Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: Cdu0T7qFqZgNzV37TaU8N9VjrQOdF+ymkvu40hbPwkM=
Subject key identifier: 4F:0C:E0:4E:CD:A8:64:EB:7A:BD:CF:F4:7F:12:C3:B1:F7:CF:B3:65
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 0194BBCDE505F4A7D513EA6FB177CE57F850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: c4IgyFHdvFgMqFkSSCCRAxIuFq59/nwlZxdqHL0cvao=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:05:f4:a7:d5:13:ea:6f:b1:77:ce:57:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=4f0ce04ecda864eb7abdcff47f12c3b1f7cfb365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:2f:8f:e2:94:b6:11:66:28:05:09:81:0a:
fb:55:2c:f6:c7:d2:47:72:84:39:17:34:17:c7:64:
8a:a0:fa:fa:57:00:a2:fc:5f:be:d2:46:83:c0:7b:
8e:ea:ad:5d:bf:44:75:f3:50:f7:7f:59:4a:34:e7:
f4:41:41:0f:34:20:93:c8:ce:2b:00:fe:7a:a5:db:
22:9a:56:50:1b:ca:5a:63:43:20:d5:3d:e7:87:5d:
16:88:31:81:a8:43:f4:03:92:04:5a:56:20:ad:71:
30:52:3f:60:1f:8f:82:7d:00:bb:c0:50:63:2d:d7:
21:07:de:ca:23:31:3a:26:f6:b7:f7:b8:e5:78:4e:
a2:0b:e0:28:8f:39:a1:3d:a1:a2:1d:ab:e6:d7:18:
89:04:78:36:df:18:41:a3:10:9d:d7:c1:c4:f4:f2:
28:dc:60:7e:0c:2a:85:3d:86:3f:a0:74:7a:38:5c:
9c:63:1f:aa:0a:09:29:75:06:d7:a3:23:e0:3f:50:
25:e6:cb:cd:8e:43:7d:ed:f2:8f:e0:75:51:9c:dd:
ad:f8:21:21:45:e5:ee:08:df:a0:bb:98:bc:e8:74:
7e:5c:e9:12:6a:6b:d6:c3:4e:3d:5b:28:a3:87:90:
44:7e:f4:9b:46:ba:9a:60:69:c4:9e:d0:e4:95:cd:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:E0:4E:CD:A8:64:EB:7A:BD:CF:F4:7F:12:C3:B1:F7:CF:B3:65
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2f:81:c6:08:26:d0:a4:c2:b7:bc:a1:78:3c:01:cd:5c:da:
3c:22:a5:05:bc:44:f5:9a:68:92:c0:77:f1:d5:d9:b0:c2:43:
5d:b0:4a:0f:c7:8f:3e:8a:fe:cc:9b:71:0f:43:b4:da:36:f9:
66:fb:bc:fa:2a:81:83:82:db:82:b3:bc:26:b2:bf:0a:66:19:
9e:bc:32:c7:a6:44:81:02:77:fb:ba:ba:02:5b:5c:c2:71:81:
62:78:92:2a:be:4f:c5:43:df:ad:95:aa:ba:40:44:1d:ec:53:
5c:66:1b:42:e9:cf:b2:68:c0:98:0d:68:0d:6f:58:68:eb:48:
74:9f:5c:74:c2:b4:b3:d5:9e:a3:57:b9:e8:08:fc:f6:41:3e:
9b:07:7d:d6:fc:2b:09:61:88:2c:0d:55:fc:83:38:28:21:89:
0c:67:a3:e8:fd:ff:8d:49:5d:bc:07:a4:22:c6:60:ae:07:35:
9b:96:a3:da:3e:a0:27:a3:d2:aa:ed:de:cc:63:c9:c6:51:2c:
3b:7a:ee:e5:35:6b:46:64:59:66:1d:10:f8:fe:64:40:16:6b:
be:1b:71:af:96:9b:d0:97:04:3f:f3:e9:23:59:a7:d8:9c:c0:
af:cb:a7:a6:9b:e3:96:e8:d6:89:7d:f3:51:fb:95:5b:f8:c3:
00:95:1f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeUF9KfVE+pvsXfOV/hQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx
YWRkMmYwHhcNMjUwMTMxMTAwMDIwWhcNMjUwMjAxMTAwMDIwWjAzMTEwLwYDVQQD
Eyg0ZjBjZTA0ZWNkYTg2NGViN2FiZGNmZjQ3ZjEyYzNiMWY3Y2ZiMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xIvj+KUthFmKAUJgQr7VSz2x9JH
coQ5FzQXx2SKoPr6VwCi/F++0kaDwHuO6q1dv0R181D3f1lKNOf0QUEPNCCTyM4r
AP56pdsimlZQG8paY0Mg1T3nh10WiDGBqEP0A5IEWlYgrXEwUj9gH4+CfQC7wFBj
LdchB97KIzE6Jva397jleE6iC+AojzmhPaGiHavm1xiJBHg23xhBoxCd18HE9PIo
3GB+DCqFPYY/oHR6OFycYx+qCgkpdQbXoyPgP1Al5svNjkN97fKP4HVRnN2t+CEh
ReXuCN+gu5i86HR+XOkSamvWw049Wyijh5BEfvSbRrqaYGnEntDklc22pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8M4E7NqGTrer3P9H8Sw7H3z7NlMB8GA1UdIwQY
MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt
NWMyOTE5ZGE4ZGYzLzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz
LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi+Bxggm
0KTCt7yheDwBzVzaPCKlBbxE9ZpoksB38dXZsMJDXbBKD8ePPor+zJtxD0O02jb5
Zvu8+iqBg4LbgrO8JrK/CmYZnrwyx6ZEgQJ3+7q6AltcwnGBYniSKr5PxUPfrZWq
ukBEHexTXGYbQunPsmjAmA1oDW9YaOtIdJ9cdMK0s9Weo1e56Aj89kE+mwd91vwr
CWGILA1V/IM4KCGJDGej6P3/jUldvAekIsZgrgc1m5aj2j6gJ6PSqu3ezGPJxlEs
O3ru5TVrRmRZZh0Q+P5kQBZrvhtxr5ab0JcEP/PpI1mn2JzAr8unppvjlujWiX3z
UfuVW/jDAJUfvQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:25 2025 by rpki-client