Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: YE9KsbGGF4lUBVRFMdJ9Mwz1QFrr23Iz3ERoL6tVahI=
Subject key identifier: 42:A4:E9:FF:41:E0:DD:62:0D:A7:48:08:05:B1:E6:F5:94:38:EF:39
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 0194BBCEDF5059B2A48FAEEDA13BF6190FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 0416
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: BBHWc1peJz6DdhYpRcO4548n3WBAdqCvft43gYZXsuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:50:59:b2:a4:8f:ae:ed:a1:3b:f6:19:0f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=42a4e9ff41e0dd620da7480805b1e6f59438ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:6c:62:d7:61:d8:0e:6a:a9:74:54:e8:f7:
a4:d9:1b:01:3c:91:d5:6e:3e:f7:fd:ed:aa:54:04:
28:5b:2f:58:59:34:8c:85:58:de:ee:26:fb:1d:33:
2a:d2:9f:58:30:fd:ce:8f:4d:3d:c4:21:d1:09:23:
ac:85:93:e6:6d:4c:8f:29:14:cf:0b:99:a1:e7:d1:
a4:54:5a:78:3c:f2:e4:ec:86:80:39:17:48:9f:74:
c0:d2:4a:04:99:0e:e6:e0:ee:fd:b4:24:ab:2a:6b:
0c:be:4a:23:37:9b:67:87:5e:a8:8f:1d:e7:5e:f8:
8c:ad:87:51:f1:d9:79:c9:7f:e1:99:c9:31:c3:64:
00:9c:78:f2:cd:cb:f6:4f:4a:25:12:e0:02:69:1b:
51:52:be:a5:6f:c9:6d:7d:62:e2:96:ba:fc:1a:53:
ce:f9:4f:3e:ce:dd:8f:b6:49:95:2a:4d:dc:6f:39:
41:5a:d2:56:8b:e4:41:62:5d:fd:d4:00:58:77:75:
4c:80:7c:56:66:34:46:75:af:4b:bf:9e:26:56:39:
65:97:cb:69:13:53:ae:22:cc:43:00:6f:f7:f0:af:
60:95:55:d1:e2:91:0e:e7:02:d9:2d:5d:6c:e7:13:
e9:83:ab:b4:c6:ae:92:b6:7a:58:5e:f0:80:2d:24:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:E9:FF:41:E0:DD:62:0D:A7:48:08:05:B1:E6:F5:94:38:EF:39
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a6:0b:81:ce:9c:0f:7d:89:5d:64:34:6b:ad:95:9c:e3:a7:
83:5a:9d:70:4e:7b:4c:1f:be:d2:09:18:76:a6:e1:c3:cf:8f:
0c:17:9d:33:fc:9f:3f:02:1d:2a:0b:be:06:fa:2a:28:20:8c:
84:ba:1c:32:6c:36:c0:75:59:a2:24:5c:46:90:40:21:08:6c:
8d:d2:9b:a1:3e:39:00:a3:af:01:4a:4e:2a:8e:fb:1b:05:79:
fb:9d:44:22:9f:fd:72:43:69:dc:73:60:be:36:9b:54:22:db:
b3:51:e6:b3:7a:7a:13:14:2d:63:97:f8:5b:7c:9f:ff:b8:ee:
9e:63:3b:cc:9c:a0:f8:33:23:43:e5:d6:50:68:57:e4:56:12:
2a:ae:2d:61:93:2e:1d:b9:1d:2e:1a:b0:07:c4:a2:2a:80:c3:
37:89:c7:3b:1d:a4:f3:f0:f6:78:95:a5:f1:df:c2:ea:16:64:
5b:79:b1:4b:04:4f:8c:75:cf:80:03:b5:b4:ad:08:9e:9b:c6:
23:f4:6c:32:04:e3:51:f2:8e:e9:7e:26:aa:3d:dc:a6:bb:3d:
b6:49:0d:d5:36:ef:7c:2b:fd:3d:de:4a:00:4b:42:3a:8e:37:
f6:79:0d:f3:0a:7b:bc:6c:f3:21:22:80:3c:fa:68:53:15:a2:
65:d6:ea:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zt9QWbKkj67toTv2GQ/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGUxYWM3OGU3NmI2ODdkZDU2MDVmMmZiODFmZGQ1YWFm
ZWI3NDEwHhcNMjUwMTMxMTAwMTI0WhcNMjUwMjAxMTAwMTI0WjAzMTEwLwYDVQQD
Eyg0MmE0ZTlmZjQxZTBkZDYyMGRhNzQ4MDgwNWIxZTZmNTk0MzhlZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTlsYtdh2A5qqXRU6Pek2RsBPJHV
bj73/e2qVAQoWy9YWTSMhVje7ib7HTMq0p9YMP3Oj009xCHRCSOshZPmbUyPKRTP
C5mh59GkVFp4PPLk7IaAORdIn3TA0koEmQ7m4O79tCSrKmsMvkojN5tnh16ojx3n
XviMrYdR8dl5yX/hmckxw2QAnHjyzcv2T0olEuACaRtRUr6lb8ltfWLilrr8GlPO
+U8+zt2PtkmVKk3cbzlBWtJWi+RBYl391ABYd3VMgHxWZjRGda9Lv54mVjlll8tp
E1OuIsxDAG/38K9glVXR4pEO5wLZLV1s5xPpg6u0xq6StnpYXvCALSStrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKk6f9B4N1iDadICAWx5vWUOO85MB8GA1UdIwQY
MBaAFIKOGseOdraH3VYF8vuB/dWq/rdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYt
ZDA2ZTdjNjkyZDhiLzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYtZDA2ZTdjNjkyZDhi
LzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaYLgc6c
D32JXWQ0a62VnOOng1qdcE57TB++0gkYdqbhw8+PDBedM/yfPwIdKgu+BvoqKCCM
hLocMmw2wHVZoiRcRpBAIQhsjdKboT45AKOvAUpOKo77GwV5+51EIp/9ckNp3HNg
vjabVCLbs1Hms3p6ExQtY5f4W3yf/7junmM7zJyg+DMjQ+XWUGhX5FYSKq4tYZMu
HbkdLhqwB8SiKoDDN4nHOx2k8/D2eJWl8d/C6hZkW3mxSwRPjHXPgAO1tK0InpvG
I/RsMgTjUfKO6X4mqj3cprs9tkkN1TbvfCv9Pd5KAEtCOo439nkN8wp7vGzzISKA
PPpoUxWiZdbqEw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:51 2025 by rpki-client