Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: cbZKNrHVwOpShQWDpuUj293Q+7jZX+wt+f85FsemNh4=
Subject key identifier: 6B:5D:79:69:78:3C:DF:89:33:66:8A:F3:CF:4D:E3:C9:EE:E7:3D:BB
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 0194BCAA14712C92C9B76E56E85369BE2F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: C27v0ClmR0/fi9iHeYTkytmIydy8BTsxML2nIcqtHzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:14:71:2c:92:c9:b7:6e:56:e8:53:69:be:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=6b5d7969783cdf8933668af3cf4de3c9eee73dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:8d:59:6e:20:61:84:12:ec:24:fd:52:ef:
5a:19:bb:63:d7:4b:77:9a:8a:37:24:f7:fb:5e:03:
76:1a:88:85:30:bc:9e:48:27:da:cd:4e:33:91:64:
d7:d8:f2:9e:20:9b:fb:4e:c1:63:cc:c3:8c:9a:ad:
9c:6d:f3:02:2d:92:e0:16:f9:9d:b6:6d:b2:ab:a1:
a0:7b:3b:55:70:6a:f0:f1:89:f2:60:1a:24:53:68:
cb:d6:7f:24:ed:fd:5c:75:d8:ee:35:6a:e6:ef:6c:
46:af:21:22:a0:ba:cd:e8:86:37:da:45:1d:22:6e:
13:7a:77:09:7c:b1:c5:ef:18:64:52:21:89:62:60:
95:bb:c3:40:fe:f4:43:3f:a0:ae:e5:fd:22:8c:1a:
5b:33:03:74:11:06:45:80:c4:ed:23:c2:57:c8:f7:
92:73:70:af:03:85:ac:f5:8b:74:23:cc:3a:ab:57:
71:10:a3:2c:35:d9:ad:08:3f:89:4a:4d:a3:30:04:
ff:d6:0e:ca:a5:29:43:f6:74:86:c1:c4:0f:a0:38:
c2:d6:7f:d0:6f:98:45:a7:56:81:00:eb:e5:a5:ed:
4d:81:4c:76:34:d4:2c:5d:a4:a0:21:f5:d4:c8:1e:
5f:95:ea:f3:02:28:29:df:21:b6:66:2b:61:dd:6e:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:79:69:78:3C:DF:89:33:66:8A:F3:CF:4D:E3:C9:EE:E7:3D:BB
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:35:33:da:9e:0a:32:60:f6:5c:e0:c9:7d:5a:5d:b9:68:9e:
a2:da:ad:ce:09:74:06:12:56:25:a9:55:76:cf:d3:e6:37:b7:
16:12:c3:04:5c:6e:1a:24:c7:8e:ca:13:da:c1:3e:8b:7b:05:
c0:e2:4e:fe:78:26:7e:bd:76:20:64:40:8f:13:75:be:b9:63:
11:10:d5:ec:03:98:27:72:39:a2:8b:cd:cd:ee:6f:08:1a:dd:
51:08:54:db:24:25:93:da:fa:5f:8f:30:bc:98:61:0d:d6:d2:
7f:8c:9e:51:ae:95:8e:b6:ea:6e:6b:30:3d:51:71:b4:4c:6b:
31:cc:17:07:d0:6e:7d:f0:20:d5:79:dc:f1:03:c3:83:c6:2c:
8b:ca:fd:97:92:bf:01:1d:9f:f5:3e:a2:22:66:60:0f:97:11:
95:6a:b3:76:53:09:93:5c:df:8e:3d:34:3c:d6:06:07:9d:e7:
e0:f9:b8:2e:bb:e8:54:eb:dc:05:f7:9f:97:ba:b4:d3:94:5d:
f9:9c:dd:ad:d5:36:5d:70:36:6f:82:6b:12:45:7c:1c:04:43:
fa:09:f9:c3:dc:35:67:98:59:2d:e7:ea:6d:22:a3:4c:c4:8c:
6d:3b:b4:5b:b8:12:2f:46:bb:66:17:c4:c5:7b:ee:ab:92:24:
25:ec:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:27 2025 by rpki-client