Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: FFaovu6GscyaqqEn3krlYxEeKWir0hF/V0uWZbAgoIg=
Subject key identifier: 88:8C:27:D4:E7:BE:44:FF:86:C5:45:C1:81:B9:27:30:30:0D:5D:83
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 0194BCE0D399C652B4988C9E56FBA02560DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: bSL2/77e1fbmenzcIL9OHcF8FshIhCfLQ4j8DTP9J60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d3:99:c6:52:b4:98:8c:9e:56:fb:a0:25:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=888c27d4e7be44ff86c545c181b92730300d5d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:51:43:41:e4:cf:18:54:f4:8f:96:64:63:
9e:c1:06:a9:e9:28:89:3d:fc:5d:4a:cf:b2:c7:ac:
fd:71:05:2d:a8:98:21:b4:54:e0:d7:c7:41:1d:36:
f3:92:d9:f4:8a:2a:d9:97:10:90:03:9f:85:eb:0f:
bd:33:6f:84:51:65:7f:11:e7:7d:08:22:62:23:88:
f0:a9:8c:64:04:39:83:f4:7b:75:f9:81:1a:8b:67:
a6:fa:df:69:96:da:6d:a9:dd:33:a3:3c:e2:05:8e:
6d:25:7c:35:db:4a:f6:f1:02:5b:98:a9:13:eb:39:
c0:da:b4:59:6e:ee:d3:35:ee:d9:da:8a:55:02:70:
ed:c8:67:dd:d7:8f:3e:6f:8c:15:33:7a:e8:ea:ed:
5a:a9:19:9d:db:28:37:a4:41:21:92:ed:57:fc:67:
7c:85:e9:55:d6:0e:24:e8:c3:f6:c9:70:5c:f1:71:
4c:7a:d8:de:12:cd:b1:95:89:28:1b:c6:76:5c:94:
22:d9:87:c3:03:b0:22:ea:8e:db:05:3b:24:3e:6f:
24:35:76:86:fa:f8:57:d3:85:ab:7f:37:5c:d0:e4:
4f:05:13:f1:5e:ec:cc:46:54:6f:c8:ab:4c:43:1a:
45:3a:ea:41:14:40:d7:e2:e4:e4:3f:09:de:4d:e7:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8C:27:D4:E7:BE:44:FF:86:C5:45:C1:81:B9:27:30:30:0D:5D:83
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3d:e8:e4:9c:b4:c0:9f:e7:83:4f:9b:9e:1e:d5:18:7f:38:
f0:18:be:e9:dc:0b:49:f6:40:69:30:e0:ba:66:3c:52:c9:5b:
5b:d3:59:ae:47:43:7f:5e:a1:42:cf:99:15:d3:42:a5:4d:cb:
ce:95:bb:4c:34:3b:cc:f6:9d:86:ba:17:69:b0:13:e9:ff:61:
a9:ee:b4:5b:ef:5b:f4:8d:64:f8:6d:07:f9:cf:f2:8e:7d:b4:
4a:9b:21:13:52:7c:e9:8b:dd:e4:59:2f:99:d5:0f:64:9c:39:
bc:a5:7a:1d:82:3c:06:f0:b0:88:7d:71:99:b7:e1:3b:6d:76:
f6:e5:88:73:36:2c:ad:d6:3f:8d:7d:6e:d7:e5:d3:59:d0:7e:
57:9a:52:3d:37:76:1e:0d:7b:99:05:52:79:a2:e4:74:88:9a:
47:0a:fe:eb:4e:0e:97:97:11:39:06:d7:ae:9b:de:4c:f3:86:
6f:71:a9:e9:0d:88:ae:94:ef:b4:1e:df:bc:20:e6:f6:10:e5:
41:74:fa:48:fa:1e:aa:41:da:a5:a2:7e:5e:63:5c:37:03:a7:
da:37:75:de:a0:39:e1:79:5e:03:bf:9a:9b:ca:04:8e:44:d0:
35:91:18:8b:f1:f7:7c:8a:7e:8f:03:49:58:f4:ac:3c:55:8f:
f2:c0:59:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NOZxlK0mIyeVvugJWDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDQ5MTU1OGNkMjQ4NzVkYjUyNDI3MzQxMDUwMmZkYWUz
YTY3ODIwHhcNMjUwMTMxMTUwMDM4WhcNMjUwMjAxMTUwMDM4WjAzMTEwLwYDVQQD
Eyg4ODhjMjdkNGU3YmU0NGZmODZjNTQ1YzE4MWI5MjczMDMwMGQ1ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ppRQ0HkzxhU9I+WZGOewQap6SiJ
PfxdSs+yx6z9cQUtqJghtFTg18dBHTbzktn0iirZlxCQA5+F6w+9M2+EUWV/Eed9
CCJiI4jwqYxkBDmD9Ht1+YEai2em+t9pltptqd0zozziBY5tJXw120r28QJbmKkT
6znA2rRZbu7TNe7Z2opVAnDtyGfd148+b4wVM3ro6u1aqRmd2yg3pEEhku1X/Gd8
helV1g4k6MP2yXBc8XFMetjeEs2xlYkoG8Z2XJQi2YfDA7Ai6o7bBTskPm8kNXaG
+vhX04Wrfzdc0ORPBRPxXuzMRlRvyKtMQxpFOupBFEDX4uTkPwneTeeusQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiMJ9TnvkT/hsVFwYG5JzAwDV2DMB8GA1UdIwQY
MBaAFMxEkVWM0kh121JCc0EFAv2uOmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMt
YzhkNWMwNGUzZDQzLzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMtYzhkNWMwNGUzZDQz
LzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD3o5Jy0
wJ/ng0+bnh7VGH848Bi+6dwLSfZAaTDgumY8UslbW9NZrkdDf16hQs+ZFdNCpU3L
zpW7TDQ7zPadhroXabAT6f9hqe60W+9b9I1k+G0H+c/yjn20SpshE1J86Yvd5Fkv
mdUPZJw5vKV6HYI8BvCwiH1xmbfhO2129uWIczYsrdY/jX1u1+XTWdB+V5pSPTd2
Hg17mQVSeaLkdIiaRwr+604Ol5cROQbXrpveTPOGb3Gp6Q2IrpTvtB7fvCDm9hDl
QXT6SPoeqkHapaJ+XmNcNwOn2jd13qA54XleA7+am8oEjkTQNZEYi/H3fIp+jwNJ
WPSsPFWP8sBZSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:18 2025 by rpki-client