Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: T2rdq6HWN1SOjzlz2szmHzUMy2r4jxTV+RLQmb/HXnk=
Subject key identifier: 46:C4:81:47:DD:47:27:E6:A9:89:C4:CF:85:06:8C:5C:6C:47:45:35
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 0194BD4E864203485AD2C07142868F1FEB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0771
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: /MqP85e+5CNCm0IH+2dYC2T6ansxYYBHVqUTYrNY6FI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:86:42:03:48:5a:d2:c0:71:42:86:8f:1f:eb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=46c48147dd4727e6a989c4cf85068c5c6c474535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:e5:af:64:7b:20:94:16:ee:7e:9f:82:a7:
19:5a:1f:26:f9:4b:bd:65:80:4e:e8:f6:76:4e:ae:
1a:8c:5f:cd:32:66:87:33:e9:06:10:64:39:05:00:
8a:b7:ab:e6:9f:21:ec:ab:98:c0:2d:e5:9e:bf:eb:
a1:bf:7e:80:cf:70:86:3a:52:ec:e8:44:c0:9a:02:
f9:90:90:ef:a3:ec:fe:d9:7a:6a:a8:2a:6b:e9:d9:
56:87:fc:72:c6:87:9d:ae:b7:b0:de:79:06:ce:b7:
3a:78:39:3c:de:c4:04:0f:0d:82:2a:af:db:9e:12:
22:db:fe:b2:39:c4:b8:74:f3:1d:5e:59:f7:03:49:
8b:51:d6:a8:37:2e:a6:9c:6c:75:34:2c:3a:97:47:
d1:08:52:4b:9d:b0:f5:34:ac:12:8a:cd:c7:04:5f:
9c:17:c4:51:d9:7a:c3:79:0d:52:5f:07:33:31:20:
51:e7:3b:c2:b5:4d:34:dd:61:84:fa:11:0b:2c:e4:
38:57:3f:10:37:4e:fa:83:6d:a5:a7:67:44:e7:f1:
6e:d0:20:db:1d:fb:74:1c:bb:7d:b3:c0:53:39:8b:
fe:bf:0d:c5:aa:ec:86:3a:39:7a:9a:c4:7a:f4:80:
75:f4:28:9f:5f:c3:c2:a9:6d:c8:65:b5:d8:1f:1a:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:81:47:DD:47:27:E6:A9:89:C4:CF:85:06:8C:5C:6C:47:45:35
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:97:2a:7f:3b:b0:b5:f1:24:64:40:b1:f0:7d:ea:59:2f:7b:
0e:58:59:a7:93:35:32:e5:72:d1:88:d0:11:28:97:fa:e7:ef:
05:32:de:4d:9d:4d:85:88:e3:ac:97:ec:87:33:ce:a1:5b:42:
03:48:3a:bc:c0:6d:f1:f0:be:26:9a:50:78:48:17:e7:06:3e:
f0:ac:67:0f:8c:80:d3:8e:af:f9:46:cf:78:df:36:ca:89:b3:
f2:66:5c:0f:be:a3:de:90:1b:a2:66:ac:94:b5:c8:d9:61:e8:
a9:c5:d5:f1:57:51:0b:42:e1:e9:22:7a:62:51:df:4c:16:4a:
10:c3:54:59:a6:13:b0:c3:80:82:cf:c5:51:36:f8:0e:d7:b6:
90:3f:be:8e:9c:36:7d:0b:7c:f2:4c:e9:fd:44:ea:eb:9b:02:
e4:a2:9b:52:4f:7a:2b:16:39:9a:af:b8:13:d3:bd:d7:e1:32:
f3:c0:6a:ed:1f:ee:6d:8e:39:0c:ef:31:a1:f1:38:58:0e:38:
01:d8:a7:81:81:10:a6:f4:c0:06:1d:f4:3e:3d:8a:9e:34:05:
77:7d:4b:2c:e3:4e:7f:e9:99:ff:80:d7:6e:41:d3:43:07:e5:
55:1c:f4:4e:50:43:7a:da:c6:41:53:ba:10:2b:ae:f9:31:93:
a7:93:3b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToZCA0ha0sBxQoaPH+s1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4
OGRlYTIwHhcNMjUwMTMxMTcwMDI3WhcNMjUwMjAxMTcwMDI3WjAzMTEwLwYDVQQD
Eyg0NmM0ODE0N2RkNDcyN2U2YTk4OWM0Y2Y4NTA2OGM1YzZjNDc0NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw87lr2R7IJQW7n6fgqcZWh8m+Uu9
ZYBO6PZ2Tq4ajF/NMmaHM+kGEGQ5BQCKt6vmnyHsq5jALeWev+uhv36Az3CGOlLs
6ETAmgL5kJDvo+z+2XpqqCpr6dlWh/xyxoedrrew3nkGzrc6eDk83sQEDw2CKq/b
nhIi2/6yOcS4dPMdXln3A0mLUdaoNy6mnGx1NCw6l0fRCFJLnbD1NKwSis3HBF+c
F8RR2XrDeQ1SXwczMSBR5zvCtU003WGE+hELLOQ4Vz8QN076g22lp2dE5/Fu0CDb
Hft0HLt9s8BTOYv+vw3FquyGOjl6msR69IB19CifX8PCqW3IZbXYHxpFswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbEgUfdRyfmqYnEz4UGjFxsR0U1MB8GA1UdIwQY
MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt
M2NhNDg4ZGVlZTg5LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5
LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApcqfzuw
tfEkZECx8H3qWS97DlhZp5M1MuVy0YjQESiX+ufvBTLeTZ1NhYjjrJfshzPOoVtC
A0g6vMBt8fC+JppQeEgX5wY+8KxnD4yA046v+UbPeN82yomz8mZcD76j3pAbomas
lLXI2WHoqcXV8VdRC0Lh6SJ6YlHfTBZKEMNUWaYTsMOAgs/FUTb4Dte2kD++jpw2
fQt88kzp/UTq65sC5KKbUk96KxY5mq+4E9O91+Ey88Bq7R/ubY45DO8xofE4WA44
AdingYEQpvTABh30Pj2KnjQFd31LLONOf+mZ/4DXbkHTQwflVRz0TlBDetrGQVO6
ECuu+TGTp5M79Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:08 2025 by rpki-client