Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: UecM2se1iyFxkzBAseDHOWqg+2h6Mg87b0IfPPvFtQs=
Subject key identifier: 88:18:BC:85:9B:9C:F9:9E:AF:CC:D7:9A:45:97:2B:83:81:8B:78:31
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 0194BBCE6AE8A2E2A64929BF6AE9AB4C8F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa (hash: Q/XnpIbexx4X2BOItVZgFWxgUIF3KGLUNsRlADlMLPI=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: nKb0HLqaQtEqjvtN4Y2paZSWOZe9YnQYgo0s9+utwG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:e8:a2:e2:a6:49:29:bf:6a:e9:ab:4c:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=8818bc859b9cf99eafccd79a45972b83818b7831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:8a:0c:15:27:39:a1:2e:7e:da:ae:2a:ad:
b6:15:5e:92:44:db:9f:73:88:cd:04:48:e4:3c:bd:
c2:27:13:15:27:34:48:57:70:69:a5:d3:69:5c:51:
3c:80:6a:85:e0:9e:1f:e6:c2:d7:24:2a:63:41:82:
b5:bf:8a:c4:43:8e:4d:b9:75:05:a1:ca:1e:21:9f:
b4:91:6d:ff:9c:7b:78:55:a0:c8:4e:dd:ae:66:b8:
fb:07:4e:c6:be:8b:8c:cf:e2:08:25:1e:b5:07:f0:
91:df:a2:0f:c4:e7:11:72:9c:fd:28:10:7a:d7:41:
73:5c:24:6d:35:80:b9:0a:00:29:5c:24:a0:c4:af:
8f:a7:c7:07:f1:d7:d4:fa:f9:df:ac:34:9d:50:73:
ed:9b:ba:9c:3f:84:f2:50:07:bb:e8:84:b9:1c:0e:
67:52:f4:33:97:04:84:21:d9:99:29:b0:9f:28:f5:
1b:3a:13:3a:93:ea:6d:ad:9a:d7:b1:ee:51:e8:36:
3c:53:f3:a8:bc:e5:72:51:58:e2:02:09:7c:ed:34:
47:b3:45:a7:33:84:32:5a:4b:5f:4b:bb:19:c2:63:
3d:76:82:fe:34:3d:cb:14:9a:e1:86:fd:c3:d1:d2:
41:c6:cc:5e:25:de:a1:2e:bb:fa:c4:f9:b7:54:f4:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:18:BC:85:9B:9C:F9:9E:AF:CC:D7:9A:45:97:2B:83:81:8B:78:31
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:4c:3d:d2:a2:1b:33:4b:16:c3:a4:dc:90:9c:7a:ba:0d:
95:5f:c3:95:a6:62:dd:f2:cb:02:ef:47:5f:9f:df:31:30:5e:
36:51:46:0b:49:64:16:a5:ed:96:67:58:57:d7:65:99:ed:37:
a2:64:6f:eb:94:76:7d:2b:eb:11:51:52:92:e0:d8:11:23:66:
40:24:1d:e2:87:00:23:64:e9:21:05:9b:d1:37:2e:9c:ac:e0:
61:cf:b5:09:01:c2:0c:6c:1b:9b:97:05:7c:c6:24:3c:76:06:
57:da:c0:b9:48:6b:6b:74:96:c4:a3:1f:e4:f9:71:51:65:c5:
a8:4d:b4:c2:63:40:eb:27:ae:39:b2:69:e3:38:ff:3c:b7:d6:
0a:76:2f:21:49:0a:84:b8:58:ff:88:7f:7e:08:40:b1:fb:ca:
77:09:0a:9e:5d:e7:f9:35:1f:10:45:5a:60:c4:3d:e3:78:6c:
ab:03:e8:51:69:87:d6:76:09:10:65:d7:8d:36:b9:18:9f:3c:
5e:7f:0a:cd:09:74:39:83:07:0a:ae:ac:f9:4e:11:86:4e:05:
f6:f7:b8:09:76:9b:24:81:43:22:fe:cb:c0:5e:64:4f:5d:40:
15:93:1f:c8:7b:41:0e:f8:93:98:cd:3b:36:a8:a1:94:7d:b0:
f6:80:a2:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmroouKmSSm/aumrTI94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWQ0NTYwNDQ4Zjc4YTRkY2RjYjc5MWEwN2RhZDIxNjNh
MDhjZGYwHhcNMjUwMTMxMTAwMDU0WhcNMjUwMjAxMTAwMDU0WjAzMTEwLwYDVQQD
Eyg4ODE4YmM4NTliOWNmOTllYWZjY2Q3OWE0NTk3MmI4MzgxOGI3ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZeKDBUnOaEuftquKq22FV6SRNuf
c4jNBEjkPL3CJxMVJzRIV3BppdNpXFE8gGqF4J4f5sLXJCpjQYK1v4rEQ45NuXUF
ocoeIZ+0kW3/nHt4VaDITt2uZrj7B07GvouMz+IIJR61B/CR36IPxOcRcpz9KBB6
10FzXCRtNYC5CgApXCSgxK+Pp8cH8dfU+vnfrDSdUHPtm7qcP4TyUAe76IS5HA5n
UvQzlwSEIdmZKbCfKPUbOhM6k+ptrZrXse5R6DY8U/OovOVyUVjiAgl87TRHs0Wn
M4QyWktfS7sZwmM9doL+ND3LFJrhhv3D0dJBxsxeJd6hLrv6xPm3VPTYDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgYvIWbnPmer8zXmkWXK4OBi3gxMB8GA1UdIwQY
MBaAFM5dRWBEj3ik3Ny3kaB9rSFjoIzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQt
NzhkMTE0NGFkOTY3LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQtNzhkMTE0NGFkOTY3
LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNBMPdKi
GzNLFsOk3JCceroNlV/DlaZi3fLLAu9HX5/fMTBeNlFGC0lkFqXtlmdYV9dlme03
omRv65R2fSvrEVFSkuDYESNmQCQd4ocAI2TpIQWb0TcunKzgYc+1CQHCDGwbm5cF
fMYkPHYGV9rAuUhra3SWxKMf5PlxUWXFqE20wmNA6yeuObJp4zj/PLfWCnYvIUkK
hLhY/4h/fghAsfvKdwkKnl3n+TUfEEVaYMQ943hsqwPoUWmH1nYJEGXXjTa5GJ88
Xn8KzQl0OYMHCq6s+U4Rhk4F9ve4CXabJIFDIv7LwF5kT11AFZMfyHtBDviTmM07
NqihlH2w9oCiBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:30 2025 by rpki-client