Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.mft
File: guGrpuiUf5I4q8y-6gm6OKWdb1w.mft (raw, json)
Hash identifier: Gh/d7g+YVM0tcXwNcLQ02pvCX6tYUtzVcVQGuU/G2Fk=
Subject key identifier: 62:C2:34:52:EA:6A:1E:67:F4:72:BA:60:75:2B:0A:05:E2:03:76:49
Authority key identifier: 82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
Certificate issuer: /CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Certificate serial: 018CC7B046169779B64DC83906DBE36D6E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.mft
Manifest number: 08B0
Signing time: Tue 02 Jan 2024 01:01:07 +0000
Manifest this update: Tue 02 Jan 2024 01:01:07 +0000
Manifest next update: Wed 03 Jan 2024 01:01:07 +0000
Files and hashes: 1: WqoENP8a21ujexkNVT4Eg1GQQMk.roa (hash: iJauVepFoe5xAOjChoH0qBIMxtYc29tmFDeFfKkb65A=)
2: guGrpuiUf5I4q8y-6gm6OKWdb1w.crl (hash: MlfrMLqhBgBuuvaupgkZJr5TCY04T5XWGVXwqhBHGfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:b0:46:16:97:79:b6:4d:c8:39:06:db:e3:6d:6e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Validity
Not Before: Jan 2 01:01:07 2024 GMT
Not After : Jan 3 01:01:07 2024 GMT
Subject: CN=62c23452ea6a1e67f472ba60752b0a05e2037649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:72:67:16:fb:29:bf:7b:f8:6f:1e:05:63:
71:25:4a:c3:98:ad:30:ab:b5:c2:28:50:03:46:28:
ba:6b:40:32:1c:cb:ce:a5:bd:ab:ef:91:0a:46:1d:
ba:39:3f:cb:cb:5e:a1:18:a1:38:2c:aa:fd:c9:12:
b6:7f:9a:ad:d8:70:f2:aa:73:22:23:70:67:13:b4:
3d:a2:02:ac:c6:8d:0d:d9:e3:d0:93:9e:59:c8:2f:
05:eb:a5:f8:af:8a:3f:43:2a:22:5c:ed:df:b9:44:
8d:cb:d2:4f:f6:e7:e6:2d:79:e4:56:3c:6f:f8:85:
28:6b:8a:94:ae:58:85:92:78:5d:c5:49:4c:4d:48:
c1:5c:a9:3d:5a:2d:ff:64:0e:94:15:49:97:e9:e1:
10:22:47:c6:3e:a4:5b:af:00:1c:d5:12:c4:10:76:
1d:d3:76:37:ef:0a:d6:01:33:85:49:47:1f:b3:6d:
44:2b:92:f9:a0:cb:f5:0a:d0:d0:3e:3c:32:93:ce:
d2:24:a6:b3:58:83:43:16:f0:33:22:c3:f4:9f:ca:
34:ca:57:8c:e3:9a:6d:b4:bf:2e:96:e7:75:b7:79:
c1:9e:ba:f3:98:a3:39:24:9c:10:12:4c:35:e2:b2:
9d:96:3a:3e:c6:5d:a1:be:36:37:f8:ec:14:4c:8a:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:34:52:EA:6A:1E:67:F4:72:BA:60:75:2B:0A:05:E2:03:76:49
X509v3 Authority Key Identifier:
keyid:82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:92:e7:e6:ed:ac:a1:44:95:55:1b:5b:33:a7:0c:57:e5:c5:
43:b3:ed:f6:ef:40:e8:30:6f:f5:92:04:31:21:2e:a3:43:ae:
3d:e9:26:29:c8:13:12:9d:89:17:47:82:de:0f:5f:78:8c:85:
d6:87:26:18:0b:2b:85:e2:04:28:1c:a1:8b:d2:50:b4:e7:cb:
9e:fc:f2:04:cb:95:57:24:43:07:c4:5b:dd:84:65:72:bc:94:
0f:c0:e7:33:23:d3:7c:25:21:fd:78:e9:84:a5:d3:fe:72:1c:
77:77:c6:b7:32:aa:3c:13:f9:49:8f:b4:b6:c6:80:84:cd:e4:
9c:c9:be:c6:6a:6b:1a:56:7e:56:29:fb:60:dc:a5:9c:04:8b:
10:b6:b7:26:ed:7e:76:a2:ac:05:44:0a:75:51:2d:17:32:37:
55:d1:96:d0:7d:fd:0d:38:70:25:61:8c:2f:d4:3a:b3:cb:c3:
ab:5e:20:ab:32:bb:f7:38:7a:a7:56:e2:35:01:38:e1:b6:d0:
6b:83:c4:0a:33:5c:22:f4:ec:7a:66:f1:c3:36:57:92:d0:9c:
9c:62:57:40:d9:ca:b2:3c:88:04:be:9d:bc:9f:4e:eb:d1:c4:
8f:93:ba:40:22:75:64:d3:07:fd:46:b7:80:e3:04:07:1a:b5:
ee:79:08:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzHsEYWl3m2Tcg5BtvjbW5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTFhYmE2ZTg5NDdmOTIzOGFiY2NiZWVhMDliYTM4YTU5
ZDZmNWMwHhcNMjQwMTAyMDEwMTA3WhcNMjQwMTAzMDEwMTA3WjAzMTEwLwYDVQQD
Eyg2MmMyMzQ1MmVhNmExZTY3ZjQ3MmJhNjA3NTJiMGEwNWUyMDM3NjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwpyZxb7Kb97+G8eBWNxJUrDmK0w
q7XCKFADRii6a0AyHMvOpb2r75EKRh26OT/Ly16hGKE4LKr9yRK2f5qt2HDyqnMi
I3BnE7Q9ogKsxo0N2ePQk55ZyC8F66X4r4o/QyoiXO3fuUSNy9JP9ufmLXnkVjxv
+IUoa4qUrliFknhdxUlMTUjBXKk9Wi3/ZA6UFUmX6eEQIkfGPqRbrwAc1RLEEHYd
03Y37wrWATOFSUcfs21EK5L5oMv1CtDQPjwyk87SJKazWINDFvAzIsP0n8o0yleM
45pttL8ulud1t3nBnrrzmKM5JJwQEkw14rKdljo+xl2hvjY3+OwUTIoP/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLCNFLqah5n9HK6YHUrCgXiA3ZJMB8GA1UdIwQY
MBaAFILhq6bolH+SOKvMvuoJujilnW9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VHcnB1aVVmNUk0cTh5LTZnbTZPS1dkYjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEzODAtYmQ2YS00NmQzLTk4MWUt
OWY3MDQzNzU5YWNjLzEvZ3VHcnB1aVVmNUk0cTh5LTZnbTZPS1dkYjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYTEzODAtYmQ2YS00NmQzLTk4MWUtOWY3MDQzNzU5YWNj
LzEvZ3VHcnB1aVVmNUk0cTh5LTZnbTZPS1dkYjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5Ln5u2s
oUSVVRtbM6cMV+XFQ7Pt9u9A6DBv9ZIEMSEuo0OuPekmKcgTEp2JF0eC3g9feIyF
1ocmGAsrheIEKByhi9JQtOfLnvzyBMuVVyRDB8Rb3YRlcryUD8DnMyPTfCUh/Xjp
hKXT/nIcd3fGtzKqPBP5SY+0tsaAhM3knMm+xmprGlZ+Vin7YNylnASLELa3Ju1+
dqKsBUQKdVEtFzI3VdGW0H39DThwJWGML9Q6s8vDq14gqzK79zh6p1biNQE44bbQ
a4PECjNcIvTsembxwzZXktCcnGJXQNnKsjyIBL6dvJ9O69HEj5O6QCJ1ZNMH/Ua3
gOMEBxq17nkI7g==
-----END CERTIFICATE-----
Generated at Tue May 13 16:13:39 2025 by rpki-client