Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: b4Ccdfe6cJNonPoS6ZYfUC7kJk0bj+CJroOeoW6xvTk=
Subject key identifier: CE:E5:E8:70:18:E0:3D:3B:01:2B:9A:74:56:3E:52:3C:0F:F0:36:94
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 0195E159DD61717624DC4F328BA69E4FBAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 10:01:57 +0000
Manifest this update: Sat 29 Mar 2025 10:01:57 +0000
Manifest next update: Sun 30 Mar 2025 10:01:57 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: LCU8mK/IU2Ag1xMqlkDSSHXPJ43ulJT+ow1ZMApWqtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:dd:61:71:76:24:dc:4f:32:8b:a6:9e:4f:ba:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Mar 29 10:01:57 2025 GMT
Not After : Mar 30 10:01:57 2025 GMT
Subject: CN=cee5e87018e03d3b012b9a74563e523c0ff03694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:54:b9:c5:b8:ea:9e:f8:02:3a:46:05:4a:
25:e7:83:7d:6f:94:2e:3d:cb:76:c8:87:3e:5c:38:
f0:39:ed:6b:27:e1:15:06:b2:12:e4:56:3d:07:59:
e6:96:ec:2a:b6:79:12:a2:32:eb:f5:34:c4:98:f1:
cb:1f:36:1f:9e:c5:93:79:db:e6:bf:27:a6:0e:a7:
75:54:98:d4:9b:ea:dd:2e:f7:b4:3e:d1:00:55:b4:
4e:3b:0b:62:51:5e:af:fe:81:e6:96:80:4f:3d:13:
b1:16:61:fa:b4:53:5d:43:cc:7e:bb:33:69:cf:b2:
b0:45:42:b5:18:d5:0d:cd:c1:b2:90:b2:c1:9e:73:
1d:98:bf:4d:cb:fe:1c:78:08:7a:d9:80:6a:dd:dd:
1d:20:33:a4:29:f7:8d:5a:75:23:1e:3f:26:ca:38:
e9:44:01:0c:11:ef:93:9c:dd:ef:9d:5f:42:6b:31:
f1:1e:06:d8:b7:1e:12:5b:2d:66:27:a3:62:87:22:
a9:96:a4:cf:20:7d:ba:80:2a:7b:35:4e:25:eb:8f:
6c:99:ac:25:f3:29:28:44:2d:e3:a6:d7:bd:58:6d:
99:30:10:81:ff:f7:b7:48:4f:d1:1a:06:f0:f9:14:
24:b0:53:0b:a1:95:52:c9:43:82:f7:a5:16:fd:2d:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E5:E8:70:18:E0:3D:3B:01:2B:9A:74:56:3E:52:3C:0F:F0:36:94
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8a:d8:29:54:ec:e5:24:5f:fd:e0:4b:bd:58:4e:8e:9d:df:
20:3c:aa:62:5d:af:b6:6b:be:93:e2:ea:31:fd:7b:95:8d:2d:
db:13:aa:38:de:0d:31:80:ba:1e:b7:96:b4:b2:64:5d:62:3c:
5d:e1:43:8f:a9:2c:97:ba:c1:6a:d4:0d:0c:43:ac:2e:f1:f0:
77:39:e5:dd:49:03:24:e4:a9:30:b8:d6:d5:38:3d:76:4d:67:
f1:8d:d1:4d:d2:3c:7b:59:64:cd:f9:5b:ab:9e:8d:7e:fe:2b:
0f:7f:ba:f7:0f:83:14:c0:2e:15:2d:ad:02:ee:03:c1:e0:47:
83:60:9a:31:78:b7:d7:b0:50:fd:79:6e:f8:5e:36:f3:b3:2d:
da:a2:f3:49:36:60:94:85:fc:3f:02:54:bd:eb:b4:50:28:f3:
00:af:3f:ec:7d:55:f6:66:ca:75:be:ad:1f:a6:5f:ea:cc:b2:
be:ca:07:9e:0a:2a:1a:d3:1a:00:13:ce:bd:95:f9:58:e2:41:
35:94:12:5d:81:b6:f3:f2:63:9b:be:ca:f1:b5:c9:69:1b:0d:
eb:c0:06:f4:27:40:02:a2:63:77:86:3e:1d:79:cb:47:a2:31:
4b:e1:cb:48:85:65:b0:41:4d:6d:f9:9a:cc:52:12:89:cb:76:
7a:08:15:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWd1hcXYk3E8yi6aeT7rnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm
ODVjNzEwHhcNMjUwMzI5MTAwMTU3WhcNMjUwMzMwMTAwMTU3WjAzMTEwLwYDVQQD
EyhjZWU1ZTg3MDE4ZTAzZDNiMDEyYjlhNzQ1NjNlNTIzYzBmZjAzNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFVUucW46p74AjpGBUol54N9b5Qu
Pct2yIc+XDjwOe1rJ+EVBrIS5FY9B1nmluwqtnkSojLr9TTEmPHLHzYfnsWTedvm
vyemDqd1VJjUm+rdLve0PtEAVbROOwtiUV6v/oHmloBPPROxFmH6tFNdQ8x+uzNp
z7KwRUK1GNUNzcGykLLBnnMdmL9Ny/4ceAh62YBq3d0dIDOkKfeNWnUjHj8myjjp
RAEMEe+TnN3vnV9CazHxHgbYtx4SWy1mJ6NihyKplqTPIH26gCp7NU4l649smawl
8ykoRC3jpte9WG2ZMBCB//e3SE/RGgbw+RQksFMLoZVSyUOC96UW/S12CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7l6HAY4D07ASuadFY+UjwP8DaUMB8GA1UdIwQY
MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt
OTkyOGRkM2YyZjgyLzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy
LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnorYKVTs
5SRf/eBLvVhOjp3fIDyqYl2vtmu+k+LqMf17lY0t2xOqON4NMYC6HreWtLJkXWI8
XeFDj6ksl7rBatQNDEOsLvHwdznl3UkDJOSpMLjW1Tg9dk1n8Y3RTdI8e1lkzflb
q56Nfv4rD3+69w+DFMAuFS2tAu4DweBHg2CaMXi317BQ/Xlu+F4287Mt2qLzSTZg
lIX8PwJUveu0UCjzAK8/7H1V9mbKdb6tH6Zf6syyvsoHngoqGtMaABPOvZX5WOJB
NZQSXYG28/Jjm77K8bXJaRsN68AG9CdAAqJjd4Y+HXnLR6IxS+HLSIVlsEFNbfma
zFISict2eggVNg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:47 2025 by rpki-client