Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: C0ofdlia1qYXQ629pKuvxKv4NDjxebmfUkOwrtAYXNw=
Subject key identifier: 16:EB:D8:B3:10:13:AB:28:B6:6B:98:B4:06:05:DB:FA:81:2E:0B:6F
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0194BBCE3057C41E709E392311EFC0A48DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 61
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: Bmmw5vXixRsY3kANpQuOK4eIA78.roa (hash: rzJ9hjFHlMOHuxRaa+oQvNHPU2YWN8Uaq97BKxyXzCg=)
2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: DOWJj3vJczHUmeT53MCd3UC3DJ89sfJ3JjZ0tNtC2CQ=)
3: kRTK8deNmwdVUHDay7LLnI-Srew.roa (hash: OivrfB23rD0qMRXfARzBjENtqmmocXUha7CncOlWhdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:30:57:c4:1e:70:9e:39:23:11:ef:c0:a4:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=16ebd8b31013ab28b66b98b40605dbfa812e0b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:45:42:6a:f1:22:9b:64:d4:ab:3a:d8:61:
29:a1:76:58:e2:04:64:27:64:bd:f3:a8:95:6a:de:
47:8d:2d:ab:bb:02:5d:c5:b0:fb:1a:57:7e:1a:52:
94:77:3d:42:fd:56:3c:6e:06:80:96:1b:32:79:a6:
21:b7:d6:e2:0e:d7:1f:de:96:f6:8a:9d:c7:d2:4d:
6b:c8:23:59:89:c6:6c:b2:7b:08:d2:18:77:d0:d1:
4c:ee:3f:5e:09:d9:99:a5:e8:a2:24:f7:b7:d0:4a:
3f:45:99:3b:55:66:65:f5:21:a9:75:d6:26:fd:c1:
17:f3:28:63:bf:bf:2b:60:45:5d:f8:c6:81:eb:53:
f8:e3:2f:9d:ef:a7:46:4a:e4:11:fd:7d:44:43:c2:
96:0a:8c:9c:d9:52:70:f5:2f:46:37:8e:fa:11:d5:
e5:01:00:9d:d4:d4:e0:1d:db:92:14:ae:9a:65:5b:
4f:3d:f9:87:95:6b:9c:bb:a5:e7:2d:5e:98:f7:93:
84:62:90:e4:03:96:e0:46:e2:44:80:81:0f:67:27:
13:77:35:4c:ce:83:38:97:56:ef:f1:e6:c8:a4:49:
8d:06:4a:a7:61:ce:e8:4a:6f:73:10:f7:63:fe:d0:
98:96:4c:60:ba:b7:4d:08:a8:c4:07:60:0a:98:05:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:D8:B3:10:13:AB:28:B6:6B:98:B4:06:05:DB:FA:81:2E:0B:6F
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f8:ac:ed:c9:04:9e:cd:73:fc:dc:52:2a:af:ed:70:0e:0e:
5b:f1:26:b1:21:72:fa:e0:26:3d:2e:e4:7b:9b:e7:5b:e1:06:
e3:0b:68:dc:58:f0:23:06:42:6e:d0:ff:1e:f7:74:93:54:1a:
1a:6a:05:3a:62:b0:43:dd:7b:ed:a8:12:33:36:f0:ec:35:86:
51:ef:41:7a:0c:04:e3:c2:44:dd:f4:87:61:bb:82:2d:eb:37:
01:44:36:07:15:cf:49:9d:e6:87:7c:a3:88:22:f8:cc:ee:5b:
ef:f5:e9:c1:62:0e:49:58:3b:5d:34:d4:ba:e0:9d:2b:ca:ac:
f2:bd:28:31:f4:38:31:5d:c6:cc:48:dd:d8:04:b7:0b:18:08:
98:48:be:ad:4c:85:ae:08:90:77:3d:8c:ef:86:c3:fa:43:94:
f1:56:00:6a:3b:53:fa:14:80:2e:56:c1:a5:ce:0f:13:1c:e4:
1d:b1:9b:66:0d:94:e9:72:e1:fe:3d:71:49:81:fb:e5:5b:2c:
60:09:95:45:bd:fe:a1:27:e8:e8:11:79:54:3f:8e:ee:b2:85:
3a:ac:7b:3c:4a:43:e7:c1:dc:b2:ec:6a:45:6e:14:c5:a0:08:
db:1e:d4:17:bc:65:07:99:ea:e3:2f:40:ca:17:9f:17:01:f3:
eb:14:8b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjBXxB5wnjkjEe/ApI33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx
MzM0OTgwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
EygxNmViZDhiMzEwMTNhYjI4YjY2Yjk4YjQwNjA1ZGJmYTgxMmUwYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKhFQmrxIptk1Ks62GEpoXZY4gRk
J2S986iVat5HjS2ruwJdxbD7Gld+GlKUdz1C/VY8bgaAlhsyeaYht9biDtcf3pb2
ip3H0k1ryCNZicZssnsI0hh30NFM7j9eCdmZpeiiJPe30Eo/RZk7VWZl9SGpddYm
/cEX8yhjv78rYEVd+MaB61P44y+d76dGSuQR/X1EQ8KWCoyc2VJw9S9GN476EdXl
AQCd1NTgHduSFK6aZVtPPfmHlWucu6XnLV6Y95OEYpDkA5bgRuJEgIEPZycTdzVM
zoM4l1bv8ebIpEmNBkqnYc7oSm9zEPdj/tCYlkxgurdNCKjEB2AKmAUbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbr2LMQE6sotmuYtAYF2/qBLgtvMB8GA1UdIwQY
MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt
NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy
LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfis7ckE
ns1z/NxSKq/tcA4OW/EmsSFy+uAmPS7ke5vnW+EG4wto3FjwIwZCbtD/Hvd0k1Qa
GmoFOmKwQ9177agSMzbw7DWGUe9BegwE48JE3fSHYbuCLes3AUQ2BxXPSZ3mh3yj
iCL4zO5b7/XpwWIOSVg7XTTUuuCdK8qs8r0oMfQ4MV3GzEjd2AS3CxgImEi+rUyF
rgiQdz2M74bD+kOU8VYAajtT+hSALlbBpc4PExzkHbGbZg2U6XLh/j1xSYH75Vss
YAmVRb3+oSfo6BF5VD+O7rKFOqx7PEpD58HcsuxqRW4UxaAI2x7UF7xlB5nq4y9A
yhefFwHz6xSLSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:11 2025 by rpki-client