Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.mft
File: gnJlhg80BWaFvOdEYSyQqFwMrrM.mft (raw, json)
Hash identifier: gLVNP9yoetRhTFtg/lSZmygTJ351YuE7EbSqSQaL2Jg=
Subject key identifier: 27:BA:93:D5:69:A2:32:5B:70:39:EA:0E:39:33:AE:56:B0:46:DF:B4
Authority key identifier: 82:72:65:86:0F:34:05:66:85:BC:E7:44:61:2C:90:A8:5C:0C:AE:B3
Certificate issuer: /CN=827265860f34056685bce744612c90a85c0caeb3
Certificate serial: 019564401840277B25F242B1F0E9CCFE6DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnJlhg80BWaFvOdEYSyQqFwMrrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.mft
Manifest number: 04EF
Signing time: Wed 05 Mar 2025 03:01:16 +0000
Manifest this update: Wed 05 Mar 2025 03:01:16 +0000
Manifest next update: Thu 06 Mar 2025 03:01:16 +0000
Files and hashes: 1: gnJlhg80BWaFvOdEYSyQqFwMrrM.crl (hash: TcuYdeYwTcDohK89IL6t0Iig1iUOk59udWG1Qo2HYkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:40:18:40:27:7b:25:f2:42:b1:f0:e9:cc:fe:6d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827265860f34056685bce744612c90a85c0caeb3
Validity
Not Before: Mar 5 03:01:16 2025 GMT
Not After : Mar 6 03:01:16 2025 GMT
Subject: CN=27ba93d569a2325b7039ea0e3933ae56b046dfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:43:91:c4:13:24:4e:54:9c:a1:c5:ae:72:
ee:54:72:17:35:62:a3:d9:a0:da:83:41:c9:6b:b8:
62:9a:e4:2b:be:48:22:7a:f4:71:2f:c8:59:87:1c:
41:fb:b2:ac:ed:f0:07:62:d9:f8:20:5f:bd:0e:42:
b2:19:65:68:2a:e0:0e:ab:9e:08:f5:b4:aa:73:0d:
06:b6:75:96:80:dc:ed:18:cc:7e:62:ae:25:c5:3b:
96:59:8a:9c:41:b8:11:b8:d6:b5:4e:c6:94:d1:fb:
19:4b:bb:0c:f3:f4:60:4b:a5:41:92:8d:d9:53:8d:
3f:60:c7:e5:00:57:d3:8d:ea:81:b2:07:01:d8:52:
f4:18:1e:03:1e:60:53:a7:0f:17:27:16:04:06:b5:
ca:1b:e0:ee:58:69:fe:bf:b6:12:41:17:66:03:14:
a2:ec:17:b4:cc:a6:1d:d3:f6:fe:9f:8f:52:2e:9f:
e5:d6:18:8b:3b:61:e8:f2:f5:12:1d:6c:16:bf:54:
51:d1:ac:27:99:27:c7:3f:66:33:95:12:e6:e8:1f:
70:7e:60:04:d0:75:1a:20:4b:c2:ae:85:b8:c0:49:
6e:25:bf:4e:1b:3e:b4:91:69:53:18:9e:93:ee:7e:
5b:b5:57:26:a8:91:bc:8f:a3:be:b7:9b:72:d8:85:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:93:D5:69:A2:32:5B:70:39:EA:0E:39:33:AE:56:B0:46:DF:B4
X509v3 Authority Key Identifier:
keyid:82:72:65:86:0F:34:05:66:85:BC:E7:44:61:2C:90:A8:5C:0C:AE:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnJlhg80BWaFvOdEYSyQqFwMrrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59aa1d-a7ba-4d33-86c0-a982b767aa75/1/gnJlhg80BWaFvOdEYSyQqFwMrrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1d:02:9f:a1:66:a4:13:63:1e:dd:74:53:d5:b5:d4:77:ad:
2a:fc:c6:4a:eb:5a:4a:50:ce:c7:d7:d1:e9:56:b6:c7:29:26:
d7:dd:c1:d4:06:37:aa:4e:00:ba:2b:7e:55:53:76:85:ee:b9:
56:ce:5d:e3:c6:8c:9b:8b:15:58:97:06:42:51:52:a6:1a:a4:
b3:ea:82:48:66:d0:59:58:75:74:36:5e:c4:3b:36:e4:1f:61:
6c:ef:0f:ca:91:3a:9b:ed:0a:65:b2:74:f6:52:37:5e:5f:5c:
ee:aa:72:39:59:0e:29:2f:32:19:0b:cf:ae:89:38:3f:e3:6a:
6b:c5:e9:ea:bc:6a:16:13:ca:77:81:cb:dc:83:06:2b:1d:79:
a9:b7:dd:58:d4:38:d0:85:ab:d1:d5:c2:51:f3:7c:c4:b4:25:
fc:8c:7c:f5:83:20:d8:e1:b3:42:ab:29:55:05:eb:03:96:d3:
6b:5f:e2:90:90:39:bf:36:0d:24:a3:78:27:2b:2b:dd:d1:31:
46:a1:97:ca:b5:50:e9:14:7a:0a:fa:b4:29:dc:82:f9:38:d8:
b8:b4:ad:15:18:84:75:18:2c:76:3c:83:ff:ac:c9:08:3c:15:
c2:01:dc:b0:5a:5a:76:02:a9:8d:0a:a5:76:94:80:0d:d7:70:
42:41:35:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVkQBhAJ3sl8kKx8OnM/m3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzI2NTg2MGYzNDA1NjY4NWJjZTc0NDYxMmM5MGE4NWMw
Y2FlYjMwHhcNMjUwMzA1MDMwMTE2WhcNMjUwMzA2MDMwMTE2WjAzMTEwLwYDVQQD
EygyN2JhOTNkNTY5YTIzMjViNzAzOWVhMGUzOTMzYWU1NmIwNDZkZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmedDkcQTJE5UnKHFrnLuVHIXNWKj
2aDag0HJa7himuQrvkgievRxL8hZhxxB+7Ks7fAHYtn4IF+9DkKyGWVoKuAOq54I
9bSqcw0GtnWWgNztGMx+Yq4lxTuWWYqcQbgRuNa1TsaU0fsZS7sM8/RgS6VBko3Z
U40/YMflAFfTjeqBsgcB2FL0GB4DHmBTpw8XJxYEBrXKG+DuWGn+v7YSQRdmAxSi
7Be0zKYd0/b+n49SLp/l1hiLO2Ho8vUSHWwWv1RR0awnmSfHP2YzlRLm6B9wfmAE
0HUaIEvCroW4wEluJb9OGz60kWlTGJ6T7n5btVcmqJG8j6O+t5ty2IX1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCe6k9VpojJbcDnqDjkzrlawRt+0MB8GA1UdIwQY
MBaAFIJyZYYPNAVmhbznRGEskKhcDK6zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25KbGhnODBCV2FGdk9kRVlTeVFxRndNcnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81OWFhMWQtYTdiYS00ZDMzLTg2YzAt
YTk4MmI3NjdhYTc1LzEvZ25KbGhnODBCV2FGdk9kRVlTeVFxRndNcnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS81OWFhMWQtYTdiYS00ZDMzLTg2YzAtYTk4MmI3NjdhYTc1
LzEvZ25KbGhnODBCV2FGdk9kRVlTeVFxRndNcnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh0Cn6Fm
pBNjHt10U9W11HetKvzGSutaSlDOx9fR6Va2xykm193B1AY3qk4Auit+VVN2he65
Vs5d48aMm4sVWJcGQlFSphqks+qCSGbQWVh1dDZexDs25B9hbO8PypE6m+0KZbJ0
9lI3Xl9c7qpyOVkOKS8yGQvProk4P+Nqa8Xp6rxqFhPKd4HL3IMGKx15qbfdWNQ4
0IWr0dXCUfN8xLQl/Ix89YMg2OGzQqspVQXrA5bTa1/ikJA5vzYNJKN4Jysr3dEx
RqGXyrVQ6RR6Cvq0KdyC+TjYuLStFRiEdRgsdjyD/6zJCDwVwgHcsFpadgKpjQql
dpSADddwQkE1oA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:00 2025 by rpki-client