Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: DhkQUNrAePqCblxy7FFl/mA2URCVHYHcWnPl5/tI+O4=
Subject key identifier: 4C:FE:8E:AA:89:BE:7A:C7:EA:56:74:89:38:F7:23:4C:C4:A6:6D:25
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 0194BCA980286F8D271364F9DDF303B3A7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 0FCE
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: VhaC4SYOm0n8bGG/v9sKvOvdVnF+l/m31UD1KRBWAu8=)
2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:28:6f:8d:27:13:64:f9:dd:f3:03:b3:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=4cfe8eaa89be7ac7ea56748938f7234cc4a66d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:db:c4:24:0e:9e:59:d6:4f:85:75:4c:27:
4a:b1:22:f2:f1:ae:54:ec:7f:46:3e:13:42:9f:7a:
8a:44:f1:9b:a3:6b:21:d3:0e:4a:13:43:79:fa:18:
ce:26:7a:65:18:6a:a7:92:f1:ac:4f:c8:12:0a:06:
28:2a:3d:4e:c5:54:69:21:1d:e9:55:48:ff:2c:6f:
a0:24:61:04:19:df:dd:31:76:c5:d9:c2:12:77:ce:
5b:24:79:48:29:9a:db:a8:c0:73:4b:11:96:d0:a7:
91:71:63:54:58:43:46:f9:80:46:8a:8c:97:69:09:
d4:6a:58:21:71:a6:a1:88:d3:60:9d:10:9f:94:d5:
8a:66:d0:74:26:19:61:f8:83:e7:b3:8f:5c:51:e4:
63:d2:b1:a2:a2:99:82:d9:2e:49:36:88:53:28:9d:
36:90:f1:31:67:a7:b9:17:89:f9:8f:42:40:f7:0b:
f5:4d:2d:60:07:06:5a:6d:f2:08:45:de:1d:9e:fb:
8c:f7:ce:a1:ea:61:c3:46:6e:f5:3b:94:e6:43:e2:
ce:d8:f4:c0:a9:bd:55:ea:d6:6a:0f:64:e7:d3:46:
7c:1e:af:f0:c7:ff:dc:01:3a:5a:dc:22:aa:3f:89:
b0:ac:6c:77:4c:20:d3:58:b8:32:35:63:4e:95:12:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:8E:AA:89:BE:7A:C7:EA:56:74:89:38:F7:23:4C:C4:A6:6D:25
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3c:d0:25:64:9c:7c:19:41:6f:a2:da:da:86:6f:b6:ea:d3:
ba:bc:0a:4e:91:32:f7:4f:7f:0b:07:d5:ae:af:63:2b:72:cd:
9d:a8:b3:32:be:26:23:6a:11:4c:01:ca:a6:fc:d3:6f:78:c7:
c6:01:77:27:75:32:45:e4:d0:56:a1:33:e3:f7:6f:3f:8b:eb:
46:3f:b0:32:93:b0:f2:80:40:5f:25:b4:8f:89:7d:2e:6f:5b:
d0:0c:52:b7:02:d9:23:e0:20:07:14:52:bd:ce:d8:0b:76:76:
35:40:13:d6:3c:97:15:ab:87:5e:59:26:6e:ac:5c:15:53:e8:
cb:ca:94:33:59:6e:64:ad:bb:0e:1c:10:29:50:5f:01:e0:bd:
0a:11:d6:96:12:17:d4:82:c5:f3:2f:4e:e1:10:b3:23:ad:45:
73:09:22:15:d9:9d:f2:f3:eb:00:18:1d:46:a6:f0:3f:de:4e:
9a:30:02:98:26:40:9e:e8:b7:42:32:f6:0f:96:54:b0:5b:82:
bb:26:91:52:a2:da:29:19:a9:90:05:d1:3e:ba:09:1e:17:92:
2b:a5:05:47:1a:37:9d:2b:21:2c:a3:00:54:ba:b0:1e:6d:ee:
fd:55:d7:a6:e6:be:b1:c2:77:47:bc:f5:a6:5e:30:90:66:fa:
0f:80:1f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYAob40nE2T53fMDs6ftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzkyMGEyN2UzZTUzYTM2N2Y5ZWE5NmRiN2JhZjdiZDY1
YTgzZWEwHhcNMjUwMTMxMTQwMDEyWhcNMjUwMjAxMTQwMDEyWjAzMTEwLwYDVQQD
Eyg0Y2ZlOGVhYTg5YmU3YWM3ZWE1Njc0ODkzOGY3MjM0Y2M0YTY2ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E3bxCQOnlnWT4V1TCdKsSLy8a5U
7H9GPhNCn3qKRPGbo2sh0w5KE0N5+hjOJnplGGqnkvGsT8gSCgYoKj1OxVRpIR3p
VUj/LG+gJGEEGd/dMXbF2cISd85bJHlIKZrbqMBzSxGW0KeRcWNUWENG+YBGioyX
aQnUalghcaahiNNgnRCflNWKZtB0Jhlh+IPns49cUeRj0rGiopmC2S5JNohTKJ02
kPExZ6e5F4n5j0JA9wv1TS1gBwZabfIIRd4dnvuM986h6mHDRm71O5TmQ+LO2PTA
qb1V6tZqD2Tn00Z8Hq/wx//cATpa3CKqP4mwrGx3TCDTWLgyNWNOlRKfXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz+jqqJvnrH6lZ0iTj3I0zEpm0lMB8GA1UdIwQY
MBaAFGXJIKJ+PlOjZ/nqltt7r3vWWoPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWIt
MzdmOWJmNzg2MWI2LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWItMzdmOWJmNzg2MWI2
LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjzQJWSc
fBlBb6La2oZvturTurwKTpEy909/CwfVrq9jK3LNnaizMr4mI2oRTAHKpvzTb3jH
xgF3J3UyReTQVqEz4/dvP4vrRj+wMpOw8oBAXyW0j4l9Lm9b0AxStwLZI+AgBxRS
vc7YC3Z2NUAT1jyXFauHXlkmbqxcFVPoy8qUM1luZK27DhwQKVBfAeC9ChHWlhIX
1ILF8y9O4RCzI61FcwkiFdmd8vPrABgdRqbwP95OmjACmCZAnui3QjL2D5ZUsFuC
uyaRUqLaKRmpkAXRProJHheSK6UFRxo3nSshLKMAVLqwHm3u/VXXpua+scJ3R7z1
pl4wkGb6D4Afkw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:23 2025 by rpki-client