Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: ywOCaIiWQBvEr/LiFvzNkkIXz/8JKbwRSdgu2uFf4Rw=
Subject key identifier: 2C:42:47:3E:ED:B6:F2:24:E8:5B:B1:D4:01:F0:C9:85:03:62:EB:2F
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 0194BCE071CF58FAE4AF071D6C1313DCC0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: 9Iio2OfnxYkRbU4ciBGsd8uqIvQwrYazqr0qi9gAJPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:cf:58:fa:e4:af:07:1d:6c:13:13:dc:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=2c42473eedb6f224e85bb1d401f0c9850362eb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:01:74:23:6c:62:ab:c7:4f:d1:6b:ba:02:
7a:16:83:98:8c:8a:65:d1:da:f4:4b:22:c7:09:90:
14:b7:17:6a:7e:3f:0b:58:6a:ee:35:1b:3a:54:46:
d1:df:03:38:39:b1:c8:61:f9:c8:95:ca:51:32:6f:
59:3f:ed:f5:eb:1d:dc:28:2b:f0:52:8a:63:ab:fb:
6b:1a:29:4c:57:97:f0:bc:97:40:fa:de:78:64:76:
07:9c:dd:07:ae:75:cb:9f:5f:09:b2:04:d3:31:4e:
26:3c:d6:87:f3:2a:79:36:26:6e:51:09:4c:4d:45:
4b:77:e5:97:2d:72:74:9a:84:5f:a8:7c:cc:25:58:
b5:8e:a9:e6:6d:f0:02:c3:c1:b6:73:b8:41:27:3d:
02:e1:ee:17:37:22:79:59:f5:a0:09:64:a9:9b:5b:
74:80:3f:d3:0e:dd:d7:14:de:57:4a:37:9c:ee:76:
c7:c2:04:9b:f8:9c:90:a7:7e:fd:bb:a5:13:28:c5:
27:3e:ef:55:92:f5:06:5f:c6:2e:1e:9b:50:fc:dc:
0c:ca:cf:9b:23:e6:e0:aa:e3:5a:55:79:2d:e7:0b:
59:ee:36:9e:11:9c:35:6b:11:c3:9c:0b:83:e0:39:
71:2c:f5:7b:91:a5:88:04:28:23:f4:0c:33:9e:cc:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:47:3E:ED:B6:F2:24:E8:5B:B1:D4:01:F0:C9:85:03:62:EB:2F
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8e:cc:79:da:19:1e:66:c0:c5:90:fe:5d:06:70:ca:9c:0c:
77:b3:70:a8:e2:b5:f9:75:fe:26:92:48:6e:68:6c:d3:c4:9c:
ed:f6:b6:16:52:de:ca:2d:ae:39:c2:68:e1:8e:b6:58:dc:2c:
4a:9b:8e:10:60:f3:55:13:2f:d5:b4:23:f1:5b:49:20:cd:d7:
96:81:f7:ba:ee:1c:40:a2:1e:86:8f:71:d1:f1:f1:1f:d0:f7:
d8:aa:c0:96:ed:82:63:e7:52:cc:6c:8c:91:e6:90:e0:87:0a:
2f:72:49:7c:ff:23:1b:c0:ac:1e:43:2f:34:20:eb:1c:12:e2:
ae:6b:4e:ff:e0:44:ea:56:ef:c1:ca:04:77:e8:cb:fe:1b:5b:
ba:e5:ca:61:81:7b:a8:a4:b2:6e:8c:3c:1a:ab:9f:78:79:01:
0f:58:ac:3b:c5:14:45:14:91:97:ca:5a:a2:f0:f5:19:4d:56:
44:ee:94:4a:f4:60:77:18:d6:06:ad:bb:eb:d6:e7:7a:24:6d:
06:fe:9e:b3:81:97:8a:dd:ee:ff:29:14:a5:f5:4c:b6:a0:af:
ca:01:10:f2:c6:b9:e9:8a:e7:0a:87:e2:6c:ff:94:0f:07:28:
34:40:d3:4a:5e:b9:4b:96:d9:4d:a7:57:5d:e1:7a:1f:ee:5e:
e3:1b:e8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HHPWPrkrwcdbBMT3MDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk
NGZjNmEwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
EygyYzQyNDczZWVkYjZmMjI0ZTg1YmIxZDQwMWYwYzk4NTAzNjJlYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrMBdCNsYqvHT9FrugJ6FoOYjIpl
0dr0SyLHCZAUtxdqfj8LWGruNRs6VEbR3wM4ObHIYfnIlcpRMm9ZP+316x3cKCvw
Uopjq/trGilMV5fwvJdA+t54ZHYHnN0HrnXLn18JsgTTMU4mPNaH8yp5NiZuUQlM
TUVLd+WXLXJ0moRfqHzMJVi1jqnmbfACw8G2c7hBJz0C4e4XNyJ5WfWgCWSpm1t0
gD/TDt3XFN5XSjec7nbHwgSb+JyQp379u6UTKMUnPu9VkvUGX8YuHptQ/NwMys+b
I+bgquNaVXkt5wtZ7jaeEZw1axHDnAuD4DlxLPV7kaWIBCgj9Awznsx0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxCRz7ttvIk6Fux1AHwyYUDYusvMB8GA1UdIwQY
MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt
NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi
LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY7MedoZ
HmbAxZD+XQZwypwMd7NwqOK1+XX+JpJIbmhs08Sc7fa2FlLeyi2uOcJo4Y62WNws
SpuOEGDzVRMv1bQj8VtJIM3XloH3uu4cQKIeho9x0fHxH9D32KrAlu2CY+dSzGyM
keaQ4IcKL3JJfP8jG8CsHkMvNCDrHBLirmtO/+BE6lbvwcoEd+jL/htbuuXKYYF7
qKSybow8GqufeHkBD1isO8UURRSRl8paovD1GU1WRO6USvRgdxjWBq2769bneiRt
Bv6es4GXit3u/ykUpfVMtqCvygEQ8sa56YrnCofibP+UDwcoNEDTSl65S5bZTadX
XeF6H+5e4xvoTg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:18 2025 by rpki-client