Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
File: gkL-ZPQXLuuwyWr35QtipQd6_go.mft (raw, json)
Hash identifier: STCdPapWlBvczaDSZ6/feuVdY8LJKKFJmvNLb95yeKQ=
Subject key identifier: 44:25:1D:9B:B2:C1:BD:84:28:CB:CD:F6:C9:B4:37:86:EB:CD:D0:AE
Authority key identifier: 82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A
Certificate issuer: /CN=8242fe64f4172eebb0c96af7e50b62a5077afe0a
Certificate serial: 0193A5B8EACC12664A075BD79B403C25C1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
Manifest number: 0351
Signing time: Sun 08 Dec 2024 10:02:59 +0000
Manifest this update: Sun 08 Dec 2024 10:02:59 +0000
Manifest next update: Mon 09 Dec 2024 10:02:59 +0000
Files and hashes: 1: XTozRMhly3IvXhoRW_g50hTRKj0.roa (hash: l/cBNXGXfrSY5YuPlMadO2F6GArICwMLuVhHYHtnimY=)
2: gkL-ZPQXLuuwyWr35QtipQd6_go.crl (hash: vxLHLDLWX8cq618i0ReOa+eyi/bReJrpPYAHe7zdnIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a5:b8:ea:cc:12:66:4a:07:5b:d7:9b:40:3c:25:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242fe64f4172eebb0c96af7e50b62a5077afe0a
Validity
Not Before: Dec 8 10:02:59 2024 GMT
Not After : Dec 9 10:02:59 2024 GMT
Subject: CN=44251d9bb2c1bd8428cbcdf6c9b43786ebcdd0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:4e:ce:6a:73:2e:b3:28:12:21:9a:4e:dc:
c5:b5:2c:1a:df:db:b7:ca:81:8b:92:8a:67:d5:26:
38:28:e6:11:c2:c9:11:16:dd:7a:53:33:06:c1:a3:
11:17:b2:b5:e1:15:71:02:a5:f6:2b:e1:34:88:5f:
da:ac:c1:30:e5:c5:9c:1c:10:3e:39:80:f9:73:ce:
e1:a4:5e:d6:4b:90:e4:95:d9:4f:85:5e:99:31:0f:
13:59:b2:ef:9e:0a:f7:f4:ea:74:a5:20:f1:17:f0:
24:09:a0:0c:b2:c4:22:dd:a5:01:41:ea:4c:e6:c4:
3d:65:05:33:2e:40:50:84:09:8a:b5:39:5c:5d:da:
eb:ca:24:e4:98:99:0f:6c:1d:50:9e:51:04:a6:02:
bd:57:08:3e:02:b1:c6:71:f6:01:92:af:dd:1c:67:
e7:dd:14:5e:83:3b:e0:e0:8c:74:0d:d0:03:bc:d5:
a3:f1:92:20:85:d3:13:83:16:18:ad:b4:95:ac:88:
68:56:a3:b3:50:cd:f1:97:30:74:3d:40:26:6a:33:
97:8b:d1:ee:5e:e0:db:46:58:86:4a:2e:99:6f:6b:
86:e4:27:e8:ae:80:2d:cf:29:38:97:a0:50:94:bb:
0e:aa:ce:95:c9:7d:86:8a:a8:40:98:ee:a6:67:d8:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:1D:9B:B2:C1:BD:84:28:CB:CD:F6:C9:B4:37:86:EB:CD:D0:AE
X509v3 Authority Key Identifier:
keyid:82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:06:86:0d:04:8e:53:fb:85:12:fe:bf:02:2c:32:06:a8:
32:ec:4d:a2:15:50:14:18:13:ab:33:32:0f:41:59:3e:1a:76:
08:6e:43:cc:2e:49:62:25:80:ec:b5:3f:19:4d:4d:7c:d8:32:
79:70:11:4d:73:aa:ff:80:f8:da:43:a2:b9:ad:d4:4f:6b:33:
e9:f9:ec:a7:e2:e4:d3:1b:fe:56:6b:c9:5f:bf:c2:14:b4:2c:
6f:8d:75:63:0d:91:75:61:45:0b:7f:20:ce:de:99:77:0f:54:
99:bc:60:61:df:38:ab:d1:38:93:51:30:03:a2:37:9c:ff:be:
38:8b:06:5d:a2:23:5f:a1:1b:f8:7b:c7:1d:48:74:d9:e0:7a:
4a:e4:d7:06:40:2d:a7:3f:78:eb:da:87:e3:a4:d9:e0:01:73:
8e:e6:7d:b9:cb:11:82:89:86:16:b6:25:18:2b:0e:2c:fc:a2:
d8:2c:dc:8e:c4:6a:e4:30:36:f2:be:58:b0:bb:ab:f9:bc:95:
b9:1a:93:e5:91:21:f1:b1:1e:b1:49:19:12:55:94:56:a5:cf:
79:59:f0:40:6e:9d:71:46:0d:36:db:8d:ce:b1:a0:bd:75:14:
c9:95:fe:ec:35:a1:de:55:2b:23:49:7c:31:c1:85:e3:20:89:
3d:f8:62:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOluOrMEmZKB1vXm0A8JcHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNDJmZTY0ZjQxNzJlZWJiMGM5NmFmN2U1MGI2MmE1MDc3
YWZlMGEwHhcNMjQxMjA4MTAwMjU5WhcNMjQxMjA5MTAwMjU5WjAzMTEwLwYDVQQD
Eyg0NDI1MWQ5YmIyYzFiZDg0MjhjYmNkZjZjOWI0Mzc4NmViY2RkMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuVOzmpzLrMoEiGaTtzFtSwa39u3
yoGLkopn1SY4KOYRwskRFt16UzMGwaMRF7K14RVxAqX2K+E0iF/arMEw5cWcHBA+
OYD5c87hpF7WS5DkldlPhV6ZMQ8TWbLvngr39Op0pSDxF/AkCaAMssQi3aUBQepM
5sQ9ZQUzLkBQhAmKtTlcXdrryiTkmJkPbB1QnlEEpgK9Vwg+ArHGcfYBkq/dHGfn
3RRegzvg4Ix0DdADvNWj8ZIghdMTgxYYrbSVrIhoVqOzUM3xlzB0PUAmajOXi9Hu
XuDbRliGSi6Zb2uG5CforoAtzyk4l6BQlLsOqs6VyX2GiqhAmO6mZ9jEhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQlHZuywb2EKMvN9sm0N4brzdCuMB8GA1UdIwQY
MBaAFIJC/mT0Fy7rsMlq9+ULYqUHev4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2tMLVpQUVhMdXV3eVdyMzVRdGlwUWQ2X2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hYjNkOTctY2Q4Mi00MjZjLWI3NGEt
ZTBjMWRmZGU4MjRhLzEvZ2tMLVpQUVhMdXV3eVdyMzVRdGlwUWQ2X2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hYjNkOTctY2Q4Mi00MjZjLWI3NGEtZTBjMWRmZGU4MjRh
LzEvZ2tMLVpQUVhMdXV3eVdyMzVRdGlwUWQ2X2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5IGhg0E
jlP7hRL+vwIsMgaoMuxNohVQFBgTqzMyD0FZPhp2CG5DzC5JYiWA7LU/GU1NfNgy
eXARTXOq/4D42kOiua3UT2sz6fnsp+Lk0xv+VmvJX7/CFLQsb411Yw2RdWFFC38g
zt6Zdw9UmbxgYd84q9E4k1EwA6I3nP++OIsGXaIjX6Eb+HvHHUh02eB6SuTXBkAt
pz9469qH46TZ4AFzjuZ9ucsRgomGFrYlGCsOLPyi2CzcjsRq5DA28r5YsLur+byV
uRqT5ZEh8bEesUkZElWUVqXPeVnwQG6dcUYNNtuNzrGgvXUUyZX+7DWh3lUrI0l8
McGF4yCJPfhijQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:54 2025 by rpki-client