Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: soHVtUsBFA6t69Yua1mIHiUlQKaisCAEQgScaVLfW5M=
Subject key identifier: FA:CE:A1:51:CC:85:0C:43:75:E7:25:D7:A9:F5:90:4D:63:93:F3:79
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 0194BBCEB4A25714B5F6E9E044E0909ED67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 1107
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: ZkiuO3/mOpuY3VvqAU94oUO9jmuiJRgJc/X6GGSAb+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:a2:57:14:b5:f6:e9:e0:44:e0:90:9e:d6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=facea151cc850c4375e725d7a9f5904d6393f379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:c0:b3:6f:73:8e:6d:af:27:21:e6:bd:e3:
38:ef:f3:d5:3e:7b:56:d9:09:6e:61:0f:db:33:da:
9e:b3:50:dc:8c:f2:61:1d:12:23:82:6c:6f:34:d7:
b0:2d:5e:a6:06:2e:d2:67:49:e1:85:9b:54:50:55:
4f:9e:88:13:fb:45:f0:94:17:21:92:08:08:88:85:
04:68:78:b6:d4:53:b1:92:31:55:3a:63:1f:a0:34:
ea:75:12:2c:df:ab:91:52:ce:c1:fb:8f:a6:58:df:
b1:16:ee:81:46:e1:5f:99:9c:f6:f5:d6:c1:72:af:
1e:20:4a:f0:7e:2c:96:19:c6:ed:bf:b6:21:68:ac:
99:d4:2b:78:d7:8b:90:de:de:49:c8:79:8e:81:e7:
6b:e0:b9:d0:0e:e0:7f:11:9b:8e:55:0c:89:47:75:
38:dc:48:df:75:04:8d:b8:22:4d:1f:ec:ec:46:3a:
dc:ee:66:de:96:00:2b:04:3b:b8:20:ed:93:44:f0:
86:da:7b:59:8d:df:4c:14:15:eb:45:16:68:bf:28:
af:6a:c2:81:04:ee:cb:6a:2a:6f:23:f3:1a:c7:55:
2c:22:ac:01:45:23:87:51:42:19:bc:8b:84:c9:6f:
38:fd:1c:75:89:83:93:59:f9:c5:22:52:52:cc:1f:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:A1:51:CC:85:0C:43:75:E7:25:D7:A9:F5:90:4D:63:93:F3:79
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a5:d7:d0:d5:69:16:96:f0:d3:ae:9d:db:3d:e8:32:3b:57:
60:6d:7b:c6:70:60:62:bd:c6:24:45:16:f6:a9:30:0c:41:77:
f6:28:fc:d9:91:93:ee:02:38:55:c0:c5:05:7f:bb:fe:2d:3d:
40:f1:80:cf:70:5f:48:82:71:27:bd:a0:6b:01:52:f5:fe:bb:
0b:37:0a:65:48:c4:24:a7:f7:62:e4:bb:e1:c8:4f:12:24:c4:
61:70:c5:74:96:94:a1:f1:00:44:22:4f:1a:ac:ef:c3:e7:ca:
1c:d1:5f:50:41:8b:d7:fe:7f:ad:3d:39:69:71:11:b9:43:13:
b5:a2:18:3f:0e:8c:ee:16:54:83:2a:5f:54:d0:05:9c:32:3f:
48:78:b3:dd:f8:e7:c0:de:d8:00:0d:81:8a:ec:37:ae:2c:08:
4a:50:4f:eb:c3:48:ab:a2:a5:f4:26:d2:51:ef:32:e5:9f:30:
24:82:cc:5a:a1:5a:ff:e7:d9:28:92:0a:10:92:84:f0:57:ac:
a2:74:ba:ab:74:fc:af:00:02:aa:e5:55:02:c0:55:f3:a1:0a:
14:64:ca:60:b8:f6:a2:34:c4:17:bd:b1:73:4b:7f:56:41:94:
51:0b:f4:4b:af:ea:2e:9d:9c:68:e9:50:da:d4:82:ad:4c:30:
3e:d8:3e:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrSiVxS19ungROCQntZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NmE2ZjQzMmQwYzMxZmIxMDE3ZTJhYjY4YmIxZDZlZWZj
Y2Y2OTkwHhcNMjUwMTMxMTAwMTEzWhcNMjUwMjAxMTAwMTEzWjAzMTEwLwYDVQQD
EyhmYWNlYTE1MWNjODUwYzQzNzVlNzI1ZDdhOWY1OTA0ZDYzOTNmMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMTAs29zjm2vJyHmveM47/PVPntW
2QluYQ/bM9qes1DcjPJhHRIjgmxvNNewLV6mBi7SZ0nhhZtUUFVPnogT+0XwlBch
kggIiIUEaHi21FOxkjFVOmMfoDTqdRIs36uRUs7B+4+mWN+xFu6BRuFfmZz29dbB
cq8eIErwfiyWGcbtv7YhaKyZ1Ct414uQ3t5JyHmOgedr4LnQDuB/EZuOVQyJR3U4
3EjfdQSNuCJNH+zsRjrc7mbelgArBDu4IO2TRPCG2ntZjd9MFBXrRRZovyivasKB
BO7LaipvI/Max1UsIqwBRSOHUUIZvIuEyW84/Rx1iYOTWfnFIlJSzB+oMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrOoVHMhQxDdecl16n1kE1jk/N5MB8GA1UdIwQY
MBaAFGZqb0MtDDH7EBfiq2i7HW7vzPaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82NDY4OTEtMDQ1ZS00NGU1LTg5OTEt
MjdjYzBhYTBjMDQ5LzEvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82NDY4OTEtMDQ1ZS00NGU1LTg5OTEtMjdjYzBhYTBjMDQ5
LzEvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaXX0NVp
Fpbw066d2z3oMjtXYG17xnBgYr3GJEUW9qkwDEF39ij82ZGT7gI4VcDFBX+7/i09
QPGAz3BfSIJxJ72gawFS9f67CzcKZUjEJKf3YuS74chPEiTEYXDFdJaUofEARCJP
Gqzvw+fKHNFfUEGL1/5/rT05aXERuUMTtaIYPw6M7hZUgypfVNAFnDI/SHiz3fjn
wN7YAA2Biuw3riwISlBP68NIq6Kl9CbSUe8y5Z8wJILMWqFa/+fZKJIKEJKE8Fes
onS6q3T8rwACquVVAsBV86EKFGTKYLj2ojTEF72xc0t/VkGUUQv0S6/qLp2caOlQ
2tSCrUwwPtg+wg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:39 2025 by rpki-client