Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: CcNYQaxWlcIL4L+JdOh9WD3c55pMyRwwXFp1USsd3g8=
Subject key identifier: 87:23:4B:6D:3D:67:E5:AA:C1:38:20:BB:99:47:ED:AA:88:26:04:FD
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 0194BCE05CABB17640F3965F39E2B6A48274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: FyjTM40UNR2ke4FvXKy9NuFZqcouCMkkLg40ZIgsefA=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5c:ab:b1:76:40:f3:96:5f:39:e2:b6:a4:82:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=87234b6d3d67e5aac13820bb9947edaa882604fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:d4:67:2c:ae:31:2c:b1:29:26:a9:dd:c8:
67:99:f3:b9:14:f9:ed:f3:c5:3e:d0:24:ac:63:d8:
8f:6b:43:0b:9d:cb:4f:43:83:21:f2:ed:80:cc:6e:
7f:36:7b:38:25:e1:6c:70:c4:c8:1e:d4:fd:f2:57:
ea:36:a1:55:7b:fe:ef:18:3c:5f:85:0a:55:2a:2f:
b4:1c:f6:13:d6:42:f8:7d:38:b4:1f:30:ba:06:df:
2a:e4:a7:b9:bb:36:eb:e3:d0:8b:2c:db:d8:d9:d2:
15:72:e9:e0:6d:16:5b:75:82:3f:39:3a:04:b7:73:
71:30:15:9c:1c:52:22:48:50:b9:5c:db:e4:ef:95:
79:81:85:0c:60:d0:6f:78:14:e2:6c:5d:c2:28:91:
40:82:73:b6:6f:e8:f1:fc:89:ce:bc:51:73:e6:6e:
33:ca:cb:5e:ca:f5:cd:0e:af:b8:dd:94:8e:c0:59:
6b:a1:63:f7:a3:58:6a:86:6f:13:b1:73:dd:02:58:
43:81:83:b8:77:27:51:bf:fa:4d:db:a3:6f:3d:69:
d9:fa:c8:1d:ae:09:59:e2:98:99:c4:59:78:4e:d7:
de:2c:12:26:eb:4b:d1:22:c0:71:3a:8d:9b:07:11:
84:70:53:c3:ef:bd:79:98:7a:ed:38:10:5b:18:7a:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:23:4B:6D:3D:67:E5:AA:C1:38:20:BB:99:47:ED:AA:88:26:04:FD
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dd:44:61:bd:e7:ad:bf:44:b1:23:33:79:18:58:aa:7f:df:
07:fc:d9:3e:75:2f:8a:71:99:26:0c:49:a7:03:8a:c9:02:2f:
a7:7e:b4:b4:31:7a:86:c3:04:68:8b:14:bb:89:eb:e3:23:9b:
75:3f:28:aa:ed:c9:c8:a2:0e:8a:93:41:8d:1f:74:79:c8:55:
c1:35:3b:9f:c0:75:b8:1e:7f:ab:64:de:a7:53:c4:f9:eb:97:
a6:cc:a8:85:b8:68:bd:92:69:bd:3f:dc:87:9a:45:7f:85:c0:
f9:2a:4b:c9:00:3d:e7:3c:fb:c5:05:eb:40:76:0a:61:d7:1a:
64:dc:b9:fd:17:0d:88:e8:07:52:79:98:1f:99:15:ae:19:6d:
23:04:cc:35:5f:2c:a5:27:ba:a9:27:ca:3d:84:80:0f:61:99:
29:58:bf:7d:bc:5d:a8:04:29:c8:7b:7b:44:24:fa:b5:ff:80:
e8:15:6f:96:df:ee:05:1c:b0:af:e1:76:93:df:34:f4:40:ef:
b0:b1:2e:e5:e6:aa:fe:37:21:89:0a:a1:e9:a9:74:01:06:13:
ca:af:f3:85:e1:12:3d:e9:66:b4:1c:f5:70:9e:da:57:7b:c0:
87:77:37:e0:cb:99:7f:8e:36:8d:7d:38:1c:32:83:cb:64:e0:
21:08:08:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84FyrsXZA85ZfOeK2pIJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy
NjM5NGEwHhcNMjUwMTMxMTUwMDA3WhcNMjUwMjAxMTUwMDA3WjAzMTEwLwYDVQQD
Eyg4NzIzNGI2ZDNkNjdlNWFhYzEzODIwYmI5OTQ3ZWRhYTg4MjYwNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1rUZyyuMSyxKSap3chnmfO5FPnt
88U+0CSsY9iPa0MLnctPQ4Mh8u2AzG5/Nns4JeFscMTIHtT98lfqNqFVe/7vGDxf
hQpVKi+0HPYT1kL4fTi0HzC6Bt8q5Ke5uzbr49CLLNvY2dIVcungbRZbdYI/OToE
t3NxMBWcHFIiSFC5XNvk75V5gYUMYNBveBTibF3CKJFAgnO2b+jx/InOvFFz5m4z
ysteyvXNDq+43ZSOwFlroWP3o1hqhm8TsXPdAlhDgYO4dydRv/pN26NvPWnZ+sgd
rglZ4piZxFl4TtfeLBIm60vRIsBxOo2bBxGEcFPD7715mHrtOBBbGHqDawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcjS209Z+WqwTggu5lH7aqIJgT9MB8GA1UdIwQY
MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt
NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5
LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbN1EYb3n
rb9EsSMzeRhYqn/fB/zZPnUvinGZJgxJpwOKyQIvp360tDF6hsMEaIsUu4nr4yOb
dT8oqu3JyKIOipNBjR90echVwTU7n8B1uB5/q2Tep1PE+euXpsyohbhovZJpvT/c
h5pFf4XA+SpLyQA95zz7xQXrQHYKYdcaZNy5/RcNiOgHUnmYH5kVrhltIwTMNV8s
pSe6qSfKPYSAD2GZKVi/fbxdqAQpyHt7RCT6tf+A6BVvlt/uBRywr+F2k9809EDv
sLEu5eaq/jchiQqh6al0AQYTyq/zheESPelmtBz1cJ7aV3vAh3c34MuZf442jX04
HDKDy2TgIQgI6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:44 2025 by rpki-client