Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: FtA362B6OkbnbY2hT9OqbRiopalzoW7jfiGMEExjF8I=
Subject key identifier: C4:45:42:25:EA:49:48:72:91:B8:79:28:34:BA:1F:69:F9:0A:3E:DB
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 0194BD17D45D181FB7F3893ED4988AEC611F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 1155
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: zbKPynw4qF1BeBVEJq+Wr9HRTJQla94mIty0Bc/Pebo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d4:5d:18:1f:b7:f3:89:3e:d4:98:8a:ec:61:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=c4454225ea49487291b8792834ba1f69f90a3edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:c8:01:ac:a1:85:6c:67:85:f1:82:b4:54:
26:f4:46:2b:3b:30:22:5c:2a:ec:7c:4b:53:14:cd:
d8:22:1f:57:50:7e:5b:c4:13:0f:b8:21:ee:57:bf:
66:28:cc:0d:d0:af:6b:46:0b:d8:02:c5:21:5f:1a:
65:10:3d:f9:4a:1f:be:8d:f6:15:69:b8:ac:c0:da:
3f:91:86:e8:ad:20:84:ec:24:0c:12:96:b4:42:03:
db:05:8e:48:31:ac:bb:08:d7:da:a6:e3:8c:38:87:
f2:71:fe:5b:a8:6a:cb:bc:ef:9d:80:b1:67:c4:a6:
86:97:40:b1:b1:42:b3:f0:46:04:5b:0c:59:04:9a:
b1:e8:bc:98:e2:64:67:0e:0b:83:50:43:82:2f:bf:
3d:92:1e:0f:2f:31:f7:e1:7d:65:68:c5:50:fa:6e:
2f:7e:fa:b1:0e:ba:ac:d7:ba:97:68:40:49:7a:05:
83:62:a5:7e:32:f4:d5:ce:8f:cb:f7:60:63:ed:09:
73:0e:30:25:1b:2e:84:73:68:f9:3a:db:f8:3a:1f:
71:a1:40:1b:6e:9d:b2:bb:c5:ad:fc:24:34:ea:45:
c5:e6:7c:90:16:f2:08:ea:f0:93:4e:55:7f:9c:ee:
8c:f0:a6:f7:b4:e2:3d:89:76:46:cc:17:1a:67:43:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:42:25:EA:49:48:72:91:B8:79:28:34:BA:1F:69:F9:0A:3E:DB
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d7:d6:8d:be:4e:20:1e:4f:00:23:84:bb:5b:dc:6b:0e:9f:
be:6d:09:e7:19:38:14:0f:49:57:de:51:25:9b:94:d1:51:6e:
a3:58:32:3f:2a:51:6f:25:e8:78:c5:18:62:76:03:75:f7:22:
39:c7:01:8c:0f:c5:e9:3b:fd:e7:64:44:5d:60:d2:16:60:43:
2e:29:82:a9:b9:9b:70:ca:e5:3a:52:f1:b5:14:60:65:d4:4f:
fd:0d:ec:6c:49:81:ed:3c:40:a0:0d:a2:bf:ac:11:b5:73:85:
d8:16:7c:93:b2:7a:8e:d8:a6:fa:51:b1:7e:d6:88:e8:17:19:
a2:3f:44:b1:fc:3a:a7:c6:64:0f:49:63:04:4e:ce:95:72:cb:
17:92:f2:78:fc:42:b8:ad:5c:0c:b2:c7:6f:38:ad:f2:33:d3:
3b:56:38:72:95:fc:ce:f9:0c:c2:6f:66:03:97:13:36:ca:55:
cb:fe:9c:88:e4:3d:59:8c:8a:47:83:bd:a2:e6:bd:14:70:b9:
2c:aa:82:4e:f6:45:24:83:b4:38:7b:3e:ca:98:82:20:bf:ff:
35:af:b3:58:b3:5e:c2:51:fd:40:24:01:a4:27:84:f0:55:20:
66:1a:f9:ce:ed:69:ac:1c:d4:31:ae:6f:db:17:89:bb:60:ec:
87:95:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:30 2025 by rpki-client