Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: PdBLqu7L71hNpOGZtmmdL2shkyaCQAhSKSzhyHJO0/M=
Subject key identifier: 01:D7:DD:74:AC:D1:3F:A2:63:5F:38:64:23:25:32:E5:0F:A6:BF:F8
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 0194BBCDB4E45ACB7E4DBB4183C4ADDCF691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 032E
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: xx9ZNXRLTMt2Ea5PGd6ZKyNAYcjcE/UqlgtbCCqBD3Q=)
2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:e4:5a:cb:7e:4d:bb:41:83:c4:ad:dc:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=01d7dd74acd13fa2635f3864232532e50fa6bff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:51:b5:5c:29:69:75:19:79:47:40:1f:a8:
13:cf:aa:5e:67:f5:b7:8b:ed:f2:c4:e5:4b:35:46:
d9:e1:2b:01:9d:f0:ab:fd:f5:58:f0:55:a4:31:47:
58:b2:47:35:65:5e:33:27:28:ff:cc:7a:8e:3f:d0:
c2:85:36:e3:df:72:9c:b5:3b:f5:ad:ff:01:75:a0:
2e:96:a2:0c:ea:46:fb:db:af:c0:34:9c:3f:46:da:
e5:69:f3:40:96:6d:bb:50:e6:c2:49:93:0a:6e:2a:
dd:0e:6a:aa:e7:c9:e8:14:a7:18:bd:91:94:08:d3:
8a:3b:a4:cb:6f:61:9a:8f:23:2c:ae:6d:0d:0e:13:
98:cb:de:fd:69:50:cd:0a:38:6d:a7:3e:07:92:a5:
9b:33:9e:86:df:f1:dc:75:81:64:20:2d:c6:f2:c7:
64:73:69:90:15:52:d6:fe:8b:93:f0:fc:78:2d:c8:
21:6f:44:e7:fb:15:19:4c:51:b2:79:0d:c0:d3:85:
d5:91:7d:a6:12:b6:b1:c1:e9:6d:f7:9d:68:ab:b3:
e2:2a:c0:1a:ea:c9:af:53:02:b1:88:5e:a5:35:4e:
c2:01:ca:dc:15:7d:33:83:43:2b:61:55:6e:f5:3b:
a6:91:74:54:45:56:b0:00:27:c8:8f:34:ca:d1:eb:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:DD:74:AC:D1:3F:A2:63:5F:38:64:23:25:32:E5:0F:A6:BF:F8
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d3:fd:83:19:14:4d:9f:53:92:fc:f8:5a:04:f0:0d:69:b3:
4d:6b:4c:d9:1a:ea:bc:47:ca:91:db:6d:5c:34:af:fd:46:74:
08:5b:1c:40:87:4d:f0:75:41:3c:44:8d:be:43:4a:df:67:cd:
ae:52:11:56:ba:59:7a:2c:b2:90:7d:c9:95:3f:03:7d:4a:75:
2d:01:47:31:21:fd:b7:dc:f7:f1:b8:c8:4e:1d:a1:c7:56:7b:
04:44:23:10:3e:8a:fe:bb:fd:b2:21:c8:4e:46:7c:ea:67:ee:
bb:e7:42:2e:21:5b:c3:af:2e:4e:ac:78:1d:95:5d:47:7f:b2:
57:cc:7b:3a:63:a0:a3:cd:54:2b:bb:a0:4e:a2:cb:e7:d2:cf:
f2:c9:f7:5e:74:39:3c:66:61:dc:7b:e6:e8:28:34:89:6f:fc:
c0:10:ab:42:e8:38:74:56:88:e6:cc:ff:6e:96:4e:88:18:67:
59:95:79:86:a9:5b:e8:e6:2a:5a:91:d9:c8:bd:93:e5:03:51:
b0:24:9d:06:45:15:b9:cc:3c:93:f7:fb:dd:23:9c:5f:ab:40:
4c:00:a2:61:75:82:86:fa:d3:f9:18:d4:62:8a:7a:57:aa:0e:
6b:c6:8c:10:f3:04:81:e6:c4:a8:ac:ab:41:36:1d:a2:81:f6:
25:f4:f7:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbTkWst+TbtBg8St3PaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjViNDkxM2NjNzhlNDA4MDNjMDBiZWM2YjFhOWRjNDhm
ZjM2ODQwHhcNMjUwMTMxMTAwMDA4WhcNMjUwMjAxMTAwMDA4WjAzMTEwLwYDVQQD
EygwMWQ3ZGQ3NGFjZDEzZmEyNjM1ZjM4NjQyMzI1MzJlNTBmYTZiZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jJRtVwpaXUZeUdAH6gTz6peZ/W3
i+3yxOVLNUbZ4SsBnfCr/fVY8FWkMUdYskc1ZV4zJyj/zHqOP9DChTbj33KctTv1
rf8BdaAulqIM6kb726/ANJw/RtrlafNAlm27UObCSZMKbirdDmqq58noFKcYvZGU
CNOKO6TLb2GajyMsrm0NDhOYy979aVDNCjhtpz4HkqWbM56G3/HcdYFkIC3G8sdk
c2mQFVLW/ouT8Px4Lcghb0Tn+xUZTFGyeQ3A04XVkX2mEraxwelt951oq7PiKsAa
6smvUwKxiF6lNU7CAcrcFX0zg0MrYVVu9TumkXRURVawACfIjzTK0esdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHX3XSs0T+iY184ZCMlMuUPpr/4MB8GA1UdIwQY
MBaAFIO1tJE8x45AgDwAvsaxqdxI/zaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2Yt
ODY3OTY1ZWI1MGNhLzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2YtODY3OTY1ZWI1MGNh
LzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdP9gxkU
TZ9Tkvz4WgTwDWmzTWtM2RrqvEfKkdttXDSv/UZ0CFscQIdN8HVBPESNvkNK32fN
rlIRVrpZeiyykH3JlT8DfUp1LQFHMSH9t9z38bjITh2hx1Z7BEQjED6K/rv9siHI
TkZ86mfuu+dCLiFbw68uTqx4HZVdR3+yV8x7OmOgo81UK7ugTqLL59LP8sn3XnQ5
PGZh3Hvm6Cg0iW/8wBCrQug4dFaI5sz/bpZOiBhnWZV5hqlb6OYqWpHZyL2T5QNR
sCSdBkUVucw8k/f73SOcX6tATACiYXWChvrT+RjUYop6V6oOa8aMEPMEgebEqKyr
QTYdooH2JfT31A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:39 2025 by rpki-client