Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
File: gXzKamPisaqONiEq4uO2METHwds.mft (raw, json)
Hash identifier: woark9odEasw9VwqllgFTmrUlsT7me+c6hfPe6ETqsw=
Subject key identifier: E5:96:AE:DF:47:CB:C0:1A:6D:6D:E2:7C:75:76:0D:49:AE:63:FD:92
Authority key identifier: 81:7C:CA:6A:63:E2:B1:AA:8E:36:21:2A:E2:E3:B6:30:44:C7:C1:DB
Certificate issuer: /CN=817cca6a63e2b1aa8e36212ae2e3b63044c7c1db
Certificate serial: 01910BE1B49F78537993D7B534324E2FA2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXzKamPisaqONiEq4uO2METHwds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
Manifest number: 0A33
Signing time: Thu 01 Aug 2024 03:00:26 +0000
Manifest this update: Thu 01 Aug 2024 03:00:26 +0000
Manifest next update: Fri 02 Aug 2024 03:00:26 +0000
Files and hashes: 1: gXzKamPisaqONiEq4uO2METHwds.crl (hash: gCTAb7MwrGzJLCwABT0SvJP6USUEBq/K35j1+clovdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0b:e1:b4:9f:78:53:79:93:d7:b5:34:32:4e:2f:a2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cca6a63e2b1aa8e36212ae2e3b63044c7c1db
Validity
Not Before: Aug 1 03:00:26 2024 GMT
Not After : Aug 2 03:00:26 2024 GMT
Subject: CN=e596aedf47cbc01a6d6de27c75760d49ae63fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:83:92:71:1a:ac:e4:4d:07:f6:7b:54:27:56:
7e:1a:7b:1c:cd:90:f1:41:50:71:25:8e:56:36:53:
7d:aa:40:ea:82:bb:c6:28:bd:58:1f:02:4c:f4:c1:
b3:0e:4a:e5:83:51:92:87:c6:a6:02:0e:18:38:c5:
8d:24:38:5e:52:31:89:56:2d:63:1d:97:ca:9d:22:
3f:66:05:0f:86:4c:e1:ff:ec:9f:a7:c4:a2:1f:00:
b0:70:63:3f:1c:5b:ed:80:da:99:e6:f9:8f:27:5f:
08:3a:52:d5:d1:c2:56:ff:07:e2:75:ea:1c:8c:b4:
01:43:80:8e:2f:2a:e6:b4:d6:9b:41:d2:7d:32:65:
a7:b6:f9:53:2c:d0:3d:19:2a:c1:80:9b:11:cb:16:
17:ec:f6:22:e8:b2:92:d6:75:68:8e:fe:64:dc:53:
eb:f9:e4:07:b5:e7:ee:e5:7f:c4:e8:b2:f6:24:58:
67:fb:0e:28:16:51:64:61:df:1c:c0:f3:a3:de:bd:
0d:c4:05:42:bf:32:3b:08:67:21:25:fc:19:76:fb:
46:e4:e6:e9:31:b9:6b:bd:7e:b3:6c:da:5c:cd:71:
73:38:e1:d6:5b:ea:41:73:8b:55:f6:e2:9a:ab:a9:
7b:44:f8:ad:72:d3:1c:d8:d9:2f:a4:5e:88:0e:93:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:AE:DF:47:CB:C0:1A:6D:6D:E2:7C:75:76:0D:49:AE:63:FD:92
X509v3 Authority Key Identifier:
keyid:81:7C:CA:6A:63:E2:B1:AA:8E:36:21:2A:E2:E3:B6:30:44:C7:C1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXzKamPisaqONiEq4uO2METHwds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:cd:42:57:86:c4:f4:31:da:fc:3d:b3:d0:7b:8c:0c:55:
30:81:36:1a:e8:cb:d2:11:ff:c4:46:b1:73:e8:42:3d:61:65:
72:1f:19:64:04:32:c7:59:5f:c7:c2:c4:fd:1d:1f:f5:a2:df:
48:b0:e3:2a:6b:25:f4:66:57:df:fd:59:61:b1:88:d9:0c:81:
35:bc:f1:c4:56:0d:f1:b6:95:f9:40:d4:08:21:17:9a:36:e5:
28:83:ff:34:11:f8:14:c5:74:b9:a5:45:6a:e1:5e:6e:dd:c6:
22:ff:59:81:30:c5:99:84:13:ba:ee:d6:75:c1:12:aa:59:0f:
9e:ce:68:28:ff:67:13:9d:b7:db:c1:78:b4:9e:81:de:50:5d:
7e:d5:1a:8b:9b:20:25:a9:03:0d:9e:9b:81:50:23:c4:0e:47:
e2:77:83:97:0a:56:a2:33:75:d1:d1:ea:22:93:44:7f:b8:b9:
99:fa:67:a1:3a:89:b1:f7:8c:ef:67:24:f2:3c:06:5b:db:79:
d2:af:e2:d5:4a:91:8f:08:cd:5b:1a:60:9f:b2:de:19:41:7c:
9e:44:a9:0c:1c:16:b3:79:c7:4c:9c:b8:a4:a4:ec:32:e1:8e:
cf:a3:53:8c:43:6a:d6:9e:e2:d8:dc:d0:99:e3:77:ef:36:08:
da:69:3c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZEL4bSfeFN5k9e1NDJOL6K3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxN2NjYTZhNjNlMmIxYWE4ZTM2MjEyYWUyZTNiNjMwNDRj
N2MxZGIwHhcNMjQwODAxMDMwMDI2WhcNMjQwODAyMDMwMDI2WjAzMTEwLwYDVQQD
EyhlNTk2YWVkZjQ3Y2JjMDFhNmQ2ZGUyN2M3NTc2MGQ0OWFlNjNmZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YOScRqs5E0H9ntUJ1Z+GnsczZDx
QVBxJY5WNlN9qkDqgrvGKL1YHwJM9MGzDkrlg1GSh8amAg4YOMWNJDheUjGJVi1j
HZfKnSI/ZgUPhkzh/+yfp8SiHwCwcGM/HFvtgNqZ5vmPJ18IOlLV0cJW/wfideoc
jLQBQ4COLyrmtNabQdJ9MmWntvlTLNA9GSrBgJsRyxYX7PYi6LKS1nVojv5k3FPr
+eQHtefu5X/E6LL2JFhn+w4oFlFkYd8cwPOj3r0NxAVCvzI7CGchJfwZdvtG5Obp
MblrvX6zbNpczXFzOOHWW+pBc4tV9uKaq6l7RPitctMc2NkvpF6IDpPAuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWWrt9Hy8AabW3ifHV2DUmuY/2SMB8GA1UdIwQY
MBaAFIF8ympj4rGqjjYhKuLjtjBEx8HbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1h6S2FtUGlzYXFPTmlFcTR1TzJNRVRId2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jMTRiNTAtYTQ0Ni00NWIxLTgwNjQt
MWJlNTFjYzI0MjZlLzEvZ1h6S2FtUGlzYXFPTmlFcTR1TzJNRVRId2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jMTRiNTAtYTQ0Ni00NWIxLTgwNjQtMWJlNTFjYzI0MjZl
LzEvZ1h6S2FtUGlzYXFPTmlFcTR1TzJNRVRId2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHPNQleG
xPQx2vw9s9B7jAxVMIE2GujL0hH/xEaxc+hCPWFlch8ZZAQyx1lfx8LE/R0f9aLf
SLDjKmsl9GZX3/1ZYbGI2QyBNbzxxFYN8baV+UDUCCEXmjblKIP/NBH4FMV0uaVF
auFebt3GIv9ZgTDFmYQTuu7WdcESqlkPns5oKP9nE52328F4tJ6B3lBdftUai5sg
JakDDZ6bgVAjxA5H4neDlwpWojN10dHqIpNEf7i5mfpnoTqJsfeM72ck8jwGW9t5
0q/i1UqRjwjNWxpgn7LeGUF8nkSpDBwWs3nHTJy4pKTsMuGOz6NTjENq1p7i2NzQ
meN37zYI2mk89A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:28:21 2025 by rpki-client