Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: fuXQx3tu/h+pjN8jM3zID7p7TdkM6XbVYsMz//5nYT8=
Subject key identifier: 3A:C6:02:20:9C:99:30:3D:25:3B:E2:DA:CF:86:B1:A3:4E:9E:F2:CB
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 0194BC72935FFF4B9DFA1A6C0D837BF396DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: gROQX262hBLEAaMQi9RZD0slHEs.roa (hash: KRs0pMeE32FkERm2kWqQrSa0jY8OZzctwZkQ2Bh+yr0=)
2: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: PrsA5FFVjyRxDauBSLAQAmGrt0LERciKLssjPjE4b5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:5f:ff:4b:9d:fa:1a:6c:0d:83:7b:f3:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=3ac602209c99303d253be2dacf86b1a34e9ef2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:03:77:38:8f:24:e4:c7:f8:61:5c:f7:58:
80:40:91:ff:d1:7d:49:b7:01:2c:35:6f:71:41:1f:
8a:7d:53:24:70:30:27:b2:e5:c3:b4:78:92:0c:88:
40:56:0b:46:bb:82:3f:fd:81:f2:ce:84:69:48:c8:
b4:87:6d:2c:84:79:8f:73:87:6b:9f:d1:78:06:69:
81:9d:f8:6f:b8:30:fc:2a:57:25:10:ba:f7:1e:3c:
36:f6:20:28:79:53:aa:8b:ef:d4:be:03:6f:3b:16:
23:bc:97:0b:3f:34:99:bc:79:11:d3:70:b4:e9:b6:
20:f7:b3:ab:f3:b5:37:85:17:cb:c9:f9:ac:e6:96:
65:eb:f9:25:3d:12:87:0a:77:10:6d:00:4e:24:b8:
62:8d:be:dd:60:9a:d1:78:d1:7e:a9:e5:53:39:3f:
d6:3c:dd:6c:5e:99:4e:91:0d:6a:30:b6:04:4b:20:
b4:47:6c:64:34:a3:46:f3:70:dd:81:d1:b3:36:8c:
85:b8:eb:6c:c9:1d:21:00:9e:8d:8a:7b:ec:1e:d8:
48:b7:32:9f:84:dd:5e:3f:5d:38:37:d7:c5:45:e4:
c5:f0:e0:20:e8:ca:85:da:f0:41:b3:27:7a:8f:97:
8b:e3:be:e2:5d:39:3a:ed:f2:16:e0:0a:36:d8:cd:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:02:20:9C:99:30:3D:25:3B:E2:DA:CF:86:B1:A3:4E:9E:F2:CB
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:61:df:75:25:f7:c5:ca:89:07:57:2c:a0:1f:c6:c7:03:e3:
87:b0:a5:37:65:61:7e:15:22:b8:ce:9d:4c:2d:3d:4a:e3:a8:
c4:f3:0f:95:3d:d5:72:b9:db:98:e5:fc:66:c0:1b:11:eb:c4:
7a:4f:20:4c:6d:a9:a5:69:6e:74:e0:a3:7b:f0:a1:84:ba:20:
62:13:dc:0b:bc:fd:8c:0e:72:ec:33:9e:a2:f3:bc:38:d7:1c:
18:42:df:00:83:05:11:3c:45:aa:8d:ac:5e:4a:96:4d:a5:81:
26:b3:0e:17:7c:ef:5b:ed:4f:0f:cd:29:24:36:ff:0e:20:8e:
1a:a0:94:b3:29:a1:73:33:c5:72:06:7d:9d:e6:2c:b9:e2:aa:
6b:43:d1:0b:3f:2c:2b:e2:10:45:af:7e:3e:0c:e2:ee:b0:8a:
5b:ab:50:2e:e3:62:bc:e0:55:8d:bc:2a:3a:9f:29:c2:36:a0:
e2:cb:4f:41:15:bf:94:b0:ad:f3:c3:6c:ea:34:ae:ee:28:a2:
43:f0:b9:34:ac:d0:38:c3:29:d0:66:c4:49:74:a1:07:4c:e2:
c3:73:3f:5d:ff:5a:fb:3e:47:ec:55:68:9d:3c:19:4b:dc:b0:
43:59:a1:fb:0a:6e:3c:c4:eb:78:90:62:3e:ec:06:da:e0:ef:
fd:06:14:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpNf/0ud+hpsDYN785beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1
NzA1NDAwHhcNMjUwMTMxMTMwMDEyWhcNMjUwMjAxMTMwMDEyWjAzMTEwLwYDVQQD
EygzYWM2MDIyMDljOTkzMDNkMjUzYmUyZGFjZjg2YjFhMzRlOWVmMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo8DdziPJOTH+GFc91iAQJH/0X1J
twEsNW9xQR+KfVMkcDAnsuXDtHiSDIhAVgtGu4I//YHyzoRpSMi0h20shHmPc4dr
n9F4BmmBnfhvuDD8KlclELr3Hjw29iAoeVOqi+/UvgNvOxYjvJcLPzSZvHkR03C0
6bYg97Or87U3hRfLyfms5pZl6/klPRKHCncQbQBOJLhijb7dYJrReNF+qeVTOT/W
PN1sXplOkQ1qMLYESyC0R2xkNKNG83DdgdGzNoyFuOtsyR0hAJ6NinvsHthItzKf
hN1eP104N9fFReTF8OAg6MqF2vBBsyd6j5eL477iXTk67fIW4Ao22M0LCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrGAiCcmTA9JTvi2s+GsaNOnvLLMB8GA1UdIwQY
MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt
NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2
LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2HfdSX3
xcqJB1csoB/GxwPjh7ClN2VhfhUiuM6dTC09SuOoxPMPlT3VcrnbmOX8ZsAbEevE
ek8gTG2ppWludOCje/ChhLogYhPcC7z9jA5y7DOeovO8ONccGELfAIMFETxFqo2s
XkqWTaWBJrMOF3zvW+1PD80pJDb/DiCOGqCUsymhczPFcgZ9neYsueKqa0PRCz8s
K+IQRa9+Pgzi7rCKW6tQLuNivOBVjbwqOp8pwjag4stPQRW/lLCt88Ns6jSu7iii
Q/C5NKzQOMMp0GbESXShB0ziw3M/Xf9a+z5H7FVonTwZS9ywQ1mh+wpuPMTreJBi
PuwG2uDv/QYULg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:01:59 2025 by rpki-client