Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
File: G68dbBfxeiDxUwVXZjn97fqihaQ.mft (raw, json)
Hash identifier: 67TyoGv/eRYPqqxidNYITYBgBKSpouQVvP/fhASjiow=
Subject key identifier: B4:FD:F8:A1:25:CC:53:29:98:50:AD:C9:1C:FE:53:93:FA:C2:63:98
Authority key identifier: 1B:AF:1D:6C:17:F1:7A:20:F1:53:05:57:66:39:FD:ED:FA:A2:85:A4
Certificate issuer: /CN=1baf1d6c17f17a20f15305576639fdedfaa285a4
Certificate serial: 0194B9E084A00518D4D029D95DCBB9451793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G68dbBfxeiDxUwVXZjn97fqihaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
Manifest number: 0525
Signing time: Fri 31 Jan 2025 01:01:26 +0000
Manifest this update: Fri 31 Jan 2025 01:01:26 +0000
Manifest next update: Sat 01 Feb 2025 01:01:26 +0000
Files and hashes: 1: G68dbBfxeiDxUwVXZjn97fqihaQ.crl (hash: h9l5zuIDP1TAbsNfAGEVktZMmIfIYXZkcONmheNKZrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:e0:84:a0:05:18:d4:d0:29:d9:5d:cb:b9:45:17:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1baf1d6c17f17a20f15305576639fdedfaa285a4
Validity
Not Before: Jan 31 01:01:26 2025 GMT
Not After : Feb 1 01:01:26 2025 GMT
Subject: CN=b4fdf8a125cc53299850adc91cfe5393fac26398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:98:f1:75:0b:1e:c9:62:07:b4:fd:3f:79:
4e:90:0c:4a:0c:c9:52:0d:0f:10:cb:57:62:a1:13:
b0:52:6d:50:95:00:38:2d:82:4e:ae:5e:4f:26:89:
b7:03:00:50:b5:03:8d:05:c8:ad:c5:95:e9:63:0f:
04:1d:dd:b2:f5:70:ad:40:77:3e:a3:00:d3:28:0b:
b5:d2:42:66:b7:83:b1:4d:25:c8:ac:58:c3:ac:88:
d1:33:2a:b7:24:b6:12:f3:aa:4b:d9:8a:8e:06:a4:
75:ac:46:15:42:45:e0:49:62:5f:7f:3c:c2:6a:d1:
6f:54:bc:6e:e6:66:67:55:77:91:94:ff:8e:92:df:
b8:04:fa:fd:e5:58:1d:1c:bd:c4:34:2e:48:1e:06:
af:3e:ee:73:30:69:c5:12:c9:f6:cd:d0:f1:85:65:
d7:46:76:5c:47:35:aa:bf:ee:7a:e9:7f:be:dd:42:
1e:71:85:6f:e8:d2:e0:45:d5:10:aa:17:c3:66:01:
87:d6:af:2a:5e:c1:d8:7b:08:87:ed:04:66:78:39:
d5:b8:93:6d:a6:1f:34:59:25:3b:dd:b6:36:eb:56:
04:b0:9a:9b:69:00:6a:e2:c5:70:fa:bf:d6:3a:03:
84:4a:04:43:ef:aa:1b:0b:80:fa:93:df:61:f7:f8:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:F8:A1:25:CC:53:29:98:50:AD:C9:1C:FE:53:93:FA:C2:63:98
X509v3 Authority Key Identifier:
keyid:1B:AF:1D:6C:17:F1:7A:20:F1:53:05:57:66:39:FD:ED:FA:A2:85:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G68dbBfxeiDxUwVXZjn97fqihaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ad:54:f6:d2:54:45:cf:57:e5:cd:fc:63:a6:6f:01:59:68:
25:7a:81:28:0e:7f:b6:c4:9d:d5:59:76:02:79:e8:dd:eb:77:
78:6d:58:19:4b:60:e0:58:71:4e:1c:58:5d:6f:b4:62:09:fd:
9c:70:84:db:65:b4:57:41:59:cd:10:b2:4f:3d:9f:30:c2:fc:
84:02:d7:4b:44:a4:06:9d:01:bf:4f:7f:f0:f1:ac:cc:59:c5:
bd:79:b9:e4:62:e8:10:77:c5:3f:5e:82:4d:71:d3:4a:b8:a7:
06:09:49:15:0d:b6:fe:32:f3:de:14:90:32:78:dc:70:a0:8b:
2d:26:24:0e:3d:d9:cc:ca:31:eb:5e:88:bf:26:f9:81:ca:a6:
3c:fc:99:c9:78:49:00:1e:7b:fa:77:a4:a5:26:05:5d:cf:cd:
a0:69:a1:dd:06:e4:9b:e5:f0:64:b3:ee:ea:43:c2:d5:71:fb:
8f:0f:94:06:21:5d:07:67:d0:a2:7e:52:4d:d4:c6:5c:0e:e5:
49:de:55:54:55:5d:4c:92:d5:65:91:6c:51:ac:54:54:29:36:
1e:e7:db:67:0b:52:69:65:a3:6b:47:3e:dc:23:7c:ae:32:55:
17:1e:5a:a8:05:14:0d:ea:7e:cf:d0:5a:b4:8e:d7:9b:57:50:
f2:34:30:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS54ISgBRjU0CnZXcu5RReTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYWYxZDZjMTdmMTdhMjBmMTUzMDU1NzY2MzlmZGVkZmFh
Mjg1YTQwHhcNMjUwMTMxMDEwMTI2WhcNMjUwMjAxMDEwMTI2WjAzMTEwLwYDVQQD
EyhiNGZkZjhhMTI1Y2M1MzI5OTg1MGFkYzkxY2ZlNTM5M2ZhYzI2Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOuY8XULHsliB7T9P3lOkAxKDMlS
DQ8Qy1dioROwUm1QlQA4LYJOrl5PJom3AwBQtQONBcitxZXpYw8EHd2y9XCtQHc+
owDTKAu10kJmt4OxTSXIrFjDrIjRMyq3JLYS86pL2YqOBqR1rEYVQkXgSWJffzzC
atFvVLxu5mZnVXeRlP+Okt+4BPr95VgdHL3ENC5IHgavPu5zMGnFEsn2zdDxhWXX
RnZcRzWqv+566X++3UIecYVv6NLgRdUQqhfDZgGH1q8qXsHYewiH7QRmeDnVuJNt
ph80WSU73bY261YEsJqbaQBq4sVw+r/WOgOESgRD76obC4D6k99h9/jh5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT9+KElzFMpmFCtyRz+U5P6wmOYMB8GA1UdIwQY
MBaAFBuvHWwX8Xog8VMFV2Y5/e36ooWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzY4ZGJCZnhlaUR4VXdWWFpqbjk3ZnFpaGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yYzY3N2UtMWM4Ny00NjY4LWFhMjEt
NTY2OTAzOTdkMDM5LzEvRzY4ZGJCZnhlaUR4VXdWWFpqbjk3ZnFpaGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yYzY3N2UtMWM4Ny00NjY4LWFhMjEtNTY2OTAzOTdkMDM5
LzEvRzY4ZGJCZnhlaUR4VXdWWFpqbjk3ZnFpaGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq1U9tJU
Rc9X5c38Y6ZvAVloJXqBKA5/tsSd1Vl2Anno3et3eG1YGUtg4FhxThxYXW+0Ygn9
nHCE22W0V0FZzRCyTz2fMML8hALXS0SkBp0Bv09/8PGszFnFvXm55GLoEHfFP16C
TXHTSrinBglJFQ22/jLz3hSQMnjccKCLLSYkDj3ZzMox616Ivyb5gcqmPPyZyXhJ
AB57+nekpSYFXc/NoGmh3Qbkm+XwZLPu6kPC1XH7jw+UBiFdB2fQon5STdTGXA7l
Sd5VVFVdTJLVZZFsUaxUVCk2HufbZwtSaWWja0c+3CN8rjJVFx5aqAUUDep+z9Ba
tI7Xm1dQ8jQw8A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:03 2025 by rpki-client