Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: niPPq7AY6oEX5duWhav+KkJYs6UtklbO+swkNV0AaOc=
Subject key identifier: C9:22:73:1E:01:78:09:0A:23:8B:E4:2D:5B:5E:C2:78:12:E0:30:34
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 0194BC3C3BD8D277BB7019019F5221005535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: McV/4HrPIDw8BAzm262T2JzCksKSXO92GWBox+BmQl0=)
2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:d8:d2:77:bb:70:19:01:9f:52:21:00:55:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=c922731e0178090a238be42d5b5ec27812e03034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:62:8b:14:e7:be:48:ec:55:b3:a8:8a:8f:
d1:a4:ab:2c:c5:e8:ca:0e:d6:6e:39:9e:80:af:bc:
c1:1d:0b:65:31:44:6c:de:9e:5d:3b:11:54:b4:38:
01:1b:75:8e:a5:dc:e2:90:4f:a8:24:3e:91:11:db:
e3:d3:5f:a0:c4:bb:f1:d3:bc:f5:ec:44:14:27:00:
79:52:fb:8c:77:45:ff:dd:29:81:57:8d:53:be:4b:
95:9f:a3:2e:bd:ac:4a:55:d4:43:d2:64:10:0e:ce:
6b:9d:be:be:d9:a5:93:be:da:73:c5:ac:01:c2:c3:
ab:23:1a:74:07:76:fd:aa:26:d1:24:21:3b:10:f9:
9e:79:36:df:3a:09:cc:fc:94:d5:3d:dc:fa:d2:42:
d1:16:dc:33:5d:ef:de:62:e5:7c:09:ae:d1:bf:87:
db:24:ca:6c:25:8a:54:97:d4:a6:76:56:ed:35:85:
1b:74:31:73:ed:97:8d:25:c9:43:c6:b8:0f:ee:a6:
3f:b6:6e:bf:a7:ac:87:17:2b:58:e3:19:c6:f2:09:
54:a0:9a:1f:53:65:ef:8f:16:d0:e2:3b:98:b1:2e:
7a:c3:b6:f0:45:5d:40:be:c4:90:d3:22:be:d4:05:
ea:86:7d:bb:3f:80:36:86:18:a2:07:f8:7b:ec:c9:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:22:73:1E:01:78:09:0A:23:8B:E4:2D:5B:5E:C2:78:12:E0:30:34
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:a8:23:e5:cd:38:fe:b1:85:3b:72:40:98:77:e4:07:12:
c5:60:38:02:9b:62:bd:ba:98:03:e2:c9:26:f8:50:d6:cd:9e:
ac:27:41:12:e5:1f:1a:8d:10:2c:cf:34:3a:2c:af:7c:03:25:
c2:d9:78:48:1b:e6:76:0a:2c:27:75:fe:b4:f1:9f:de:93:7a:
89:fd:26:10:e3:0c:29:75:7b:14:8f:91:81:82:b4:3e:b2:91:
75:7d:0b:90:d6:05:41:7a:4b:08:25:1f:de:4a:a0:19:c3:ed:
c5:42:9a:72:a1:f1:fa:7d:e5:50:51:1d:e9:9a:89:29:70:4c:
e8:39:35:d4:f7:c2:d2:0c:60:a7:70:67:99:c3:00:6d:8f:9e:
66:37:f5:83:70:54:56:a2:3d:e8:1c:34:09:58:43:54:4f:d1:
5e:97:d7:ee:2f:66:59:bb:49:70:ab:12:d8:50:67:3a:7b:3a:
a0:e5:e9:e3:d6:3a:9b:16:a1:30:8f:28:18:38:e4:93:7d:6a:
b4:bc:00:6f:15:ff:86:95:82:64:34:66:4c:bf:9a:4f:e1:25:
55:57:c5:ee:d7:78:fa:15:00:ec:be:34:0a:6a:42:70:c6:d7:
04:11:e2:15:87:00:d4:f4:f3:cd:31:d5:79:89:e9:e3:c5:3f:
e5:d4:f5:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDvY0ne7cBkBn1IhAFU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1
NWJhZmIwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EyhjOTIyNzMxZTAxNzgwOTBhMjM4YmU0MmQ1YjVlYzI3ODEyZTAzMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNViixTnvkjsVbOoio/RpKssxejK
DtZuOZ6Ar7zBHQtlMURs3p5dOxFUtDgBG3WOpdzikE+oJD6REdvj01+gxLvx07z1
7EQUJwB5UvuMd0X/3SmBV41TvkuVn6MuvaxKVdRD0mQQDs5rnb6+2aWTvtpzxawB
wsOrIxp0B3b9qibRJCE7EPmeeTbfOgnM/JTVPdz60kLRFtwzXe/eYuV8Ca7Rv4fb
JMpsJYpUl9SmdlbtNYUbdDFz7ZeNJclDxrgP7qY/tm6/p6yHFytY4xnG8glUoJof
U2XvjxbQ4juYsS56w7bwRV1AvsSQ0yK+1AXqhn27P4A2hhiiB/h77MklbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkicx4BeAkKI4vkLVtewngS4DA0MB8GA1UdIwQY
MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt
ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh
LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHr2oI+XN
OP6xhTtyQJh35AcSxWA4AptivbqYA+LJJvhQ1s2erCdBEuUfGo0QLM80OiyvfAMl
wtl4SBvmdgosJ3X+tPGf3pN6if0mEOMMKXV7FI+RgYK0PrKRdX0LkNYFQXpLCCUf
3kqgGcPtxUKacqHx+n3lUFEd6ZqJKXBM6Dk11PfC0gxgp3BnmcMAbY+eZjf1g3BU
VqI96Bw0CVhDVE/RXpfX7i9mWbtJcKsS2FBnOns6oOXp49Y6mxahMI8oGDjkk31q
tLwAbxX/hpWCZDRmTL+aT+ElVVfF7td4+hUA7L40CmpCcMbXBBHiFYcA1PTzzTHV
eYnp48U/5dT1uQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:06 2025 by rpki-client