Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: vwtc6YtQ8ThSk9GlvnoUoX2TcvzBZfOYwZLMik4HUEM=
Subject key identifier: 6D:5E:5E:FA:39:14:7A:67:D8:B1:75:80:4E:C7:21:CE:00:71:EA:C2
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 0195E046422DA21DEC4D5FD001F806A028D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 05:00:55 +0000
Manifest this update: Sat 29 Mar 2025 05:00:55 +0000
Manifest next update: Sun 30 Mar 2025 05:00:55 +0000
Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: wVVadEqUNYVRFtcoz2CPoE9lhXlO1MplbWLTqkXrQfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:42:2d:a2:1d:ec:4d:5f:d0:01:f8:06:a0:28:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Mar 29 05:00:55 2025 GMT
Not After : Mar 30 05:00:55 2025 GMT
Subject: CN=6d5e5efa39147a67d8b175804ec721ce0071eac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:6e:51:83:b5:74:73:17:35:f8:1f:6b:1f:
97:f6:19:70:20:d9:f9:37:e4:5f:0a:fe:cf:3f:80:
f0:d3:b1:fc:59:fa:1e:48:61:f7:d2:01:43:a4:23:
6c:6c:80:7c:59:d7:25:7b:4f:f1:d5:9d:6c:4e:15:
46:c5:73:df:7e:94:19:59:86:4d:db:5a:ca:1b:1d:
b8:68:9a:25:b1:6b:78:c0:33:6a:8d:f8:41:09:10:
4d:f0:01:66:39:a0:0a:e6:52:b6:91:62:eb:05:70:
f4:1a:b4:2d:d1:bf:48:31:b1:96:33:e1:e1:32:5c:
6a:01:2f:75:84:59:dd:da:cd:66:dc:07:bc:39:1c:
02:40:3e:9b:aa:b0:77:2d:60:90:f2:8d:5c:e0:d2:
2b:d1:47:5d:6b:e9:1c:24:b1:0a:e2:1d:4b:a4:45:
47:8f:6d:f5:3d:18:57:df:b7:c9:05:94:ff:5b:2d:
92:cd:92:1f:7f:13:7b:13:e7:39:da:08:1e:63:58:
b3:79:4b:10:5c:d1:11:ba:59:18:22:68:09:08:a1:
12:6b:d5:4d:c8:7f:2b:a5:1c:64:a5:ab:f1:da:34:
39:b0:a2:cd:31:bd:b3:51:fb:ac:df:5f:dc:7a:e5:
4d:d5:b3:7a:55:c8:77:62:1d:b7:bc:cd:3c:91:28:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:5E:FA:39:14:7A:67:D8:B1:75:80:4E:C7:21:CE:00:71:EA:C2
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:d9:6a:24:2f:e3:f1:be:a0:35:88:64:1d:f9:04:ec:63:
35:af:d3:19:4d:43:dc:a2:2e:6d:c3:7f:80:f0:d0:2c:37:ca:
38:58:ab:85:da:d9:f5:9c:3d:b2:42:a7:a5:63:62:18:fc:b9:
ab:1d:e2:62:5f:98:7a:99:0a:c8:ed:4f:c1:7c:6b:b9:c4:7d:
3d:e9:a9:1a:ff:a9:2d:85:dc:34:d8:17:76:53:15:d8:5b:d6:
df:d7:a9:c7:96:b8:7e:f6:4b:7e:83:e4:d1:45:3f:78:8b:68:
3c:8e:19:08:be:e5:20:03:79:0e:cb:58:22:f0:e9:29:3c:20:
1e:f8:4b:8c:84:12:3b:80:5d:77:e2:5c:d2:e3:2f:52:c0:df:
c7:81:05:ad:66:f2:42:fb:18:b7:6b:a7:5b:ec:fb:61:de:9d:
37:c7:a4:50:fb:b6:01:f1:9e:c3:43:12:6a:d2:14:d1:bf:9d:
1b:82:77:a9:55:37:06:19:39:9d:d9:9f:9e:04:2b:ef:97:87:
94:d2:55:de:84:cf:33:c5:8b:34:cd:6e:59:68:4b:ab:99:15:
bc:1a:97:2c:1a:28:88:b0:a7:09:64:59:81:30:a1:34:ee:06:
e6:e2:a9:69:d0:18:79:b4:92:67:dd:b8:98:a5:77:15:de:ff:
28:bc:11:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRkItoh3sTV/QAfgGoCjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNmUzZTEzMTExNDM5MTQ3ZjY1ZDMzN2Q1ZjBiMWJjMmVk
Nzk0MzQwHhcNMjUwMzI5MDUwMDU1WhcNMjUwMzMwMDUwMDU1WjAzMTEwLwYDVQQD
Eyg2ZDVlNWVmYTM5MTQ3YTY3ZDhiMTc1ODA0ZWM3MjFjZTAwNzFlYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhFuUYO1dHMXNfgfax+X9hlwINn5
N+RfCv7PP4Dw07H8WfoeSGH30gFDpCNsbIB8Wdcle0/x1Z1sThVGxXPffpQZWYZN
21rKGx24aJolsWt4wDNqjfhBCRBN8AFmOaAK5lK2kWLrBXD0GrQt0b9IMbGWM+Hh
MlxqAS91hFnd2s1m3Ae8ORwCQD6bqrB3LWCQ8o1c4NIr0Udda+kcJLEK4h1LpEVH
j231PRhX37fJBZT/Wy2SzZIffxN7E+c52ggeY1izeUsQXNERulkYImgJCKESa9VN
yH8rpRxkpavx2jQ5sKLNMb2zUfus31/ceuVN1bN6Vch3Yh23vM08kShypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1eXvo5FHpn2LF1gE7HIc4AcerCMB8GA1UdIwQY
MBaAFKxuPhMRFDkUf2XTN9Xwsbwu15Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQt
ZmVmZTg1N2ZlYTgwLzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQtZmVmZTg1N2ZlYTgw
LzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljDZaiQv
4/G+oDWIZB35BOxjNa/TGU1D3KIubcN/gPDQLDfKOFirhdrZ9Zw9skKnpWNiGPy5
qx3iYl+YepkKyO1PwXxrucR9PempGv+pLYXcNNgXdlMV2FvW39epx5a4fvZLfoPk
0UU/eItoPI4ZCL7lIAN5DstYIvDpKTwgHvhLjIQSO4Bdd+Jc0uMvUsDfx4EFrWby
QvsYt2unW+z7Yd6dN8ekUPu2AfGew0MSatIU0b+dG4J3qVU3Bhk5ndmfngQr75eH
lNJV3oTPM8WLNM1uWWhLq5kVvBqXLBooiLCnCWRZgTChNO4G5uKpadAYebSSZ924
mKV3Fd7/KLwR7w==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:21 2025 by rpki-client