Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier: IYwyZgTI0xmI8LfT7y6ivyvwm5qkENaGlIxfL+8TEuo=
Subject key identifier: 64:42:76:39:C3:CA:B3:5B:8D:BA:BE:F6:C7:5E:C5:DD:06:B3:B4:6F
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 0194BBCE5E8164CAA1A5483268FA3C87F413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number: 056C
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: apKe/nRRtkuKmF0bKvL+kq1NZRO/h/LzRLgwrNTJt0A=)
2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5e:81:64:ca:a1:a5:48:32:68:fa:3c:87:f4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=64427639c3cab35b8dbabef6c75ec5dd06b3b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:2e:85:f8:60:ae:09:02:69:77:78:6d:cf:
bd:c2:dd:07:a6:64:c8:e5:c5:8e:00:49:40:5c:f8:
d8:ff:0b:5b:4a:b3:f0:2f:15:69:c2:38:67:5b:03:
54:53:c7:b3:4d:f9:ed:76:14:a6:e6:87:87:4c:35:
a5:fb:56:83:d5:4f:99:7a:73:41:2c:3a:bf:df:bd:
4f:cb:7a:98:2b:d4:c0:82:7a:d2:a3:02:40:03:56:
d9:8e:d8:7b:a3:d6:27:06:30:a4:2d:f7:ae:64:5a:
41:c7:46:34:a3:92:15:c3:f5:b7:54:57:ac:93:d2:
11:f1:f9:b0:2e:21:0f:c7:f4:6d:fc:45:ea:96:0d:
e2:79:25:3e:6d:35:ce:dc:43:55:73:35:e8:11:97:
39:15:fc:2d:9a:62:e9:96:92:b6:16:f1:28:a8:53:
4c:d2:7f:24:0d:8d:6b:b3:0f:43:70:41:ce:b9:90:
45:11:d8:73:ce:60:a0:a5:6c:db:49:75:6d:ff:b6:
5b:50:71:78:fd:4b:34:74:3c:36:90:84:da:1b:ab:
01:70:5c:05:e0:01:2b:0b:f2:08:24:4c:4e:da:87:
ca:d3:42:83:64:04:bd:5a:4e:24:0b:84:c6:cf:63:
86:33:6e:c4:59:52:59:9f:ef:4a:81:a0:ac:20:64:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:42:76:39:C3:CA:B3:5B:8D:BA:BE:F6:C7:5E:C5:DD:06:B3:B4:6F
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:0f:42:93:20:6e:34:bc:a8:ae:1e:f2:5f:ea:c4:ef:a2:
5d:54:f0:a0:34:38:f8:a0:3f:52:16:95:c1:91:80:c2:5c:df:
84:1c:81:36:0f:a8:a1:5a:41:22:e6:42:99:83:8e:ad:94:08:
cd:97:9b:e8:4d:44:7a:31:77:12:41:5d:81:a7:ac:3a:23:1f:
29:7a:74:43:1b:15:94:42:e2:ee:38:0d:fd:a6:1e:71:05:d8:
7b:67:ac:af:48:d0:db:83:8b:f8:bb:88:eb:38:9a:20:47:1d:
46:87:48:c1:74:5a:6f:34:5f:3c:ef:c0:9e:aa:a7:3d:63:73:
01:08:04:7f:d6:a4:e5:bb:35:2d:8e:23:b1:74:c9:ee:8f:1c:
82:0a:64:92:87:de:94:75:ab:82:db:e9:3f:72:12:88:d4:51:
2d:b7:f7:d4:cd:f8:4e:76:63:ae:a3:a5:98:15:70:11:c4:8f:
bc:1f:b9:dd:b2:15:75:20:95:7e:db:24:29:73:1b:44:ac:41:
55:4f:74:70:05:5e:7a:40:01:61:79:7d:cc:d8:29:ef:0d:c6:
bb:7f:91:4b:84:1c:82:c4:e9:ff:7c:5d:a1:c5:5c:cf:b4:33:
fd:84:31:e0:2b:03:f7:1a:52:7d:b5:08:3e:f1:49:23:e5:03:
31:4f:f9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zl6BZMqhpUgyaPo8h/QTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMGUxNWMxNWFlNzAzYTg5NzkwNDZhZjVkZWNjNDkzMmVk
YzdmNmUwHhcNMjUwMTMxMTAwMDUxWhcNMjUwMjAxMTAwMDUxWjAzMTEwLwYDVQQD
Eyg2NDQyNzYzOWMzY2FiMzViOGRiYWJlZjZjNzVlYzVkZDA2YjNiNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJwuhfhgrgkCaXd4bc+9wt0HpmTI
5cWOAElAXPjY/wtbSrPwLxVpwjhnWwNUU8ezTfntdhSm5oeHTDWl+1aD1U+ZenNB
LDq/371Py3qYK9TAgnrSowJAA1bZjth7o9YnBjCkLfeuZFpBx0Y0o5IVw/W3VFes
k9IR8fmwLiEPx/Rt/EXqlg3ieSU+bTXO3ENVczXoEZc5FfwtmmLplpK2FvEoqFNM
0n8kDY1rsw9DcEHOuZBFEdhzzmCgpWzbSXVt/7ZbUHF4/Us0dDw2kITaG6sBcFwF
4AErC/IIJExO2ofK00KDZAS9Wk4kC4TGz2OGM27EWVJZn+9KgaCsIGTDfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRCdjnDyrNbjbq+9sdexd0Gs7RvMB8GA1UdIwQY
MBaAFBsOFcFa5wOol5BGr13sxJMu3H9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEt
ZDFkNmMzZjkyZmZiLzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEtZDFkNmMzZjkyZmZi
LzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkUPQpMg
bjS8qK4e8l/qxO+iXVTwoDQ4+KA/UhaVwZGAwlzfhByBNg+ooVpBIuZCmYOOrZQI
zZeb6E1EejF3EkFdgaesOiMfKXp0QxsVlELi7jgN/aYecQXYe2esr0jQ24OL+LuI
6ziaIEcdRodIwXRabzRfPO/AnqqnPWNzAQgEf9ak5bs1LY4jsXTJ7o8cggpkkofe
lHWrgtvpP3ISiNRRLbf31M34TnZjrqOlmBVwEcSPvB+53bIVdSCVftskKXMbRKxB
VU90cAVeekABYXl9zNgp7w3Gu3+RS4QcgsTp/3xdocVcz7Qz/YQx4CsD9xpSfbUI
PvFJI+UDMU/5aw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:53 2025 by rpki-client