Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: yrenhrrWKFOdxkTZelLcP9rFK4Ucn0EU/hpZCZ/oxyQ=
Subject key identifier: 3B:07:DE:28:F4:E3:F7:A9:42:9E:89:B0:81:51:37:87:2E:58:21:2A
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 0194BC72B3AB048A0AFC6916A4AD25C68CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0BAD
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: RhakGWPu1mQfC8tbzN2YC5AZfNLpucnjmV9HWAEe9E0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:ab:04:8a:0a:fc:69:16:a4:ad:25:c6:8c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=3b07de28f4e3f7a9429e89b0815137872e58212a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:37:2d:ff:ca:35:cd:3a:bd:81:70:48:e1:
3a:79:f2:3b:64:b3:e1:a1:c5:fb:9c:9e:fc:10:a8:
9c:b0:92:ba:35:a8:1e:d4:42:c4:f0:c2:12:1a:61:
41:0a:c2:05:4e:33:08:e1:14:2f:7d:a0:fd:a8:39:
b3:fb:61:82:b5:80:0c:d5:52:b0:71:31:f6:55:f9:
7d:20:46:5c:a3:4c:40:9f:eb:cb:df:42:5b:23:13:
b4:f0:e1:8e:8a:2e:c8:53:0f:51:fd:45:83:97:8d:
29:44:f1:9d:82:36:64:43:b2:41:b4:04:38:dc:9b:
48:89:7a:68:30:0c:09:d6:99:73:27:23:e4:94:22:
7d:b6:bc:51:65:ed:95:5f:84:cf:53:fb:92:8d:7d:
d4:5c:ce:ce:bd:1c:eb:4e:9f:50:1f:54:56:cd:e5:
5f:d0:dd:0c:0e:4a:f1:3f:bf:7f:7a:24:6a:e4:1d:
e4:8f:86:a1:1c:8d:38:e3:ec:c3:20:3e:ff:0a:78:
53:d5:c5:62:fc:36:5e:cc:a6:1f:79:9e:7d:9a:9e:
53:32:75:10:f4:9b:69:47:e5:49:45:41:94:07:3a:
c4:08:f7:f7:49:7c:f1:27:7d:d3:30:f7:a0:ae:b9:
02:c9:04:c8:b6:3c:10:91:a4:e5:71:fa:21:36:53:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:DE:28:F4:E3:F7:A9:42:9E:89:B0:81:51:37:87:2E:58:21:2A
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:57:6c:5f:7f:c8:ab:ab:ef:ca:49:43:be:07:65:15:4f:ba:
ca:c8:ee:4d:21:05:59:12:b0:18:97:ea:38:7b:0e:10:77:a8:
9f:44:5c:f8:0d:97:fd:aa:5d:fa:1b:99:eb:b5:a2:df:5d:3c:
ea:7c:37:5b:51:1f:35:68:55:88:14:77:39:6f:86:c6:f5:be:
30:7e:fa:83:0f:19:ab:16:a6:8c:64:ed:03:eb:04:54:b2:7c:
f0:22:d6:37:87:75:44:c9:6c:82:fe:c4:98:d7:b4:c0:64:a3:
d5:f7:8c:10:7b:b6:38:eb:84:7d:29:b1:a2:56:eb:95:fd:c7:
32:0f:bc:2a:07:7a:d6:64:a0:b0:18:3f:69:2a:ae:b7:ae:27:
5a:1d:9a:28:20:2c:b8:11:c2:18:d6:bf:58:00:5f:56:9b:8a:
35:b0:bb:fa:ce:f5:b9:63:10:37:58:fd:e0:e9:6b:79:e6:96:
d2:d8:05:ce:b5:0d:b5:3e:d9:8d:c4:c7:fe:ad:a8:98:e0:c4:
ba:e6:9a:e5:3a:d3:79:f2:45:26:33:4c:85:5a:b8:f1:57:11:
c5:a0:be:91:88:31:17:01:ee:a5:8d:9b:6a:eb:57:75:2e:05:
13:27:a2:f7:99:94:6d:a1:04:a0:7a:f0:77:21:4b:bb:f9:08:
9e:49:a7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crOrBIoK/GkWpK0lxozYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2RhZjEyMmUzYTg3YWNhYTZmZGI2MmMzNWEyNTJhMTk5
YTU4ZDkwHhcNMjUwMTMxMTMwMDIxWhcNMjUwMjAxMTMwMDIxWjAzMTEwLwYDVQQD
EygzYjA3ZGUyOGY0ZTNmN2E5NDI5ZTg5YjA4MTUxMzc4NzJlNTgyMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdc3Lf/KNc06vYFwSOE6efI7ZLPh
ocX7nJ78EKicsJK6Nage1ELE8MISGmFBCsIFTjMI4RQvfaD9qDmz+2GCtYAM1VKw
cTH2Vfl9IEZco0xAn+vL30JbIxO08OGOii7IUw9R/UWDl40pRPGdgjZkQ7JBtAQ4
3JtIiXpoMAwJ1plzJyPklCJ9trxRZe2VX4TPU/uSjX3UXM7OvRzrTp9QH1RWzeVf
0N0MDkrxP79/eiRq5B3kj4ahHI044+zDID7/CnhT1cVi/DZezKYfeZ59mp5TMnUQ
9JtpR+VJRUGUBzrECPf3SXzxJ33TMPegrrkCyQTItjwQkaTlcfohNlPiCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsH3ij04/epQp6JsIFRN4cuWCEqMB8GA1UdIwQY
MBaAFGQ9rxIuOoesqm/bYsNaJSoZmljZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYt
ZGNkNWU5NDc4MDg0LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYtZGNkNWU5NDc4MDg0
LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1dsX3/I
q6vvyklDvgdlFU+6ysjuTSEFWRKwGJfqOHsOEHeon0Rc+A2X/apd+huZ67Wi3108
6nw3W1EfNWhViBR3OW+GxvW+MH76gw8ZqxamjGTtA+sEVLJ88CLWN4d1RMlsgv7E
mNe0wGSj1feMEHu2OOuEfSmxolbrlf3HMg+8Kgd61mSgsBg/aSqut64nWh2aKCAs
uBHCGNa/WABfVpuKNbC7+s71uWMQN1j94OlreeaW0tgFzrUNtT7ZjcTH/q2omODE
uuaa5TrTefJFJjNMhVq48VcRxaC+kYgxFwHupY2bautXdS4FEyei95mUbaEEoHrw
dyFLu/kInkmn/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:43 2025 by rpki-client