Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: WpwLs2SoMI47G0WIcLzYdLMAHpD8l8L3typMawGw+HM=
Subject key identifier: FD:A2:5C:72:BB:B8:A3:08:87:FF:01:42:B9:13:D5:35:D1:EC:5C:68
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 0194BBCE98DF6AA46E7CE3EF702ED3ABE900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: stHdmkHnWo/X/peeRXNHddaYHgRyc3JyZukDOobIDeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:df:6a:a4:6e:7c:e3:ef:70:2e:d3:ab:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=fda25c72bbb8a30887ff0142b913d535d1ec5c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:67:cf:03:3e:61:26:75:d6:a3:1b:ab:0f:
39:b9:41:bd:67:89:1b:63:29:83:7c:5a:12:99:3f:
2c:cd:c2:57:4a:c6:2b:a4:50:49:64:24:bd:1b:ed:
02:6d:2b:d7:4f:4c:70:a0:63:85:77:10:a2:90:01:
b1:0c:74:8a:36:f6:06:b6:58:5c:b0:90:84:90:e0:
07:e8:7c:69:c6:95:15:7d:cb:29:79:05:6a:06:92:
93:c8:9c:48:15:9b:30:88:a9:3b:14:23:a6:49:72:
1a:c8:f0:50:09:d3:24:e4:68:0f:c9:a6:10:91:cc:
c5:d0:68:b1:3c:0c:49:e5:ee:ef:73:f4:9c:ed:b1:
a7:c7:03:f6:c2:e8:b6:45:c3:ff:3b:28:dc:d1:5b:
c1:8e:c7:54:da:13:7e:d2:8c:5b:48:87:8e:e3:16:
01:37:d4:75:07:a1:df:d9:70:a3:79:d0:ae:f8:8d:
af:63:09:99:ce:ea:0e:c9:e2:0d:c1:88:94:52:5e:
c5:2c:2a:43:a1:b5:39:cc:13:63:f7:2d:eb:4c:80:
7e:57:da:f0:e1:cf:ad:b8:04:73:58:46:24:56:ff:
d8:e4:55:6c:8b:64:0c:77:ee:a9:a1:06:5a:53:e9:
86:e1:c2:e2:49:d8:e6:3b:d5:33:13:65:75:3d:b7:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:5C:72:BB:B8:A3:08:87:FF:01:42:B9:13:D5:35:D1:EC:5C:68
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:b7:dd:3e:3f:81:9e:e5:29:a2:06:06:16:03:51:12:bf:
0f:1f:8a:7a:ea:d9:49:61:c6:b9:f6:9a:19:ee:6b:9c:9a:4c:
e4:f5:6f:52:73:21:f9:d2:be:c1:be:de:e1:0e:40:be:8d:f9:
19:f8:d5:2f:66:e3:ea:d5:70:37:f9:38:dd:06:e2:ed:17:6b:
85:a3:a1:bd:9c:ce:9e:3b:64:fa:b8:7c:d6:3f:eb:12:e9:2f:
83:ac:09:65:96:6a:b7:0f:67:5b:9f:49:b9:73:ba:d7:96:58:
39:ae:18:a7:bd:c3:60:a2:e3:d5:c0:d3:61:44:1a:6a:e1:f8:
20:cc:f0:5a:73:99:14:5f:20:45:56:3c:6f:42:3c:f4:11:4c:
e3:c5:f9:78:b2:bb:0d:94:5d:34:1b:c6:2c:05:7e:4b:7c:9f:
1f:72:03:9c:26:57:4b:73:96:87:88:d5:1a:00:6d:81:46:75:
5e:54:92:e9:25:0f:f2:cd:15:55:06:8e:e3:d5:a2:92:42:1d:
5a:07:a3:f4:71:44:66:52:26:2e:0e:c8:00:24:cf:ff:ae:1c:
85:cf:42:ae:4f:0e:da:c5:9d:60:2e:d3:77:d0:40:7c:3f:36:
9a:9f:72:08:fe:e3:1f:8e:3e:c2:50:7e:cd:bd:de:4f:40:ea:
bc:c2:29:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpjfaqRufOPvcC7Tq+kAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDgyOTFjZmM3MjhkMDE3NjBlYzQyNzgxMDk2YWM2YjRj
NzRhNWQwHhcNMjUwMTMxMTAwMTA2WhcNMjUwMjAxMTAwMTA2WjAzMTEwLwYDVQQD
EyhmZGEyNWM3MmJiYjhhMzA4ODdmZjAxNDJiOTEzZDUzNWQxZWM1YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqpnzwM+YSZ11qMbqw85uUG9Z4kb
YymDfFoSmT8szcJXSsYrpFBJZCS9G+0CbSvXT0xwoGOFdxCikAGxDHSKNvYGtlhc
sJCEkOAH6HxpxpUVfcspeQVqBpKTyJxIFZswiKk7FCOmSXIayPBQCdMk5GgPyaYQ
kczF0GixPAxJ5e7vc/Sc7bGnxwP2wui2RcP/Oyjc0VvBjsdU2hN+0oxbSIeO4xYB
N9R1B6Hf2XCjedCu+I2vYwmZzuoOyeINwYiUUl7FLCpDobU5zBNj9y3rTIB+V9rw
4c+tuARzWEYkVv/Y5FVsi2QMd+6poQZaU+mG4cLiSdjmO9UzE2V1Pbc7AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2iXHK7uKMIh/8BQrkT1TXR7FxoMB8GA1UdIwQY
MBaAFNoIKRz8co0Bdg7EJ4EJasa0x0pdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgt
YjA1Y2ZmYjE4N2ZhLzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgtYjA1Y2ZmYjE4N2Zh
LzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViK33T4/
gZ7lKaIGBhYDURK/Dx+KeurZSWHGufaaGe5rnJpM5PVvUnMh+dK+wb7e4Q5Avo35
GfjVL2bj6tVwN/k43Qbi7RdrhaOhvZzOnjtk+rh81j/rEukvg6wJZZZqtw9nW59J
uXO615ZYOa4Yp73DYKLj1cDTYUQaauH4IMzwWnOZFF8gRVY8b0I89BFM48X5eLK7
DZRdNBvGLAV+S3yfH3IDnCZXS3OWh4jVGgBtgUZ1XlSS6SUP8s0VVQaO49WikkId
Wgej9HFEZlImLg7IACTP/64chc9Crk8O2sWdYC7Td9BAfD82mp9yCP7jH44+wlB+
zb3eT0DqvMIpGg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:09 2025 by rpki-client