Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
File: gREA7ka_Z6hJXo01Y1aWao0vfmU.mft (raw, json)
Hash identifier: QmUjXb0E/+M+s6Fd7fCLQBZFGUNJOk1yWI0UL0Jp3Xg=
Subject key identifier: 11:0E:58:46:27:DF:E4:F5:56:64:64:5C:75:EC:BD:7C:EA:1A:0E:95
Authority key identifier: 81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65
Certificate issuer: /CN=811100ee46bf67a8495e8d356356966a8d2f7e65
Certificate serial: 0194DEFE967273E7F7AA9EEC87A94F35A60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
Manifest number: 0CD1
Signing time: Fri 07 Feb 2025 06:00:14 +0000
Manifest this update: Fri 07 Feb 2025 06:00:14 +0000
Manifest next update: Sat 08 Feb 2025 06:00:14 +0000
Files and hashes: 1: EJMKvBCdw2_MsOq9C37gE8bMZd8.roa (hash: MMz57/tmiMn7pJo6P4gKh53NgUstZu29pckuqCa8kQs=)
2: gREA7ka_Z6hJXo01Y1aWao0vfmU.crl (hash: d3Nv8bmiACBPQpuNB/RX9mAT8xSwL5TxTFvuUqFYhds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:de:fe:96:72:73:e7:f7:aa:9e:ec:87:a9:4f:35:a6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811100ee46bf67a8495e8d356356966a8d2f7e65
Validity
Not Before: Feb 7 06:00:14 2025 GMT
Not After : Feb 8 06:00:14 2025 GMT
Subject: CN=110e584627dfe4f55664645c75ecbd7cea1a0e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:6c:f6:9c:7d:62:5d:84:cc:99:fa:5c:5b:
54:19:af:12:41:33:ff:54:5d:1f:d8:0d:f0:08:c0:
e2:00:ae:1b:10:e5:03:3a:32:e9:73:a4:f4:2f:83:
9b:bc:50:04:5d:3a:66:85:5f:82:f6:48:d8:f9:75:
70:f2:70:24:de:19:82:58:ec:43:71:4f:a7:9e:6e:
33:ab:5b:9f:9e:53:c1:1d:c7:d6:5d:eb:a5:0f:56:
e6:f1:20:b5:06:a3:f2:c4:05:f9:1c:73:8d:aa:d9:
93:e7:ab:a2:63:66:e7:2b:48:77:fd:c4:5a:eb:e9:
c1:8a:ca:0c:86:34:37:35:19:65:f4:92:fb:e4:20:
1d:23:67:fb:e9:2f:f4:98:7e:dd:da:a2:42:4f:fc:
f4:5d:bc:6e:46:90:a6:a9:67:6e:b5:b1:51:ee:d6:
3b:cc:99:19:57:c6:10:21:65:a7:88:5a:d0:b1:21:
8d:02:eb:3f:28:b7:1a:91:12:a6:69:54:9c:d4:fe:
fc:b2:c7:65:36:da:a7:7f:c4:21:54:56:29:02:87:
36:82:aa:86:97:a1:f5:e7:41:64:45:c9:20:4c:3b:
d3:a3:56:79:87:e6:3d:03:61:42:59:b1:af:13:71:
b6:ae:2a:31:2f:5a:93:45:99:61:be:1b:ad:d6:87:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0E:58:46:27:DF:E4:F5:56:64:64:5C:75:EC:BD:7C:EA:1A:0E:95
X509v3 Authority Key Identifier:
keyid:81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:8a:26:b7:1d:79:38:a6:6a:77:60:91:ce:b5:51:8d:57:
98:ab:57:b4:5f:4d:0b:2a:16:07:61:95:b0:3b:53:1f:31:42:
8b:c7:e6:51:b8:ac:32:2e:d7:fc:43:e5:09:6a:1a:c3:26:a3:
34:81:0e:88:f2:d1:8a:e1:d8:09:51:9a:f8:5a:08:48:3d:22:
23:d2:cb:e3:a9:ee:9a:41:2e:21:0d:a1:eb:fd:a9:56:a7:48:
77:91:53:3b:8b:74:b8:e6:43:aa:52:9f:c0:e2:e6:8b:07:4b:
99:fe:e9:ed:34:23:ef:0f:91:98:8b:d3:95:3c:3a:0a:23:31:
b2:5a:97:c6:3b:e6:89:61:ce:cf:c2:2e:8f:a6:3e:d7:32:bf:
4d:1d:7c:99:29:89:09:97:63:32:82:8b:e6:6d:76:f8:78:1d:
93:f8:bb:6d:9e:8b:87:fc:82:46:13:04:ae:a2:8a:a9:4f:51:
f6:9d:0f:a4:52:09:5f:2e:50:16:bb:58:fa:d8:bc:6d:b7:91:
ba:8c:51:8b:b0:1b:ab:da:08:8d:13:2f:70:4b:75:0a:24:3e:
b3:90:e7:2f:db:bb:26:80:b0:7c:5b:61:1a:e4:44:a3:52:c1:
f4:c1:9b:a7:67:8d:4a:f0:f9:d2:24:02:50:d4:5c:e3:bf:54:
fc:fe:af:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTe/pZyc+f3qp7sh6lPNaYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMTEwMGVlNDZiZjY3YTg0OTVlOGQzNTYzNTY5NjZhOGQy
ZjdlNjUwHhcNMjUwMjA3MDYwMDE0WhcNMjUwMjA4MDYwMDE0WjAzMTEwLwYDVQQD
EygxMTBlNTg0NjI3ZGZlNGY1NTY2NDY0NWM3NWVjYmQ3Y2VhMWEwZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCVs9px9Yl2EzJn6XFtUGa8SQTP/
VF0f2A3wCMDiAK4bEOUDOjLpc6T0L4ObvFAEXTpmhV+C9kjY+XVw8nAk3hmCWOxD
cU+nnm4zq1ufnlPBHcfWXeulD1bm8SC1BqPyxAX5HHONqtmT56uiY2bnK0h3/cRa
6+nBisoMhjQ3NRll9JL75CAdI2f76S/0mH7d2qJCT/z0XbxuRpCmqWdutbFR7tY7
zJkZV8YQIWWniFrQsSGNAus/KLcakRKmaVSc1P78ssdlNtqnf8QhVFYpAoc2gqqG
l6H150FkRckgTDvTo1Z5h+Y9A2FCWbGvE3G2rioxL1qTRZlhvhut1ofnsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEOWEYn3+T1VmRkXHXsvXzqGg6VMB8GA1UdIwQY
MBaAFIERAO5Gv2eoSV6NNWNWlmqNL35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JFQTdrYV9aNmhKWG8wMVkxYVdhbzB2Zm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kMzQzNzgtN2RhNC00MjMzLTk1MjIt
NTRlYjdjMDdhYWM0LzEvZ1JFQTdrYV9aNmhKWG8wMVkxYVdhbzB2Zm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kMzQzNzgtN2RhNC00MjMzLTk1MjItNTRlYjdjMDdhYWM0
LzEvZ1JFQTdrYV9aNmhKWG8wMVkxYVdhbzB2Zm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOmKJrcd
eTimandgkc61UY1XmKtXtF9NCyoWB2GVsDtTHzFCi8fmUbisMi7X/EPlCWoawyaj
NIEOiPLRiuHYCVGa+FoISD0iI9LL46numkEuIQ2h6/2pVqdId5FTO4t0uOZDqlKf
wOLmiwdLmf7p7TQj7w+RmIvTlTw6CiMxslqXxjvmiWHOz8Iuj6Y+1zK/TR18mSmJ
CZdjMoKL5m12+Hgdk/i7bZ6Lh/yCRhMErqKKqU9R9p0PpFIJXy5QFrtY+ti8bbeR
uoxRi7Abq9oIjRMvcEt1CiQ+s5DnL9u7JoCwfFthGuREo1LB9MGbp2eNSvD50iQC
UNRc479U/P6vfg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:25:59 2025 by rpki-client