Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.mft
File: gYkbJhxi2r93flUutewn135IQTk.mft (raw, json)
Hash identifier: MTD2x/1jJFotsFqiHsraNhzgc98dDFsdBgmpb1hzb4o=
Subject key identifier: 64:9C:6B:A3:E5:3D:4D:FC:45:A1:9E:19:57:EA:37:34:47:D8:FF:87
Authority key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
Certificate issuer: /CN=81891b261c62dabf777e552eb5ec27d77e484139
Certificate serial: 01851B04D9C11500CC34459D2A38715B0AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.mft
Manifest number: 0694
Signing time: Fri 16 Dec 2022 12:59:40 +0000
Manifest this update: Fri 16 Dec 2022 12:59:40 +0000
Manifest next update: Sat 17 Dec 2022 12:59:40 +0000
Files and hashes: 1: 1e2jF7yI-V3kszCcFeMjrO9sV4A.roa (hash: NXI+yM0S1fIgaS4X7j5/COWZsW0T/B2dJ4TvosO5tMI=)
2: gYkbJhxi2r93flUutewn135IQTk.crl (hash: 36e+JznOvw7N/5Sk6tSDKQF4ct6+h1UuKVqHOvm6Eq8=)
3: v8y1GHw4NH37DPNkvjgmmd-DHJQ.roa (hash: i3B1Z4ZkWOlj4o0jSR1ZXAu+kaHA3USkZDQv+v9zKMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:04:d9:c1:15:00:cc:34:45:9d:2a:38:71:5b:0a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81891b261c62dabf777e552eb5ec27d77e484139
Validity
Not Before: Dec 16 12:59:40 2022 GMT
Not After : Dec 17 12:59:40 2022 GMT
Subject: CN=649c6ba3e53d4dfc45a19e1957ea373447d8ff87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:6f:ce:c2:ac:73:b3:18:76:aa:6e:7b:ad:
48:05:d1:8a:6d:65:9a:c5:9b:cc:aa:63:06:77:73:
42:f6:f7:aa:64:e8:b6:0c:e6:51:35:61:76:14:53:
b3:69:f3:49:88:c3:74:0e:0e:ca:75:8b:f0:fb:70:
a6:5d:2a:04:61:a2:78:ec:83:02:47:91:31:9e:51:
ac:6a:b8:11:f1:1f:62:f1:6c:da:0d:b7:b4:e3:ee:
e0:1c:26:5b:04:b4:f0:38:5a:51:bb:9f:63:38:d9:
4c:21:b4:d7:54:f1:f9:48:cc:81:95:2a:23:a3:19:
67:17:1a:ce:27:9c:26:b4:99:2b:f9:67:71:6a:46:
5b:a4:b4:69:15:04:1c:e9:aa:84:cc:22:24:b4:ed:
23:6e:f8:00:f2:90:93:1c:e4:5a:25:27:20:9a:71:
f8:eb:35:6f:14:c9:21:9f:f6:e7:4e:c3:38:c2:39:
63:6f:b5:98:75:af:7a:cd:58:9d:40:ff:ad:4d:37:
dc:cc:47:f1:5e:f0:82:e4:33:d2:c1:17:f1:da:bd:
e0:78:4c:71:d8:5f:29:16:8a:b0:b2:60:8c:9f:4d:
85:89:d0:92:a1:62:41:d9:dc:4e:05:61:ba:27:b8:
a0:6f:df:8f:57:f5:3b:37:d9:f3:21:6a:e1:80:db:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:6B:A3:E5:3D:4D:FC:45:A1:9E:19:57:EA:37:34:47:D8:FF:87
X509v3 Authority Key Identifier:
keyid:81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e9:fa:96:a1:9b:1b:70:29:b8:d5:a3:f2:e1:03:d7:9f:33:
96:c8:76:a6:b5:cc:1c:35:cb:67:bf:fe:7a:b9:b2:fa:4d:1f:
2b:a6:7b:30:1b:99:8c:86:f4:44:2d:bb:bb:ab:67:ac:b1:35:
0e:f1:32:d8:7f:ba:57:85:58:22:81:3a:f3:23:e5:08:6c:5f:
2a:e8:6a:14:67:1c:09:65:2a:9e:0e:80:d6:d2:5d:3b:2a:b5:
52:8e:0c:9a:5a:d9:14:21:ff:e8:67:4c:8f:f4:ec:a7:14:99:
1a:50:1a:52:17:f6:8f:bb:42:18:2e:2e:6c:46:0d:68:52:bf:
f2:92:8f:30:41:6c:e2:e6:c5:17:40:c9:d2:73:7e:70:0b:52:
71:c7:63:d4:7e:13:3f:9b:18:a8:a8:6d:1d:e2:ce:b7:d3:fb:
04:46:cd:c0:b5:3c:58:40:21:d5:13:4b:52:7d:9f:e0:41:13:
d3:d5:0e:5c:07:d1:30:f5:d7:68:46:58:18:1a:20:5f:a2:eb:
e3:cd:54:d5:b3:16:ca:c2:6e:88:71:ce:3b:fe:80:ba:75:6e:
a9:52:b7:78:03:d9:d0:c7:32:a7:9f:3f:b2:bb:bb:eb:bb:0c:
c5:1e:10:b5:8e:39:c1:14:b8:72:d5:9f:7a:a5:4d:51:73:66:
1d:66:83:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUbBNnBFQDMNEWdKjhxWwrRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODkxYjI2MWM2MmRhYmY3NzdlNTUyZWI1ZWMyN2Q3N2U0
ODQxMzkwHhcNMjIxMjE2MTI1OTQwWhcNMjIxMjE3MTI1OTQwWjAzMTEwLwYDVQQD
Eyg2NDljNmJhM2U1M2Q0ZGZjNDVhMTllMTk1N2VhMzczNDQ3ZDhmZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ZvzsKsc7MYdqpue61IBdGKbWWa
xZvMqmMGd3NC9veqZOi2DOZRNWF2FFOzafNJiMN0Dg7KdYvw+3CmXSoEYaJ47IMC
R5ExnlGsargR8R9i8WzaDbe04+7gHCZbBLTwOFpRu59jONlMIbTXVPH5SMyBlSoj
oxlnFxrOJ5wmtJkr+WdxakZbpLRpFQQc6aqEzCIktO0jbvgA8pCTHORaJScgmnH4
6zVvFMkhn/bnTsM4wjljb7WYda96zVidQP+tTTfczEfxXvCC5DPSwRfx2r3geExx
2F8pFoqwsmCMn02FidCSoWJB2dxOBWG6J7igb9+PV/U7N9nzIWrhgNtmqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSca6PlPU38RaGeGVfqNzRH2P+HMB8GA1UdIwQY
MBaAFIGJGyYcYtq/d35VLrXsJ9d+SEE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lrYkpoeGkycjkzZmxVdXRld24xMzVJUVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZmJhY2QtZDA5Yy00YTJmLWFiZjkt
M2JlZjNmN2U0ZGViLzEvZ1lrYkpoeGkycjkzZmxVdXRld24xMzVJUVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZmJhY2QtZDA5Yy00YTJmLWFiZjktM2JlZjNmN2U0ZGVi
LzEvZ1lrYkpoeGkycjkzZmxVdXRld24xMzVJUVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeen6lqGb
G3ApuNWj8uED158zlsh2prXMHDXLZ7/+ermy+k0fK6Z7MBuZjIb0RC27u6tnrLE1
DvEy2H+6V4VYIoE68yPlCGxfKuhqFGccCWUqng6A1tJdOyq1Uo4MmlrZFCH/6GdM
j/TspxSZGlAaUhf2j7tCGC4ubEYNaFK/8pKPMEFs4ubFF0DJ0nN+cAtSccdj1H4T
P5sYqKhtHeLOt9P7BEbNwLU8WEAh1RNLUn2f4EET09UOXAfRMPXXaEZYGBogX6Lr
481U1bMWysJuiHHOO/6AunVuqVK3eAPZ0Mcyp58/sru767sMxR4QtY45wRS4ctWf
eqVNUXNmHWaD6A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:26:42 2025 by rpki-client