Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier: mmotg6o2GwrZu0StJT2bPL7EKVr7zZSYSiXIctkpM/g=
Subject key identifier: 7B:9D:1B:54:BD:55:99:A8:6E:ED:8C:83:FA:1F:38:7B:DA:9D:3B:F3
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial: 0194BC3BDE5124DD3A22C20B9DE10850EBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number: 08A9
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: zusfyZzsvhQj9OCe8+pdyNam+62cxtcZmNAAMKlCx7I=)
2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:51:24:dd:3a:22:c2:0b:9d:e1:08:50:eb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=7b9d1b54bd5599a86eed8c83fa1f387bda9d3bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:51:c6:f2:f2:38:d3:fe:07:81:03:68:18:
c8:1c:32:e7:bf:ea:f8:61:fc:19:3e:50:8d:4e:c1:
4a:74:df:19:4d:36:f5:ad:63:57:5a:44:bc:a0:35:
a5:15:f4:28:89:38:6c:cd:4c:f0:be:51:de:7b:20:
36:6a:c6:31:a8:ff:80:5e:80:7c:3d:c8:33:19:57:
c7:5b:28:da:fe:a7:7f:44:dd:9b:df:1f:5f:d3:28:
e1:81:84:f6:fb:b3:0f:35:33:cf:59:20:56:cd:e5:
83:25:fb:f2:0c:fd:76:74:29:a3:9b:e0:d5:8f:5c:
45:c7:fe:9d:67:ba:18:36:e2:e7:e3:e0:52:9d:c1:
f8:a2:c6:a2:00:08:9a:94:b9:21:13:87:c0:66:b4:
67:d7:ce:b5:b3:44:21:3c:7f:d1:9e:f8:e9:b4:a9:
61:3c:34:52:62:39:4a:30:92:79:8f:11:99:78:a6:
b9:7e:a8:b0:d1:49:4b:99:08:6d:68:f8:7a:89:53:
4d:4b:41:cc:5b:ef:8f:f9:68:04:39:43:80:05:d9:
f1:b9:c8:a2:ca:94:0b:3a:33:6e:29:4a:8a:e5:12:
a4:df:45:0f:2e:ea:de:bd:af:26:f4:5c:7d:f0:38:
00:d8:4c:e7:7b:e2:bf:23:0b:bf:75:b0:53:8f:28:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:1B:54:BD:55:99:A8:6E:ED:8C:83:FA:1F:38:7B:DA:9D:3B:F3
X509v3 Authority Key Identifier:
keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:44:0c:29:f0:ea:ef:a4:45:b5:d8:e1:81:43:ac:ad:2f:2a:
78:b5:a0:2e:0b:b1:d2:ed:b1:a1:02:e7:fe:40:2f:8e:f1:38:
30:2f:d9:c0:82:c7:85:79:3b:2b:90:9c:c5:8b:d9:17:be:84:
7d:9e:b1:d9:71:e6:16:73:6a:c3:0c:f9:59:51:9a:e9:30:88:
cc:54:8b:b1:16:ae:77:88:6e:92:3c:b9:23:9a:18:67:c8:76:
6a:d9:43:ba:c4:85:28:25:12:df:32:5e:7c:99:43:80:cf:98:
21:cc:30:73:62:2b:5f:92:e3:00:56:aa:3a:4a:66:bf:c4:3e:
10:98:38:0c:88:91:49:96:9e:16:64:26:c9:de:82:0e:eb:08:
48:95:66:31:63:e7:ab:c1:d0:89:e7:d8:c2:86:ae:dd:8c:a0:
f2:cd:a8:53:58:83:41:6f:40:1c:68:6b:1f:ff:6a:27:7a:fd:
77:31:63:69:11:9f:5a:ef:79:7e:24:1a:5e:d5:19:19:5c:09:
e6:31:0e:1e:1e:2a:16:6a:e8:df:42:11:d7:05:f3:ad:8b:90:
df:39:02:2b:04:a0:f5:80:2f:34:72:55:71:e7:44:e3:ec:57:
87:09:b8:6a:a9:aa:40:22:4a:12:f4:4a:19:56:13:02:72:c8:
9e:a0:38:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O95RJN06IsILneEIUOvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll
OTQ3YTQwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
Eyg3YjlkMWI1NGJkNTU5OWE4NmVlZDhjODNmYTFmMzg3YmRhOWQzYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygFRxvLyONP+B4EDaBjIHDLnv+r4
YfwZPlCNTsFKdN8ZTTb1rWNXWkS8oDWlFfQoiThszUzwvlHeeyA2asYxqP+AXoB8
PcgzGVfHWyja/qd/RN2b3x9f0yjhgYT2+7MPNTPPWSBWzeWDJfvyDP12dCmjm+DV
j1xFx/6dZ7oYNuLn4+BSncH4osaiAAialLkhE4fAZrRn1861s0QhPH/RnvjptKlh
PDRSYjlKMJJ5jxGZeKa5fqiw0UlLmQhtaPh6iVNNS0HMW++P+WgEOUOABdnxucii
ypQLOjNuKUqK5RKk30UPLureva8m9Fx98DgA2Ezne+K/Iwu/dbBTjyjAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHudG1S9VZmobu2Mg/ofOHvanTvzMB8GA1UdIwQY
MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt
ZTBjOTY2YzE1ZDVmLzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm
LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUQMKfDq
76RFtdjhgUOsrS8qeLWgLgux0u2xoQLn/kAvjvE4MC/ZwILHhXk7K5CcxYvZF76E
fZ6x2XHmFnNqwwz5WVGa6TCIzFSLsRaud4hukjy5I5oYZ8h2atlDusSFKCUS3zJe
fJlDgM+YIcwwc2IrX5LjAFaqOkpmv8Q+EJg4DIiRSZaeFmQmyd6CDusISJVmMWPn
q8HQiefYwoau3Yyg8s2oU1iDQW9AHGhrH/9qJ3r9dzFjaRGfWu95fiQaXtUZGVwJ
5jEOHh4qFmro30IR1wXzrYuQ3zkCKwSg9YAvNHJVcedE4+xXhwm4aqmqQCJKEvRK
GVYTAnLInqA4EA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:15 2025 by rpki-client