Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: 8gxnYAcQOFZMGHQ07q9Hs527B8w1k45wgoPCcX1eSqs=
Subject key identifier: CD:27:07:6B:B4:4B:7B:55:4D:FF:92:AE:F2:28:CC:61:4C:A3:96:39
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 0194BC05052BD2DEB5FF92FE9CA8AE00FDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 10EA
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: OZBEq/lg1+sWJK+97qG3AzrZHdJhGLjJAdEvGn7uY8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:2b:d2:de:b5:ff:92:fe:9c:a8:ae:00:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=cd27076bb44b7b554dff92aef228cc614ca39639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:7f:3e:27:ae:86:6b:d9:b5:25:9f:a1:e5:
60:52:5d:9a:96:63:1d:cb:4e:3a:56:77:4a:cf:6a:
85:20:3a:83:71:f4:34:75:98:e6:2d:fa:94:86:ca:
e4:f5:47:b3:98:6c:50:c4:29:9f:4e:c1:4d:5d:59:
30:8f:7d:e0:b1:97:82:50:d1:ea:c3:74:f7:f9:52:
b3:0c:40:be:ce:17:e2:4f:2b:ec:bd:7f:40:e9:92:
d4:ef:45:79:d1:76:da:b6:66:5b:39:89:ed:1a:c8:
b9:5a:cb:d5:43:7d:d1:6c:8e:22:62:ec:75:3d:eb:
1c:e8:37:7f:b1:b4:f5:dc:63:fc:7d:00:34:d2:d3:
32:1d:a5:3d:d1:70:9f:a2:09:14:2b:f8:df:e1:97:
81:19:dc:0b:04:a9:02:ef:64:58:0c:23:8e:d8:b5:
ac:aa:65:d0:9d:0a:57:cb:19:ca:0a:53:b5:ca:cd:
a1:91:47:81:d1:7a:00:b4:7c:d7:5a:03:a8:b1:16:
25:32:b4:11:4d:e9:f0:90:c7:b6:83:34:0b:55:04:
a6:c3:1d:b9:8b:d1:98:2c:a2:00:21:75:6a:7d:52:
21:3b:fd:30:6d:82:03:5d:54:99:e9:cf:33:07:2f:
90:ef:c0:1a:51:1c:a0:84:93:86:3e:ec:ac:45:fb:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:07:6B:B4:4B:7B:55:4D:FF:92:AE:F2:28:CC:61:4C:A3:96:39
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:62:ea:4e:8a:71:88:65:3a:5c:85:f3:dd:43:a0:c8:04:b1:
f5:28:09:e1:2e:76:06:7e:f3:fb:1c:3b:c2:cb:e2:66:40:b5:
be:18:6a:5c:b6:dd:35:be:51:9c:a7:8c:51:f8:1d:50:8c:f0:
de:d9:49:55:7f:32:2b:4b:34:b1:5f:fa:b7:04:6e:c6:22:b1:
62:2e:e3:28:c0:55:15:c0:6f:bd:fe:36:4d:79:a5:11:bd:67:
1a:6b:a1:91:99:2d:51:60:54:aa:77:38:db:f7:66:d6:b5:7d:
0f:6f:58:2b:d2:51:a1:85:bb:d7:c6:3c:65:d6:7d:9c:72:8d:
53:45:fe:db:8a:89:f4:7f:a6:75:0d:54:78:07:f9:85:a2:d6:
ca:f1:9a:07:05:0f:17:e3:4d:c8:d2:b8:87:40:4b:18:9f:14:
07:12:b3:f7:e1:db:d3:3d:2e:bb:70:20:e6:9c:d9:0f:1f:70:
88:fa:63:58:03:68:83:c8:15:6d:41:05:5b:00:3f:dc:c6:da:
47:98:00:c6:a8:a9:f2:af:a2:4c:61:53:bf:f3:f7:bb:1d:00:
38:f9:9b:2b:3b:44:a4:b8:1f:b8:d8:b9:1e:36:2a:64:8b:dd:
aa:2f:08:a5:08:d7:77:f6:24:fd:70:f0:d8:cc:ce:5f:ee:16:
15:30:ca:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQUr0t61/5L+nKiuAP2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzJjMDdmYWEyMmZlYjU5NjlmZjFmM2I0OTA1ZDFlYTFl
NGRlZWIwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
EyhjZDI3MDc2YmI0NGI3YjU1NGRmZjkyYWVmMjI4Y2M2MTRjYTM5NjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVt/PieuhmvZtSWfoeVgUl2almMd
y046VndKz2qFIDqDcfQ0dZjmLfqUhsrk9UezmGxQxCmfTsFNXVkwj33gsZeCUNHq
w3T3+VKzDEC+zhfiTyvsvX9A6ZLU70V50XbatmZbOYntGsi5WsvVQ33RbI4iYux1
Pesc6Dd/sbT13GP8fQA00tMyHaU90XCfogkUK/jf4ZeBGdwLBKkC72RYDCOO2LWs
qmXQnQpXyxnKClO1ys2hkUeB0XoAtHzXWgOosRYlMrQRTenwkMe2gzQLVQSmwx25
i9GYLKIAIXVqfVIhO/0wbYIDXVSZ6c8zBy+Q78AaURyghJOGPuysRftv8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0nB2u0S3tVTf+SrvIozGFMo5Y5MB8GA1UdIwQY
MBaAFIAywH+qIv61lp/x87SQXR6h5N7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUt
ODcwY2M1ZjQzY2Q1LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUtODcwY2M1ZjQzY2Q1
LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWLqTopx
iGU6XIXz3UOgyASx9SgJ4S52Bn7z+xw7wsviZkC1vhhqXLbdNb5RnKeMUfgdUIzw
3tlJVX8yK0s0sV/6twRuxiKxYi7jKMBVFcBvvf42TXmlEb1nGmuhkZktUWBUqnc4
2/dm1rV9D29YK9JRoYW718Y8ZdZ9nHKNU0X+24qJ9H+mdQ1UeAf5haLWyvGaBwUP
F+NNyNK4h0BLGJ8UBxKz9+Hb0z0uu3Ag5pzZDx9wiPpjWANog8gVbUEFWwA/3Mba
R5gAxqip8q+iTGFTv/P3ux0AOPmbKztEpLgfuNi5HjYqZIvdqi8IpQjXd/Yk/XDw
2MzOX+4WFTDKBg==
-----END CERTIFICATE-----
Generated at Sun May 4 07:24:58 2025 by rpki-client