Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: gIuuCYyka/bEZJw5zwfTuI8URIozPzSIJH1FHPzEi0s=
Subject key identifier: AE:7D:97:BB:5A:5D:03:58:1D:D4:5D:E3:FD:BB:A5:81:42:B4:C3:64
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 0195E0EAF85469FAB41CB8D2AC6E207C6B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 137F
Signing time: Sat 29 Mar 2025 08:00:50 +0000
Manifest this update: Sat 29 Mar 2025 08:00:50 +0000
Manifest next update: Sun 30 Mar 2025 08:00:50 +0000
Files and hashes: 1: NEyDTqlcX5OCEhlMkSGLk38XcaA.roa (hash: 7WujgbjKtPDl4LQ5qeE/+lNldq0PYtaOD+dsUKWxhso=)
2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: 6WsLTQ1/2i82SMx0taZRhLJbRxRBBP9zt6WXbl90ZZ0=)
3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:ea:f8:54:69:fa:b4:1c:b8:d2:ac:6e:20:7c:6b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Mar 29 08:00:50 2025 GMT
Not After : Mar 30 08:00:50 2025 GMT
Subject: CN=ae7d97bb5a5d03581dd45de3fdbba58142b4c364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:d5:62:7a:4a:de:25:1a:f7:25:a1:af:3a:
96:a3:fb:f8:59:e7:eb:1f:91:d6:ce:91:c5:82:dc:
29:12:9f:82:fe:ae:33:c1:80:b4:70:6c:34:94:f3:
a0:40:81:99:f7:2d:35:52:ef:6a:9d:30:29:0e:54:
77:51:3b:da:91:2d:54:dd:8f:1e:a1:4a:94:ac:de:
94:f2:a0:34:d0:3d:65:05:ac:9a:14:92:52:de:27:
83:85:2e:35:81:f4:b3:c8:b4:1b:d6:7d:1c:96:99:
34:7d:fb:10:57:af:24:9f:ac:95:7b:a7:98:11:af:
cc:e6:6a:ff:4c:8d:d3:49:ca:a5:a1:8b:f2:14:24:
8c:b3:e1:b0:45:74:ad:b2:f2:8d:e3:6c:8f:21:f2:
48:5a:84:16:3e:c8:98:68:0c:fc:d6:ce:0a:9b:1e:
36:93:bf:c9:52:59:a1:ac:22:f9:50:16:7c:d8:52:
0a:e4:83:1c:8d:3b:e2:ce:e6:40:31:9d:10:9b:60:
c5:df:c8:8a:2f:1c:ea:68:7e:c1:01:3a:58:18:9a:
86:46:73:07:1c:0c:03:93:0d:d8:1e:ea:e3:ca:19:
94:f2:66:3b:cd:24:a1:ed:b2:3d:57:83:12:a5:71:
28:ce:db:db:63:b1:3f:2c:17:14:2c:41:21:13:7c:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:97:BB:5A:5D:03:58:1D:D4:5D:E3:FD:BB:A5:81:42:B4:C3:64
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e4:e8:0e:7f:0f:1d:c2:d7:50:e6:f0:63:1c:f4:d0:c4:1b:
6d:0f:77:91:d2:b4:03:cb:be:1c:f3:ca:f7:b4:18:70:bb:cf:
b6:20:36:0e:12:5e:28:ab:97:5b:92:47:6a:a9:1f:66:3d:64:
1a:21:8e:52:60:15:06:f0:01:6d:61:42:64:7e:5b:ec:3c:01:
5f:08:f9:61:c0:88:80:70:53:be:4d:7c:fa:73:f1:f4:c2:2a:
45:bb:b3:d5:8d:1a:fa:2f:95:51:12:57:08:90:dc:bf:9e:c8:
2d:41:5c:e6:50:ef:11:32:91:1a:c7:ad:8f:ef:9d:05:85:1f:
88:43:d6:62:c7:61:89:80:31:aa:38:9f:66:5a:b9:9f:2a:9d:
ec:ba:1f:b3:84:65:38:53:8e:41:fd:c8:5b:d9:24:29:df:bd:
a0:13:4f:d4:76:b4:70:4a:50:1f:9a:0f:35:99:81:81:04:88:
68:7f:32:ae:ef:c6:f8:72:50:f0:98:36:5d:b1:6d:43:09:ff:
aa:15:57:2a:5b:be:09:19:ec:cb:92:2b:68:f5:e5:9f:bd:7a:
7b:d6:b5:dc:cd:29:ca:55:89:b6:23:d7:79:00:db:8d:bc:6a:
e7:6b:ba:1f:44:1c:29:e8:93:80:6d:97:a8:cc:5d:64:0e:c4:
52:ce:70:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6vhUafq0HLjSrG4gfGsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw
MzIyZjkwHhcNMjUwMzI5MDgwMDUwWhcNMjUwMzMwMDgwMDUwWjAzMTEwLwYDVQQD
EyhhZTdkOTdiYjVhNWQwMzU4MWRkNDVkZTNmZGJiYTU4MTQyYjRjMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn7VYnpK3iUa9yWhrzqWo/v4Wefr
H5HWzpHFgtwpEp+C/q4zwYC0cGw0lPOgQIGZ9y01Uu9qnTApDlR3UTvakS1U3Y8e
oUqUrN6U8qA00D1lBayaFJJS3ieDhS41gfSzyLQb1n0clpk0ffsQV68kn6yVe6eY
Ea/M5mr/TI3TScqloYvyFCSMs+GwRXStsvKN42yPIfJIWoQWPsiYaAz81s4Kmx42
k7/JUlmhrCL5UBZ82FIK5IMcjTvizuZAMZ0Qm2DF38iKLxzqaH7BATpYGJqGRnMH
HAwDkw3YHurjyhmU8mY7zSSh7bI9V4MSpXEoztvbY7E/LBcULEEhE3y94wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK59l7taXQNYHdRd4/27pYFCtMNkMB8GA1UdIwQY
MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt
ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5
LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuToDn8P
HcLXUObwYxz00MQbbQ93kdK0A8u+HPPK97QYcLvPtiA2DhJeKKuXW5JHaqkfZj1k
GiGOUmAVBvABbWFCZH5b7DwBXwj5YcCIgHBTvk18+nPx9MIqRbuz1Y0a+i+VURJX
CJDcv57ILUFc5lDvETKRGsetj++dBYUfiEPWYsdhiYAxqjifZlq5nyqd7Lofs4Rl
OFOOQf3IW9kkKd+9oBNP1Ha0cEpQH5oPNZmBgQSIaH8yru/G+HJQ8Jg2XbFtQwn/
qhVXKlu+CRnsy5IraPXln716e9a13M0pylWJtiPXeQDbjbxq52u6H0QcKeiTgG2X
qMxdZA7EUs5wIg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:28 2025 by rpki-client