Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
File: gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft (raw, json)
Hash identifier: t5x5xLHm5M5Rey2Y8yH9/1/DvWCAXJMqi3MkPRICpKM=
Subject key identifier: 15:9C:46:5B:16:2F:4B:48:13:73:94:CC:B3:F5:BC:08:AE:0D:CA:C7
Authority key identifier: 80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
Certificate issuer: /CN=80a921408433b66ea50a4000aace10d2add06a85
Certificate serial: 0194BC3BD864F24D6F7E8ADD4120DF404589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
Manifest number: 0282
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl (hash: kt0z2Q2T+4clysiG93elOC0AvXd2WTz7DyM5TNdar+A=)
2: knOts_9A8gA0IVqYk7a99kaTuRI.roa (hash: kCE50cAQS4imaI4wXAlSfVZnkYJchZQUkd+tGc4tAWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:64:f2:4d:6f:7e:8a:dd:41:20:df:40:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a921408433b66ea50a4000aace10d2add06a85
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=159c465b162f4b48137394ccb3f5bc08ae0dcac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:71:d9:d8:6a:ed:7a:4f:a4:23:8d:ca:5e:
a4:fa:70:ba:34:9c:81:8b:0d:1c:95:2d:05:c0:3f:
90:26:5b:47:94:7b:8e:50:8a:53:50:bf:be:1e:27:
39:c3:10:ab:89:c7:39:1a:1c:22:0d:35:7f:23:84:
f9:ca:36:20:ac:d1:b5:63:e4:da:b3:ad:0b:75:95:
63:ee:2b:aa:37:11:32:4f:87:d2:ec:0b:ac:77:17:
86:3e:08:3a:1c:39:87:27:f7:7c:0c:97:40:f5:ca:
04:5f:cb:e4:e0:4d:3c:12:d5:6b:a9:bf:bc:1c:f2:
0c:03:e9:d1:77:71:49:ab:43:42:a3:69:1a:4e:9f:
46:b3:a5:f5:c4:ac:11:f4:27:4b:82:68:a1:ad:47:
a0:58:fc:4d:1b:fa:d7:b5:40:d3:37:30:21:be:25:
b2:2e:73:ac:75:2f:98:bc:be:71:88:23:b2:33:33:
c8:61:c9:db:b3:d5:9d:da:09:ee:ff:2b:02:5c:ab:
eb:80:0d:b9:b0:ad:d8:74:74:39:50:4d:2c:7c:2a:
f6:c0:53:f5:d6:93:91:8d:bb:6f:35:8f:af:b5:eb:
5e:e6:60:81:f3:b7:df:fd:4f:cb:16:fb:62:fe:5a:
78:64:7b:3e:7f:d7:95:ee:c1:3f:7e:0c:9c:d5:59:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:46:5B:16:2F:4B:48:13:73:94:CC:B3:F5:BC:08:AE:0D:CA:C7
X509v3 Authority Key Identifier:
keyid:80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:84:ca:4e:09:03:86:1e:a4:ad:9a:d6:ca:fb:e6:72:9f:
22:4c:ac:85:f7:bd:cc:9b:c9:fb:d0:08:e0:fd:91:d8:a4:3d:
b9:4d:e3:61:7d:62:37:01:63:74:cf:15:fa:30:ae:23:91:0f:
d8:07:bb:de:b2:02:57:8e:ed:12:e6:19:ce:fa:13:97:8a:14:
07:a3:53:c2:c4:fd:b8:d6:5c:f8:30:47:28:85:48:74:2c:9b:
75:77:75:b0:de:80:01:26:00:fd:28:3f:00:e1:6f:93:df:b4:
22:c7:e9:81:ba:10:77:d3:01:dd:cd:e2:2d:f8:40:70:df:71:
b2:bc:5f:4c:19:e2:d5:58:bd:4f:75:e3:c5:a4:4b:43:f9:b5:
26:5c:2a:8b:52:fb:34:c1:4d:86:f3:74:71:cd:72:36:17:90:
51:c1:68:8e:50:d1:0c:7c:58:ef:e2:c1:90:1e:e0:6b:9f:76:
4d:ea:07:a2:b5:19:e6:67:bf:c3:f7:9c:f3:aa:ce:df:81:58:
4f:60:53:8d:83:99:7d:f4:2b:6c:bd:dd:c3:10:fc:0a:ef:0a:
3b:8b:75:d7:c6:ea:a2:11:1f:fb:91:8f:b4:3a:c0:de:1c:45:
21:8b:bd:f1:98:b2:b3:07:06:77:71:0f:18:10:5a:68:ea:0d:
7c:25:77:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9hk8k1vfordQSDfQEWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTkyMTQwODQzM2I2NmVhNTBhNDAwMGFhY2UxMGQyYWRk
MDZhODUwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
EygxNTljNDY1YjE2MmY0YjQ4MTM3Mzk0Y2NiM2Y1YmMwOGFlMGRjYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfJx2dhq7XpPpCONyl6k+nC6NJyB
iw0clS0FwD+QJltHlHuOUIpTUL++Hic5wxCricc5GhwiDTV/I4T5yjYgrNG1Y+Ta
s60LdZVj7iuqNxEyT4fS7AusdxeGPgg6HDmHJ/d8DJdA9coEX8vk4E08EtVrqb+8
HPIMA+nRd3FJq0NCo2kaTp9Gs6X1xKwR9CdLgmihrUegWPxNG/rXtUDTNzAhviWy
LnOsdS+YvL5xiCOyMzPIYcnbs9Wd2gnu/ysCXKvrgA25sK3YdHQ5UE0sfCr2wFP1
1pORjbtvNY+vtete5mCB87ff/U/LFvti/lp4ZHs+f9eV7sE/fgyc1VkxGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWcRlsWL0tIE3OUzLP1vAiuDcrHMB8GA1UdIwQY
MBaAFICpIUCEM7ZupQpAAKrOENKt0GqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0traFFJUXp0bTZsQ2tBQXFzNFEwcTNRYW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kODA5YjEtZmFmNy00MGMyLTk0YmEt
ZjE4MTVhNDFhMDMzLzEvZ0traFFJUXp0bTZsQ2tBQXFzNFEwcTNRYW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kODA5YjEtZmFmNy00MGMyLTk0YmEtZjE4MTVhNDFhMDMz
LzEvZ0traFFJUXp0bTZsQ2tBQXFzNFEwcTNRYW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb2Eyk4J
A4YepK2a1sr75nKfIkyshfe9zJvJ+9AI4P2R2KQ9uU3jYX1iNwFjdM8V+jCuI5EP
2Ae73rICV47tEuYZzvoTl4oUB6NTwsT9uNZc+DBHKIVIdCybdXd1sN6AASYA/Sg/
AOFvk9+0IsfpgboQd9MB3c3iLfhAcN9xsrxfTBni1Vi9T3XjxaRLQ/m1Jlwqi1L7
NMFNhvN0cc1yNheQUcFojlDRDHxY7+LBkB7ga592TeoHorUZ5me/w/ec86rO34FY
T2BTjYOZffQrbL3dwxD8Cu8KO4t118bqohEf+5GPtDrA3hxFIYu98ZiyswcGd3EP
GBBaaOoNfCV3dg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:28 2025 by rpki-client