Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: 9Zx5Ab0stv+43ZpEqCFdGQppW830Ebo9vgwQZ43A12Y=
Subject key identifier: C9:9A:B1:BE:34:91:0B:37:97:0A:8C:00:EF:D4:09:E1:EA:C7:48:2A
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 0194BC73264CA108F1261A62BFE33CF99D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 0233
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: 7kNnRZulBLZmwAP4T8VF/Dayt6HHqd1wjPA0wgA0p9c=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:26:4c:a1:08:f1:26:1a:62:bf:e3:3c:f9:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=c99ab1be34910b37970a8c00efd409e1eac7482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:6e:5f:27:76:c1:0b:50:0c:f6:99:30:58:
cf:04:db:2a:a2:75:1a:fd:82:39:a1:57:67:61:a2:
3f:a4:c8:db:4f:36:0b:7b:68:99:42:f9:fd:94:0e:
d4:73:08:8b:d9:fb:05:2a:3a:b0:42:03:3b:13:be:
41:a3:66:24:6d:af:cb:bd:e3:c0:37:75:d2:b3:f5:
cb:e4:1c:3f:0a:2b:25:38:a2:2f:70:73:68:5d:36:
ed:14:c5:ea:87:99:cc:f7:34:00:03:78:69:bb:f0:
5b:7e:10:f8:b9:e3:f6:69:18:fe:b7:60:44:59:aa:
c5:c2:d9:ef:c1:fb:35:f9:5f:50:d1:a9:dc:d7:68:
7c:0c:24:e3:46:bf:81:98:0f:95:cd:f5:30:db:37:
24:59:c0:aa:42:24:67:ff:f6:b2:cf:53:65:b5:5b:
f7:8f:61:b6:e8:54:ed:88:1e:9e:67:8b:f3:12:d2:
29:26:07:da:f5:2e:59:d9:75:9a:2f:42:fb:6c:4a:
ad:96:5d:4d:1f:e8:c0:72:2d:9d:7b:0a:c1:4f:9f:
3c:02:79:1a:7e:0e:02:1a:35:42:84:19:b8:5f:5a:
09:3b:5b:05:e4:e4:6b:b7:22:43:df:d0:43:e8:de:
76:b9:e5:e2:6f:1f:81:d9:5a:25:d3:91:90:d5:33:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9A:B1:BE:34:91:0B:37:97:0A:8C:00:EF:D4:09:E1:EA:C7:48:2A
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bb:79:2e:ad:1f:55:de:b4:47:fb:a1:b0:f8:1d:6b:75:f8:
16:8e:c9:a5:15:5b:61:90:10:f9:3f:b2:dc:e8:54:5f:66:fe:
a9:40:6c:c5:7c:52:9b:45:de:fd:b9:e0:bb:71:0e:07:bc:9a:
40:a2:23:c1:84:8d:3d:be:05:c0:26:c8:d3:07:9e:99:e5:eb:
4d:5e:03:d9:f8:e6:db:f2:9c:be:f1:38:45:d1:83:b1:3c:81:
6b:9e:8c:f8:e9:70:5d:eb:c2:66:58:d7:e5:3f:4e:1c:65:d8:
39:25:1b:6c:b3:93:b7:56:1f:5d:e7:ab:2d:22:0f:3c:96:f7:
19:87:ac:e7:72:49:37:c2:ea:6f:bd:20:38:be:22:96:4d:f6:
3e:ec:fa:20:37:21:f1:47:f8:e7:9d:26:e6:ad:ff:50:9f:49:
3f:97:04:99:2c:49:68:2c:9f:b5:fc:78:4b:5f:f0:53:5e:f0:
3b:63:7a:25:0a:ab:87:50:87:35:8a:34:f1:16:72:39:a7:69:
3c:4f:11:25:66:65:8b:d6:66:d2:60:b3:fa:6f:b9:fc:3a:0b:
94:8a:65:02:cc:f4:ba:3c:14:81:5a:92:10:4f:33:fc:63:2b:
27:f2:21:7a:4c:f1:0b:07:c0:77:52:e3:ff:23:c2:3a:ce:9a:
89:a9:fa:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyZMoQjxJhpiv+M8+Z0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzY4ZmJmNWJiZDZkMzJmM2RkZGMyNGVjMjA0MDM4YzQ5
YjA1NTAwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EyhjOTlhYjFiZTM0OTEwYjM3OTcwYThjMDBlZmQ0MDllMWVhYzc0ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ZuXyd2wQtQDPaZMFjPBNsqonUa
/YI5oVdnYaI/pMjbTzYLe2iZQvn9lA7UcwiL2fsFKjqwQgM7E75Bo2Ykba/LvePA
N3XSs/XL5Bw/CislOKIvcHNoXTbtFMXqh5nM9zQAA3hpu/BbfhD4ueP2aRj+t2BE
WarFwtnvwfs1+V9Q0anc12h8DCTjRr+BmA+VzfUw2zckWcCqQiRn//ayz1NltVv3
j2G26FTtiB6eZ4vzEtIpJgfa9S5Z2XWaL0L7bEqtll1NH+jAci2dewrBT588Anka
fg4CGjVChBm4X1oJO1sF5ORrtyJD39BD6N52ueXibx+B2Vol05GQ1TNBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmasb40kQs3lwqMAO/UCeHqx0gqMB8GA1UdIwQY
MBaAFBs2j79bvW0y893cJOwgQDjEmwVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYt
ZmQ0NjA0ZDdlN2FmLzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYtZmQ0NjA0ZDdlN2Fm
LzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7t5Lq0f
Vd60R/uhsPgda3X4Fo7JpRVbYZAQ+T+y3OhUX2b+qUBsxXxSm0Xe/bngu3EOB7ya
QKIjwYSNPb4FwCbI0weemeXrTV4D2fjm2/KcvvE4RdGDsTyBa56M+OlwXevCZljX
5T9OHGXYOSUbbLOTt1YfXeerLSIPPJb3GYes53JJN8Lqb70gOL4ilk32Puz6IDch
8Uf4550m5q3/UJ9JP5cEmSxJaCyftfx4S1/wU17wO2N6JQqrh1CHNYo08RZyOadp
PE8RJWZli9Zm0mCz+m+5/DoLlIplAsz0ujwUgVqSEE8z/GMrJ/IhekzxCwfAd1Lj
/yPCOs6aian6MA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:48 2025 by rpki-client