Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: z1DnZUC/GJl+Cj7BjgIsj7fiQgMmoboaLKMdxo2ZwBA=
Subject key identifier: D9:9F:81:03:19:2D:A5:9C:73:BA:81:71:2A:97:92:A5:8F:C9:09:D3
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 0194BCA9807370D64D0D4312627CD92C89F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: VkJCfkCPFDS2VV/XocykraAkXuKD4NwxnpzwEiP9GBw=)
2: hoMd1ao-5xioD5afFuHzLAiilNA.roa (hash: kY6VnQlc5WhhXkLsiLgtzGrptWyehzdgfUCRLl0B768=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:73:70:d6:4d:0d:43:12:62:7c:d9:2c:89:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=d99f8103192da59c73ba81712a9792a58fc909d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:25:41:da:60:2d:cf:2d:9b:97:6f:64:82:
21:5b:f9:fa:74:97:74:db:9f:f0:55:3e:88:e9:4c:
bf:ff:40:d8:5d:3e:32:b9:ae:34:21:54:be:29:4b:
79:27:c2:47:9f:81:07:ca:e6:1b:62:66:eb:e1:82:
f7:d2:96:7d:5b:35:b4:99:b9:6e:07:03:d6:8d:df:
15:35:4e:60:35:b9:58:71:90:b3:d6:95:c1:75:ae:
97:c0:80:c0:f5:5d:99:4c:9e:06:c9:3f:d2:5d:a7:
1e:e1:36:f6:fc:47:55:3e:49:7d:2a:68:82:53:96:
f1:20:f1:88:67:da:23:15:ae:88:7d:2c:74:b5:54:
bb:b1:9d:18:b4:51:b4:74:d8:aa:05:e3:64:25:cb:
67:b7:1c:0e:59:27:5d:64:f0:52:98:bd:cc:2c:fb:
55:e1:4c:b7:35:f2:b6:bd:b0:d7:95:a7:21:98:2b:
39:0c:41:c7:07:28:3d:19:c2:72:0e:69:96:7c:ef:
9f:b8:2d:bb:26:fb:e4:7f:2c:e5:48:1b:0f:a8:8a:
ad:b3:14:63:4b:78:05:5e:fa:e5:70:a9:a3:6d:ab:
ef:7c:6d:c2:53:25:7c:33:3c:a8:f3:a5:b3:0e:34:
da:3b:19:d5:ed:f5:ec:02:51:1b:55:f7:28:2a:3b:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:81:03:19:2D:A5:9C:73:BA:81:71:2A:97:92:A5:8F:C9:09:D3
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0a:17:05:73:fa:71:36:9d:23:53:a6:24:e5:8f:81:75:29:
4a:48:e3:d8:bb:32:74:a2:6a:b6:72:6f:ea:bc:be:33:b9:77:
bc:2c:a8:6c:9a:19:96:24:3b:da:cb:f0:f1:fc:3f:99:19:4a:
f4:a9:ff:51:f4:80:e6:13:f7:83:9a:59:7e:2d:57:bb:3f:2d:
6c:e2:20:2c:7d:a8:56:24:b4:62:ff:88:8c:c1:11:99:cc:9f:
14:61:1c:d7:bd:65:91:1f:d1:c3:ac:75:f4:0f:a8:c7:61:18:
b5:2a:b8:dc:07:ed:f0:4f:e7:29:68:6f:f2:fa:a8:e1:33:5c:
34:ec:7e:c2:bf:54:f1:50:63:5f:d1:7b:95:9d:5f:f7:ff:27:
58:e6:ca:73:de:2d:fe:f3:08:2a:fe:d3:d2:60:fb:b4:e6:a7:
12:83:89:4b:10:9e:e8:44:98:84:51:30:7a:25:b3:4c:d5:5e:
e3:e9:52:eb:85:b1:bb:28:04:2e:59:b0:cf:c4:d7:a4:88:18:
38:40:f7:75:47:d4:c8:0b:26:5d:ff:7f:9d:69:c5:b0:a8:ac:
5f:26:d6:c7:63:87:b3:83:b5:64:6c:66:e7:66:be:d8:37:0c:
4c:fe:42:44:8d:53:b4:72:5a:ff:78:9b:14:6e:a8:bd:72:03:
2f:f8:e7:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYBzcNZNDUMSYnzZLInxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODIwNGQxYzI1YTAxMTIzNmJlYTA3NDFlNGM2MDEzOWQz
NDliMTAwHhcNMjUwMTMxMTQwMDEyWhcNMjUwMjAxMTQwMDEyWjAzMTEwLwYDVQQD
EyhkOTlmODEwMzE5MmRhNTljNzNiYTgxNzEyYTk3OTJhNThmYzkwOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YYlQdpgLc8tm5dvZIIhW/n6dJd0
25/wVT6I6Uy//0DYXT4yua40IVS+KUt5J8JHn4EHyuYbYmbr4YL30pZ9WzW0mblu
BwPWjd8VNU5gNblYcZCz1pXBda6XwIDA9V2ZTJ4GyT/SXace4Tb2/EdVPkl9KmiC
U5bxIPGIZ9ojFa6IfSx0tVS7sZ0YtFG0dNiqBeNkJctntxwOWSddZPBSmL3MLPtV
4Uy3NfK2vbDXlachmCs5DEHHByg9GcJyDmmWfO+fuC27JvvkfyzlSBsPqIqtsxRj
S3gFXvrlcKmjbavvfG3CUyV8Mzyo86WzDjTaOxnV7fXsAlEbVfcoKjtvDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmfgQMZLaWcc7qBcSqXkqWPyQnTMB8GA1UdIwQY
MBaAFBmCBNHCWgESNr6gdB5MYBOdNJsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYt
NDJhZDNiNGM4ZDBjLzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYtNDJhZDNiNGM4ZDBj
LzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAoXBXP6
cTadI1OmJOWPgXUpSkjj2LsydKJqtnJv6ry+M7l3vCyobJoZliQ72svw8fw/mRlK
9Kn/UfSA5hP3g5pZfi1Xuz8tbOIgLH2oViS0Yv+IjMERmcyfFGEc171lkR/Rw6x1
9A+ox2EYtSq43Aft8E/nKWhv8vqo4TNcNOx+wr9U8VBjX9F7lZ1f9/8nWObKc94t
/vMIKv7T0mD7tOanEoOJSxCe6ESYhFEweiWzTNVe4+lS64WxuygELlmwz8TXpIgY
OED3dUfUyAsmXf9/nWnFsKisXybWx2OHs4O1ZGxm52a+2DcMTP5CRI1TtHJa/3ib
FG6ovXIDL/jn1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:56 2025 by rpki-client