Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: d/oc4UI0HKuYU19uDK9dnVzGoYASl3HCSQXKE6ds+10=
Subject key identifier: DB:36:2B:0F:DC:E3:43:73:43:FC:75:10:FB:D2:75:B6:4F:87:CA:70
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 0195E0468FC1D2F07987823F0EC2515C3A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 05:01:15 +0000
Manifest this update: Sat 29 Mar 2025 05:01:15 +0000
Manifest next update: Sun 30 Mar 2025 05:01:15 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: EtBGmzRotTkLlVAUsseT1afPujhLAMxwCI+P8/UZBrM=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:8f:c1:d2:f0:79:87:82:3f:0e:c2:51:5c:3a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Mar 29 05:01:15 2025 GMT
Not After : Mar 30 05:01:15 2025 GMT
Subject: CN=db362b0fdce3437343fc7510fbd275b64f87ca70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:be:46:32:de:12:c8:8e:aa:23:03:39:f4:
67:7f:0b:76:35:58:8e:12:5e:b5:82:98:f8:4b:fc:
12:0c:e2:7d:83:07:94:8a:fc:70:fe:20:dc:2a:59:
6f:56:8b:16:49:24:7e:1d:83:fd:1f:b9:c6:61:df:
53:7f:fc:ac:3b:47:29:ce:8a:de:8c:4e:a1:b1:84:
66:55:55:cf:4d:bb:e2:9c:a1:8d:f8:26:e4:7c:e3:
e6:12:eb:c6:af:88:05:58:df:87:6e:a4:69:59:cf:
32:aa:2a:62:e3:d3:a6:13:da:f8:9a:44:fd:53:49:
36:62:c4:c3:05:44:e2:d6:6b:10:ea:1f:29:49:1c:
c9:cc:15:a7:3c:0d:f3:b4:cb:55:ee:3b:6d:ea:f1:
a2:84:96:b8:68:12:67:6f:05:a6:c5:a5:9c:60:4e:
c2:f5:4b:b7:65:b1:2b:09:6b:61:ec:88:82:82:a8:
42:7a:64:43:8c:6c:78:4b:c5:a6:a6:10:ec:ef:d1:
63:40:e8:2a:dd:d0:81:c0:2b:04:d7:21:2f:08:1b:
55:95:d5:f0:b1:bc:e9:00:f0:8d:e9:27:a1:75:08:
43:40:99:56:3b:17:af:ac:3e:17:55:75:ee:58:68:
1d:b9:29:4c:a1:6c:f7:62:ac:96:b7:ce:73:37:65:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:2B:0F:DC:E3:43:73:43:FC:75:10:FB:D2:75:B6:4F:87:CA:70
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:c7:05:cf:76:2f:88:bd:55:0b:3a:2e:3b:e1:49:d1:e8:
2c:39:16:c5:ee:34:4e:a3:2f:18:b8:3c:4b:39:f7:67:dc:6c:
c1:2c:0e:e3:b1:53:a6:b1:8a:0b:8d:74:9c:b5:db:d1:69:aa:
0c:f3:58:e1:6e:50:20:d1:bb:32:5d:65:b8:71:27:ef:b9:7d:
49:97:d2:67:bc:f7:b0:e7:ea:21:a3:0f:da:e5:f8:1e:b3:3c:
1e:04:bc:cc:da:e2:f3:1c:84:5d:2c:2f:6c:09:c3:86:54:c3:
28:cd:65:76:e5:49:58:72:fd:6d:3b:6a:96:c1:95:69:22:ce:
1d:e9:ef:64:fe:9a:f4:59:a0:80:94:78:7b:2d:4c:de:31:ef:
27:18:87:a0:37:a5:49:e9:27:61:d9:c6:1d:ef:d7:40:85:a6:
ea:ec:44:ce:dd:81:33:f0:4f:7f:83:af:e7:5c:bc:3e:b1:5a:
e4:e6:96:47:a1:8e:f8:04:3c:c8:dd:a8:1c:fb:6d:d2:cf:25:
1f:f6:a0:ff:46:69:38:c4:64:6a:39:3b:0b:2b:d4:84:2a:e1:
1c:4a:bd:c5:98:4c:e7:c9:3c:6d:9f:40:cf:1c:5d:3d:ff:76:
da:11:d0:e1:0a:10:93:ac:a1:14:9f:53:6f:7b:fb:24:44:8d:
f4:55:99:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRo/B0vB5h4I/DsJRXDowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDhkYTdjYmU4Y2E0MTg2NWJkYTFhMDgyZTAwY2I1YzI1
ODg3YWYwHhcNMjUwMzI5MDUwMTE1WhcNMjUwMzMwMDUwMTE1WjAzMTEwLwYDVQQD
EyhkYjM2MmIwZmRjZTM0MzczNDNmYzc1MTBmYmQyNzViNjRmODdjYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/K+RjLeEsiOqiMDOfRnfwt2NViO
El61gpj4S/wSDOJ9gweUivxw/iDcKllvVosWSSR+HYP9H7nGYd9Tf/ysO0cpzore
jE6hsYRmVVXPTbvinKGN+CbkfOPmEuvGr4gFWN+HbqRpWc8yqipi49OmE9r4mkT9
U0k2YsTDBUTi1msQ6h8pSRzJzBWnPA3ztMtV7jtt6vGihJa4aBJnbwWmxaWcYE7C
9Uu3ZbErCWth7IiCgqhCemRDjGx4S8WmphDs79FjQOgq3dCBwCsE1yEvCBtVldXw
sbzpAPCN6SehdQhDQJlWOxevrD4XVXXuWGgduSlMoWz3YqyWt85zN2WkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs2Kw/c40NzQ/x1EPvSdbZPh8pwMB8GA1UdIwQY
MBaAFINI2ny+jKQYZb2hoILgDLXCWIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgt
YTI5NjA5MmJlMTUzLzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgtYTI5NjA5MmJlMTUz
LzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewjHBc92
L4i9VQs6LjvhSdHoLDkWxe40TqMvGLg8Szn3Z9xswSwO47FTprGKC410nLXb0Wmq
DPNY4W5QING7Ml1luHEn77l9SZfSZ7z3sOfqIaMP2uX4HrM8HgS8zNri8xyEXSwv
bAnDhlTDKM1lduVJWHL9bTtqlsGVaSLOHenvZP6a9FmggJR4ey1M3jHvJxiHoDel
SeknYdnGHe/XQIWm6uxEzt2BM/BPf4Ov51y8PrFa5OaWR6GO+AQ8yN2oHPtt0s8l
H/ag/0ZpOMRkajk7CyvUhCrhHEq9xZhM58k8bZ9AzxxdPf922hHQ4QoQk6yhFJ9T
b3v7JESN9FWZOQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:12:41 2025 by rpki-client