Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: YPchqhvmn9v2vBpEumOuhvQrzFyeuOT3WnpD10njsbc=
Subject key identifier: 0D:9F:4F:2C:9B:94:8E:49:15:EC:3C:51:AB:46:1D:D3:BB:C2:76:EC
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 01962E2B04B64876D7D0A382DD4E40B4E080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: C1
Signing time: Sun 13 Apr 2025 08:01:33 +0000
Manifest this update: Sun 13 Apr 2025 08:01:33 +0000
Manifest next update: Mon 14 Apr 2025 08:01:33 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 6OD3kERnz4ASNnU1jyNLI0CS9gP6dpuGPJGnzRrkrKo=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:04:b6:48:76:d7:d0:a3:82:dd:4e:40:b4:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Apr 13 08:01:33 2025 GMT
Not After : Apr 14 08:01:33 2025 GMT
Subject: CN=0d9f4f2c9b948e4915ec3c51ab461dd3bbc276ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:c3:90:db:a2:5b:4f:49:71:7e:77:b9:33:
88:cf:50:d5:f9:62:74:57:89:d2:07:1a:b1:c0:0d:
40:9e:b1:d8:04:59:ad:40:98:36:60:27:d0:02:c6:
64:ef:50:49:3a:93:bd:74:fd:57:1d:59:db:0e:09:
7e:09:ef:55:7a:ab:2a:f5:8e:8d:10:26:69:e7:e0:
31:28:b1:4e:f2:4a:6b:05:72:87:25:71:f9:a1:42:
a5:7c:8d:5c:47:a9:1e:ee:60:3e:26:10:09:3b:37:
97:d0:b4:5b:26:62:36:9f:f9:d9:f5:97:05:68:6d:
68:4c:6a:fb:88:e2:d7:29:97:56:56:62:01:7d:59:
c7:79:59:f3:a0:4f:b8:18:b9:87:2b:41:bf:32:60:
6a:d8:52:01:25:53:0a:dc:27:4c:ae:e8:0d:90:56:
cd:24:8d:72:da:0f:8f:cc:16:05:1d:cf:90:32:fc:
cf:95:57:de:a2:ed:f8:d2:ee:fc:27:02:46:06:05:
b8:7e:21:ee:ce:50:a7:e8:bf:34:f9:64:4d:33:fc:
a0:ea:9b:62:45:7d:14:1e:fe:f5:5e:d9:6c:fc:cb:
9b:8a:94:52:07:19:95:6b:37:17:9a:e6:e0:95:cd:
b5:67:95:b9:f6:0d:31:e1:c4:2a:e2:11:52:0c:7f:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9F:4F:2C:9B:94:8E:49:15:EC:3C:51:AB:46:1D:D3:BB:C2:76:EC
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:14:95:8f:76:1c:96:bc:11:0d:f8:f3:ca:44:84:5e:cd:
ca:db:15:19:c1:da:e2:21:56:88:89:f8:06:55:0e:80:b2:68:
99:45:56:61:6a:57:17:6a:2c:74:45:72:10:6f:f6:1d:57:1a:
90:d1:36:8c:96:01:85:a9:f5:d9:be:8f:dc:ed:f7:5d:17:e5:
a6:a4:bc:9a:1c:b7:c5:0f:cf:ea:54:d5:5d:6c:aa:03:aa:a1:
d3:51:da:0e:a8:89:5c:f2:9c:fd:a1:cb:2d:4e:23:38:93:de:
bc:ae:b1:63:68:c9:29:97:af:97:da:64:1b:4b:ef:49:82:eb:
e8:9a:d3:ca:2b:8b:d1:32:d2:58:e5:06:70:67:15:29:d0:ad:
47:47:1c:ee:98:6f:aa:09:74:cb:bd:68:25:bd:4f:f7:6f:54:
93:a0:20:de:8d:91:db:83:a1:ae:d4:bb:27:ef:66:11:f9:23:
92:b4:46:50:e9:41:ac:97:a6:ed:58:ec:08:50:e6:68:1e:84:
82:9c:26:12:23:ba:0b:f8:a3:72:ac:07:e8:6a:cf:c1:39:7f:
1d:0f:19:bd:30:9c:60:b2:75:6a:16:21:cf:ed:e8:ae:2a:83:
f1:3e:56:a9:01:92:d6:c5:ea:de:44:e6:9c:1a:49:7a:cb:4d:
90:43:7b:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwS2SHbX0KOC3U5AtOCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz
NjQ1MjIwHhcNMjUwNDEzMDgwMTMzWhcNMjUwNDE0MDgwMTMzWjAzMTEwLwYDVQQD
EygwZDlmNGYyYzliOTQ4ZTQ5MTVlYzNjNTFhYjQ2MWRkM2JiYzI3NmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kXDkNuiW09JcX53uTOIz1DV+WJ0
V4nSBxqxwA1AnrHYBFmtQJg2YCfQAsZk71BJOpO9dP1XHVnbDgl+Ce9Veqsq9Y6N
ECZp5+AxKLFO8kprBXKHJXH5oUKlfI1cR6ke7mA+JhAJOzeX0LRbJmI2n/nZ9ZcF
aG1oTGr7iOLXKZdWVmIBfVnHeVnzoE+4GLmHK0G/MmBq2FIBJVMK3CdMrugNkFbN
JI1y2g+PzBYFHc+QMvzPlVfeou340u78JwJGBgW4fiHuzlCn6L80+WRNM/yg6pti
RX0UHv71Xtls/MubipRSBxmVazcXmubglc21Z5W59g0x4cQq4hFSDH/+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2fTyyblI5JFew8UatGHdO7wnbsMB8GA1UdIwQY
MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt
MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1
LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALMUlY92
HJa8EQ3488pEhF7NytsVGcHa4iFWiIn4BlUOgLJomUVWYWpXF2osdEVyEG/2HVca
kNE2jJYBhan12b6P3O33XRflpqS8mhy3xQ/P6lTVXWyqA6qh01HaDqiJXPKc/aHL
LU4jOJPevK6xY2jJKZevl9pkG0vvSYLr6JrTyiuL0TLSWOUGcGcVKdCtR0cc7phv
qgl0y71oJb1P929Uk6Ag3o2R24OhrtS7J+9mEfkjkrRGUOlBrJem7VjsCFDmaB6E
gpwmEiO6C/ijcqwH6GrPwTl/HQ8ZvTCcYLJ1ahYhz+3oriqD8T5WqQGS1sXq3kTm
nBpJestNkEN7vA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net