Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.mft
File: 2GD28sMYVZ5llZzV8o0VmghC1yo.mft (raw, json)
Hash identifier: NKUFXxLroqqofJkWAdDYGs0aShW97kafoGGTvfpF6ro=
Subject key identifier: 98:36:36:C7:DD:32:9B:23:4D:54:DB:35:D9:05:A7:6B:E0:9A:F3:06
Authority key identifier: D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
Certificate issuer: /CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Certificate serial: 018BA970E8089AD498063B42A9F00E65BBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.mft
Manifest number: 0901
Signing time: Tue 07 Nov 2023 11:00:30 +0000
Manifest this update: Tue 07 Nov 2023 11:00:30 +0000
Manifest next update: Wed 08 Nov 2023 11:00:30 +0000
Files and hashes: 1: 2GD28sMYVZ5llZzV8o0VmghC1yo.crl (hash: 1gk2tc6BSV/Q/F5dY2l08qNXc3hhmNGsg427ITkee0c=)
2: nQylAYhsjd6Bxbyn4NbkEfcTJlM.roa (hash: yB/U8ue9JmAI4PPIy5rbQHXXiKl9UonrNcDNGhYANYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:70:e8:08:9a:d4:98:06:3b:42:a9:f0:0e:65:bb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Validity
Not Before: Nov 7 11:00:30 2023 GMT
Not After : Nov 8 11:00:30 2023 GMT
Subject: CN=983636c7dd329b234d54db35d905a76be09af306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:d5:25:6c:49:fb:70:bb:3a:cc:65:aa:e8:
4f:df:a7:02:11:65:dd:e1:3f:d7:82:5f:8c:cd:49:
7b:31:ed:aa:e8:97:4f:0c:cd:1a:d3:11:e3:70:63:
e9:fd:39:88:9d:66:ff:8d:85:ff:c4:62:7d:02:5e:
3d:62:3c:58:d2:92:0a:1c:d9:3a:d5:86:b3:50:17:
e1:d3:fc:91:33:93:6f:e8:c5:c9:41:13:93:15:28:
44:e9:87:65:57:ba:c0:5f:a6:98:13:ff:51:8f:14:
81:21:97:8b:15:d4:4b:45:37:e3:16:84:8a:5d:d4:
b1:06:5b:2a:c7:cd:2b:8b:d8:67:58:c3:32:a8:02:
8f:f9:35:54:02:3b:f1:47:85:fe:8b:a0:e7:6c:a0:
95:06:86:6a:8b:47:86:13:a1:61:09:03:0d:85:c0:
3f:96:f6:7d:94:e8:a5:97:08:43:83:77:0f:d5:db:
f2:2e:46:17:44:05:ac:5e:02:08:a1:c8:0f:5e:65:
83:4a:db:9c:bf:f1:41:05:54:b3:8e:8e:d1:df:36:
2a:ac:99:c9:c1:e0:ac:11:77:f0:60:46:ae:00:20:
fc:35:0a:cf:08:a5:fb:8f:f6:29:3f:4a:20:a2:15:
6d:91:9d:25:80:24:e2:ae:7e:8d:4b:d4:fe:64:0e:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:36:C7:DD:32:9B:23:4D:54:DB:35:D9:05:A7:6B:E0:9A:F3:06
X509v3 Authority Key Identifier:
keyid:D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:28:f3:98:93:dd:f9:01:50:55:cd:a8:2a:bc:d1:9a:01:cb:
44:0e:48:9c:40:90:de:bd:30:1c:d3:23:da:24:99:80:46:64:
0c:78:4e:b9:d4:22:53:78:df:19:c3:30:ac:93:7c:86:39:32:
58:3e:00:96:d8:94:03:44:01:96:cb:1a:7a:dd:f5:c8:f3:68:
6f:eb:06:68:8d:e5:92:6a:01:40:b0:2c:2e:9b:39:70:a2:41:
29:16:dc:54:72:ce:d1:03:c3:e4:48:5f:4a:5f:e5:41:d0:c4:
34:83:d9:01:a5:08:4f:fa:b5:ec:0b:c6:dc:7a:fe:8d:6e:f2:
3f:aa:c0:6e:10:3c:50:ad:10:4b:36:4a:ff:46:6b:40:95:8d:
e6:e0:44:ed:90:e0:c4:52:f0:6a:f3:f0:e3:47:17:d4:05:a8:
72:99:31:f5:2e:5a:6d:de:7d:87:fc:38:08:36:12:80:9f:33:
fc:7d:cb:49:ab:06:43:ba:99:f5:55:12:81:6a:d2:14:40:07:
8a:88:ac:de:d7:3c:47:26:a5:06:0c:01:e9:09:51:a0:f2:9c:
cd:c7:17:a1:1e:82:23:76:ab:34:36:31:52:fb:01:98:61:9a:
73:e6:2a:64:38:3a:6d:b5:eb:18:11:e7:9e:04:e5:f2:65:90:
45:93:4a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYupcOgImtSYBjtCqfAOZbuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjBmNmYyYzMxODU1OWU2NTk1OWNkNWYyOGQxNTlhMDg0
MmQ3MmEwHhcNMjMxMTA3MTEwMDMwWhcNMjMxMTA4MTEwMDMwWjAzMTEwLwYDVQQD
Eyg5ODM2MzZjN2RkMzI5YjIzNGQ1NGRiMzVkOTA1YTc2YmUwOWFmMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDjVJWxJ+3C7OsxlquhP36cCEWXd
4T/Xgl+MzUl7Me2q6JdPDM0a0xHjcGPp/TmInWb/jYX/xGJ9Al49YjxY0pIKHNk6
1YazUBfh0/yRM5Nv6MXJQROTFShE6YdlV7rAX6aYE/9RjxSBIZeLFdRLRTfjFoSK
XdSxBlsqx80ri9hnWMMyqAKP+TVUAjvxR4X+i6DnbKCVBoZqi0eGE6FhCQMNhcA/
lvZ9lOillwhDg3cP1dvyLkYXRAWsXgIIocgPXmWDStucv/FBBVSzjo7R3zYqrJnJ
weCsEXfwYEauACD8NQrPCKX7j/YpP0ogohVtkZ0lgCTirn6NS9T+ZA7ngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg2NsfdMpsjTVTbNdkFp2vgmvMGMB8GA1UdIwQY
MBaAFNhg9vLDGFWeZZWc1fKNFZoIQtcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdEMjhzTVlWWjVsbFp6VjhvMFZtZ2hDMXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83NjYwMmMtYzFhYy00NmEzLTgxYmMt
ZGVlZmYzYjJhZThhLzEvMkdEMjhzTVlWWjVsbFp6VjhvMFZtZ2hDMXlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83NjYwMmMtYzFhYy00NmEzLTgxYmMtZGVlZmYzYjJhZThh
LzEvMkdEMjhzTVlWWjVsbFp6VjhvMFZtZ2hDMXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADijzmJPd
+QFQVc2oKrzRmgHLRA5InECQ3r0wHNMj2iSZgEZkDHhOudQiU3jfGcMwrJN8hjky
WD4AltiUA0QBlssaet31yPNob+sGaI3lkmoBQLAsLps5cKJBKRbcVHLO0QPD5Ehf
Sl/lQdDENIPZAaUIT/q17AvG3Hr+jW7yP6rAbhA8UK0QSzZK/0ZrQJWN5uBE7ZDg
xFLwavPw40cX1AWocpkx9S5abd59h/w4CDYSgJ8z/H3LSasGQ7qZ9VUSgWrSFEAH
iois3tc8RyalBgwB6QlRoPKczccXoR6CI3arNDYxUvsBmGGac+YqZDg6bbXrGBHn
ngTl8mWQRZNKng==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:48:10 2025 by rpki-client