
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: MwJIaZpqwVMU7s37NLkl1c3DiGZHoCLWz4LPUfgwSNk=
Subject key identifier: 77:3F:F4:BB:42:0A:0B:92:5B:70:6E:6F:3D:B6:A7:39:55:F1:C9:84
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 0194BD4E6AC3E1305C6932BF2D5DBDF89F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 12E8
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: NEyDTqlcX5OCEhlMkSGLk38XcaA.roa (hash: 7WujgbjKtPDl4LQ5qeE/+lNldq0PYtaOD+dsUKWxhso=)
2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: HujBy/zrUUYuX2uTj6rsJUhbWQ+bsru2T1Mdu76nfEU=)
3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6a:c3:e1:30:5c:69:32:bf:2d:5d:bd:f8:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=773ff4bb420a0b925b706e6f3db6a73955f1c984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:9f:68:ea:cc:84:b3:e1:9f:56:f3:aa:2e:
98:e3:c4:e0:53:2d:a7:9f:43:10:10:8f:65:97:17:
3f:0d:ee:6c:18:a3:e9:3a:3d:34:4e:92:51:99:4a:
96:33:b4:94:69:6c:cf:54:07:dd:a7:78:95:06:61:
f0:1a:2e:1e:49:33:d7:e4:82:35:1f:75:88:32:33:
22:43:81:b5:42:be:0c:90:90:df:22:e6:f2:f1:30:
3a:0c:ff:8b:1a:28:e9:50:83:c1:58:a4:d4:d8:a0:
73:5e:5d:84:de:66:2c:10:d4:da:27:88:28:e9:69:
1a:8a:ad:df:f8:21:9f:44:8a:06:8d:c2:27:0a:f3:
ab:c0:8a:33:b4:2c:f2:c6:46:c4:ec:50:4b:92:d4:
f7:ad:ef:a6:8d:85:bd:95:31:9d:cb:c8:0d:f5:8e:
92:87:80:20:54:de:ef:b6:8f:b0:f4:77:e6:19:48:
8a:87:fa:c1:57:1e:5e:d5:ff:d2:ac:8c:a6:d9:79:
28:7a:57:ef:46:c3:8d:18:03:06:91:64:5e:57:dd:
f1:74:d6:02:d2:f2:f2:d7:6a:80:3a:d3:e8:67:8d:
6a:88:5c:0a:08:e9:23:3d:d9:d3:7d:aa:5d:30:82:
95:2c:04:a5:46:c1:a8:04:36:05:0a:d3:7a:84:dc:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:F4:BB:42:0A:0B:92:5B:70:6E:6F:3D:B6:A7:39:55:F1:C9:84
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0f:fd:12:a5:6a:93:05:45:c2:7d:d3:dc:c3:aa:e9:34:ae:
32:83:5d:98:9b:41:82:59:96:a8:3f:35:e1:57:9a:32:b5:e8:
49:bc:9e:60:a3:90:2c:ad:c9:5d:93:0e:0e:7a:f3:5d:c4:93:
e5:b1:9a:d3:6d:52:08:00:8c:52:a5:a1:a6:f0:25:60:f7:cc:
8e:c3:b3:c3:cf:08:83:a9:6a:e1:1d:16:fa:63:28:ee:c9:f9:
eb:a6:50:62:57:81:3b:45:b0:4e:26:71:23:dc:f7:3f:1e:04:
37:b5:48:95:90:4b:71:a8:73:a0:d4:27:ef:8f:ca:04:e0:a6:
c4:35:e1:93:f7:c9:57:0f:74:92:aa:03:e6:5d:52:4b:58:6f:
1a:50:37:a9:89:dc:b2:85:57:7b:84:c6:2d:7b:7d:3f:55:5d:
3b:04:72:93:f8:d7:21:23:7a:9b:fc:58:d9:41:13:5e:70:98:
af:8f:40:aa:de:22:21:29:e4:1d:d6:72:f4:b9:57:51:ab:a1:
46:d9:fd:fd:e9:cb:2f:7a:26:fe:7d:fe:ee:b7:0e:04:dc:c4:
e2:88:69:d9:ef:07:1a:b0:79:79:47:f6:d8:f4:c5:31:12:ca:
b1:26:25:4f:ac:da:9b:fc:73:f6:d7:8f:b5:39:fc:76:31:89:
27:f3:5e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmrD4TBcaTK/LV29+J+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw
MzIyZjkwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
Eyg3NzNmZjRiYjQyMGEwYjkyNWI3MDZlNmYzZGI2YTczOTU1ZjFjOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcyfaOrMhLPhn1bzqi6Y48TgUy2n
n0MQEI9llxc/De5sGKPpOj00TpJRmUqWM7SUaWzPVAfdp3iVBmHwGi4eSTPX5II1
H3WIMjMiQ4G1Qr4MkJDfIuby8TA6DP+LGijpUIPBWKTU2KBzXl2E3mYsENTaJ4go
6Wkaiq3f+CGfRIoGjcInCvOrwIoztCzyxkbE7FBLktT3re+mjYW9lTGdy8gN9Y6S
h4AgVN7vto+w9HfmGUiKh/rBVx5e1f/SrIym2XkoelfvRsONGAMGkWReV93xdNYC
0vLy12qAOtPoZ41qiFwKCOkjPdnTfapdMIKVLASlRsGoBDYFCtN6hNxN9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc/9LtCCguSW3Bubz22pzlV8cmEMB8GA1UdIwQY
MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt
ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5
LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ/9EqVq
kwVFwn3T3MOq6TSuMoNdmJtBglmWqD814VeaMrXoSbyeYKOQLK3JXZMODnrzXcST
5bGa021SCACMUqWhpvAlYPfMjsOzw88Ig6lq4R0W+mMo7sn566ZQYleBO0WwTiZx
I9z3Px4EN7VIlZBLcahzoNQn74/KBOCmxDXhk/fJVw90kqoD5l1SS1hvGlA3qYnc
soVXe4TGLXt9P1VdOwRyk/jXISN6m/xY2UETXnCYr49Aqt4iISnkHdZy9LlXUauh
Rtn9/enLL3om/n3+7rcOBNzE4ohp2e8HGrB5eUf22PTFMRLKsSYlT6zam/xz9teP
tTn8djGJJ/NemA==
-----END CERTIFICATE-----
Generated at Thu May 1 06:57:52 2025 by rpki-client