Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: ae3lU40pny8qTP31oHI034hARZAN+Ag6FOVdWj1iTIs=
Subject key identifier: E8:DC:E0:F6:E7:30:07:66:DE:A9:A1:CA:BE:10:71:7A:2E:D8:0E:58
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 0194BD17FA258E13EFC9EAF6A91631C4FD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 12EE
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: NE9uwxB0Dupd1gJJwynQcaAf3oRGlAoWE7U7aDzialo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:25:8e:13:ef:c9:ea:f6:a9:16:31:c4:fd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=e8dce0f6e7300766dea9a1cabe10717a2ed80e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:e7:14:77:e4:7a:23:ba:41:7c:0b:b6:0b:
45:6b:5b:14:38:c4:97:a9:4e:50:ec:8f:a4:ec:db:
5a:58:2d:72:f4:5e:c4:65:2d:de:9d:c8:00:f7:13:
3d:a8:1e:35:b4:83:16:30:d6:57:f1:10:a5:93:1c:
d9:91:a7:49:d8:c2:39:fe:bb:ae:f3:60:f8:17:c9:
7b:45:a0:cd:11:91:12:2b:1e:85:30:04:2c:59:a5:
1f:13:00:c0:fc:ba:ca:12:3f:3e:cf:42:55:58:71:
e7:eb:f2:96:5a:eb:ad:ca:4f:6e:dd:6c:76:1b:83:
47:d3:15:ff:ae:a2:87:ae:49:e2:76:8e:ac:90:d9:
63:ad:53:4f:57:b2:49:ea:80:d8:d5:d1:dd:65:47:
e4:8f:66:45:80:52:42:02:a7:a3:1f:04:4b:28:50:
38:3f:b6:2f:5c:2f:0d:70:bd:6f:39:8f:4a:00:d9:
6c:16:54:35:c1:df:ec:fe:c7:95:6b:16:5a:19:c2:
90:9c:f5:74:0b:17:a6:bd:b4:66:68:d0:e4:aa:ee:
0c:17:6e:21:81:2c:d3:e4:b2:0b:2e:04:45:62:a7:
bc:2a:63:4a:63:a3:62:19:5f:fa:ad:3c:63:61:fe:
b6:9f:44:63:61:4a:78:fa:ec:fa:7d:7f:a3:c2:28:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DC:E0:F6:E7:30:07:66:DE:A9:A1:CA:BE:10:71:7A:2E:D8:0E:58
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:91:5e:9b:e0:ca:e0:ce:d0:47:9f:42:5f:3f:12:77:09:e2:
8d:10:72:ee:65:e6:47:42:65:b9:ca:cb:23:81:27:2d:42:8a:
38:22:0c:04:73:e1:5a:6f:e0:88:69:56:54:fe:0f:e2:c1:e3:
5c:db:1c:31:63:67:35:f6:e8:e3:90:e2:5a:23:91:ec:35:e3:
31:b3:d4:35:40:55:a2:40:e3:f9:de:7e:e5:41:90:5c:63:db:
ec:83:95:1a:44:c8:5d:1c:03:57:79:ff:e0:dc:d0:1c:d5:36:
5a:6c:fd:f1:06:3f:32:32:a3:d5:49:a0:0b:7f:e1:b9:41:45:
ce:a9:0e:da:c9:55:99:9e:a1:88:35:f5:de:13:5d:63:62:6e:
8a:58:34:93:f8:64:b2:39:0c:07:63:2b:04:03:bc:2c:f9:78:
a4:eb:9d:a0:f5:af:6f:29:8b:1d:8a:ef:68:13:d5:0c:79:e2:
14:12:f1:ec:a7:55:75:ed:d9:06:db:57:02:49:c2:88:00:88:
f2:72:c9:7f:0b:6c:24:4c:f2:bf:28:b5:d1:35:bd:b9:c5:4a:
44:06:8c:aa:f2:1b:74:df:9d:e5:5a:fb:ed:d0:0f:0b:73:bd:
81:f3:f2:18:cd:91:04:2f:f1:6d:aa:f2:a1:35:5b:92:4c:8b:
b0:73:32:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/oljhPvyer2qRYxxP08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
EyhlOGRjZTBmNmU3MzAwNzY2ZGVhOWExY2FiZTEwNzE3YTJlZDgwZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7DnFHfkeiO6QXwLtgtFa1sUOMSX
qU5Q7I+k7NtaWC1y9F7EZS3encgA9xM9qB41tIMWMNZX8RClkxzZkadJ2MI5/ruu
82D4F8l7RaDNEZESKx6FMAQsWaUfEwDA/LrKEj8+z0JVWHHn6/KWWuutyk9u3Wx2
G4NH0xX/rqKHrknido6skNljrVNPV7JJ6oDY1dHdZUfkj2ZFgFJCAqejHwRLKFA4
P7YvXC8NcL1vOY9KANlsFlQ1wd/s/seVaxZaGcKQnPV0CxemvbRmaNDkqu4MF24h
gSzT5LILLgRFYqe8KmNKY6NiGV/6rTxjYf62n0RjYUp4+uz6fX+jwihzUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjc4PbnMAdm3qmhyr4QcXou2A5YMB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApFem+DK
4M7QR59CXz8SdwnijRBy7mXmR0JlucrLI4EnLUKKOCIMBHPhWm/giGlWVP4P4sHj
XNscMWNnNfbo45DiWiOR7DXjMbPUNUBVokDj+d5+5UGQXGPb7IOVGkTIXRwDV3n/
4NzQHNU2Wmz98QY/MjKj1UmgC3/huUFFzqkO2slVmZ6hiDX13hNdY2Juilg0k/hk
sjkMB2MrBAO8LPl4pOudoPWvbymLHYrvaBPVDHniFBLx7KdVde3ZBttXAknCiACI
8nLJfwtsJEzyvyi10TW9ucVKRAaMqvIbdN+d5Vr77dAPC3O9gfPyGM2RBC/xbary
oTVbkkyLsHMysw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:36 2025 by rpki-client