:05:3e:a5:79:26:a2:74:2f:07:37:06:84:
e3:81:f8:50:18:c4:a1:6e:80:de:9a:a3:a3:25:6d:
52:92:8b:c4:55:18:ca:8b:b5:fb:1d:72:7c:2c:27:
a2:11:86:86:d9:43:e8:a4:d9:11:81:db:d3:d1:07:
d0:78:98:b4:26:a1:b5:58:94:3b:99:41:03:b6:fb:
e8:d0:4f:c4:8d:f2:30:5f:eb:51:7d:a1:06:09:c3:
bb:cd:7e:30:a2:0a:ec:3a:07:a1:33:42:9a:6a:e6:
91:3c:e7:0a:73:17:52:ca:36:fc:12:19:6b:b1:25:
f1:26:e1:c4:57:e0:22:3a:9c:1c:3c:02:30:d3:eb:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:FD:9B:73:10:C9:86:17:93:C4:89:39:53:F3:6A:EF:87:B2:7D
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:ca:46:76:18:34:5c:1c:a6:c9:83:77:90:6a:5a:fc:22:
e2:43:6d:ab:c9:b6:93:5c:8d:f4:9b:c2:ee:00:1c:9a:71:97:
d7:f5:78:5c:10:0f:8b:8b:c3:cc:8c:1c:b7:0b:83:dd:36:12:
85:07:c6:07:16:b6:a1:a9:b0:fb:99:d6:db:b3:3e:eb:e5:41:
65:76:cc:a8:0f:06:01:58:fd:f1:d7:04:eb:4e:34:0d:44:99:
4b:ca:9d:60:1f:bd:05:8d:f4:84:bc:8c:00:16:11:2e:6f:df:
ac:79:03:4c:1a:9a:87:20:43:f5:af:b2:57:f3:be:8a:73:22:
c5:ba:87:75:87:40:c2:aa:9e:f7:07:43:3c:9e:36:e1:56:cd:
0a:e5:01:50:36:aa:ce:44:a7:ce:fa:42:9d:e8:38:21:2e:f1:
91:40:2c:0b:21:e0:81:78:b0:1e:db:69:a6:91:6a:07:4d:8e:
11:ff:c5:3d:04:2d:8b:ac:14:4e:00:e7:d2:bf:72:26:99:fd:
35:9e:72:97:d5:08:3e:d2:69:53:cc:03:6e:73:b0:b9:35:cd:
09:94:89:39:35:9c:2a:a5:4f:ef:cd:b4:f0:3c:e6:f8:c9:79:
a0:68:17:85:ea:10:48:6e:be:1b:12:67:85:ff:3b:ed:b5:16:
f4:04:a3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgy326c0/g22hMUf35gWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx
MWUyMmEwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
EyhiNjA2ZmQ5YjczMTBjOTg2MTc5M2M0ODkzOTUzZjM2YWVmODdiMjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19bPYCV+Ya/VGj++zNZ8c9RzahXh
dt38p0VZC9wtoTgTxRZz+tJ9OOglYpQozjxydlEserSGMzRqtp/m1AsBPl9Q9ntH
vY06C7aqMK3aOThASxQ9r6aKma8hVUdAYVqKnsGUZmdF1GckAh2i7elYsTOrK31j
fbvn05UFPqV5JqJ0Lwc3BoTjgfhQGMShboDemqOjJW1SkovEVRjKi7X7HXJ8LCei
EYaG2UPopNkRgdvT0QfQeJi0JqG1WJQ7mUEDtvvo0E/EjfIwX+tRfaEGCcO7zX4w
ogrsOgehM0KaauaRPOcKcxdSyjb8EhlrsSXxJuHEV+AiOpwcPAIw0+tOOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYG/ZtzEMmGF5PEiTlT82rvh7J9MB8GA1UdIwQY
MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt
MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0
LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz7KRnYY
NFwcpsmDd5BqWvwi4kNtq8m2k1yN9JvC7gAcmnGX1/V4XBAPi4vDzIwctwuD3TYS
hQfGBxa2oamw+5nW27M+6+VBZXbMqA8GAVj98dcE6040DUSZS8qdYB+9BY30hLyM
ABYRLm/frHkDTBqahyBD9a+yV/O+inMixbqHdYdAwqqe9wdDPJ424VbNCuUBUDaq
zkSnzvpCneg4IS7xkUAsCyHggXiwHttpppFqB02OEf/FPQQti6wUTgDn0r9yJpn9
NZ5yl9UIPtJpU8wDbnOwuTXNCZSJOTWcKqVP78208Dzm+Ml5oGgXheoQSG6+GxJn
hf877bUW9ASjZg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:22 2025 by rpki-client