Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier: 6RJ3hrV5LrGGq6aZ+DQzqN5AJijtQlhNndBG0tErRu4=
Subject key identifier: 59:A0:D5:2A:5F:65:52:0C:C5:A0:95:15:D8:E1:01:8F:A6:68:55:78
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial: 0194BC3C1C13F8D07F3569692071FB8672DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number: 10F9
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: Qv3hVGEIw5Ck_5QiJYApdipPmqI.roa (hash: C4rOq98XQlQBOJoaFTi64wzA4+qXQilqH0FLuH6cokY=)
2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: BAecxefd7uDIuD4xvm4CdUKJUx3EMjCwE/z9TIDIUIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1c:13:f8:d0:7f:35:69:69:20:71:fb:86:72:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=59a0d52a5f65520cc5a09515d8e1018fa6685578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:a5:cf:7e:c6:0d:93:46:f7:57:e2:72:fd:
40:03:31:72:5c:a6:e9:07:48:d3:32:2f:01:a7:92:
cb:05:2e:90:68:c3:72:8a:e6:85:51:87:f7:53:c4:
03:fc:1d:92:98:96:ae:41:d5:d5:d3:07:89:32:d5:
32:38:e1:a8:45:51:ed:db:22:e5:22:ec:22:2d:e7:
3c:67:83:14:c4:18:9c:6b:3a:29:f0:ed:e9:dd:86:
2b:71:da:1f:2c:3e:8f:e1:24:cf:90:78:ac:60:d3:
19:af:c7:22:40:dc:ad:dc:22:c1:df:ef:dc:f3:8a:
b5:b2:39:cc:76:13:95:ef:01:ab:0e:04:95:7c:84:
50:df:f1:d4:bb:e4:e7:8a:da:1a:f3:c5:b8:64:07:
a8:3d:c3:c2:4f:84:bd:07:64:6b:49:d0:8d:e2:24:
80:a4:50:71:69:c5:45:1f:e5:b4:92:c2:e3:2e:f8:
ce:36:f6:18:c7:46:83:7b:65:a4:7a:2a:07:f7:71:
d3:b2:d9:0b:52:e4:fb:5a:59:51:65:9b:06:e2:e0:
ba:e8:68:48:57:62:fa:62:55:c6:73:63:7e:31:8c:
b8:9d:0e:d0:be:a0:60:e2:7f:79:e8:60:55:ed:42:
23:88:77:26:e0:ee:eb:c6:ea:22:36:ef:ea:66:fb:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:D5:2A:5F:65:52:0C:C5:A0:95:15:D8:E1:01:8F:A6:68:55:78
X509v3 Authority Key Identifier:
keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:65:21:4a:4f:b7:87:48:30:c1:36:47:89:7d:c9:c1:91:
10:32:c6:67:8c:d2:ac:fa:cd:22:f7:5b:b4:18:b5:7d:06:c1:
f7:13:56:27:6a:88:4c:a9:0e:1d:41:03:c1:da:2b:ae:05:21:
9c:e9:c3:0d:70:c5:b1:ad:45:ec:5b:dc:42:a1:d1:02:9e:0f:
f5:ef:ea:31:0d:d9:a7:d4:13:eb:2f:f4:80:bc:89:f2:19:63:
5a:4f:1d:03:e7:65:41:c5:cc:1a:52:e4:49:a2:08:e3:f0:10:
5b:1a:b8:82:6f:dd:a6:f5:a4:86:85:55:93:db:0e:ae:8f:00:
a4:08:50:7a:67:21:0b:51:9b:41:ce:3f:9e:db:34:23:da:ce:
af:bc:b8:89:7b:cf:c4:91:de:92:3c:91:e7:77:67:e8:b8:7b:
4e:e2:c7:6c:db:90:81:d3:c2:4e:7c:b1:b4:88:d4:c3:a1:ba:
35:3a:e6:e5:ae:53:20:71:43:3c:6c:e5:a0:ce:76:ca:b2:ba:
73:9e:16:07:f0:05:d8:13:81:97:d0:5c:a0:33:41:c2:10:dd:
5a:0f:aa:68:40:56:b3:ba:78:1c:8d:c3:39:ef:01:88:4b:a4:
73:5b:6c:46:42:c0:97:95:45:f6:12:fe:5c:b3:80:9a:58:15:
7e:56:3d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBwT+NB/NWlpIHH7hnLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzFiNjJiMGUxNTliYTZjY2Q4N2Y3MzI3NWE4NjhlYmNj
NDFhYjgwHhcNMjUwMTMxMTIwMDQzWhcNMjUwMjAxMTIwMDQzWjAzMTEwLwYDVQQD
Eyg1OWEwZDUyYTVmNjU1MjBjYzVhMDk1MTVkOGUxMDE4ZmE2Njg1NTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6lz37GDZNG91ficv1AAzFyXKbp
B0jTMi8Bp5LLBS6QaMNyiuaFUYf3U8QD/B2SmJauQdXV0weJMtUyOOGoRVHt2yLl
IuwiLec8Z4MUxBicazop8O3p3YYrcdofLD6P4STPkHisYNMZr8ciQNyt3CLB3+/c
84q1sjnMdhOV7wGrDgSVfIRQ3/HUu+Tnitoa88W4ZAeoPcPCT4S9B2RrSdCN4iSA
pFBxacVFH+W0ksLjLvjONvYYx0aDe2WkeioH93HTstkLUuT7WllRZZsG4uC66GhI
V2L6YlXGc2N+MYy4nQ7QvqBg4n956GBV7UIjiHcm4O7rxuoiNu/qZvvioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmg1SpfZVIMxaCVFdjhAY+maFV4MB8GA1UdIwQY
MBaAFHcxtisOFZumzNh/cydaho68xBq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgt
NmJmYzMzNTAxNDc5LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgtNmJmYzMzNTAxNDc5
LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXRlIUpP
t4dIMME2R4l9ycGREDLGZ4zSrPrNIvdbtBi1fQbB9xNWJ2qITKkOHUEDwdorrgUh
nOnDDXDFsa1F7FvcQqHRAp4P9e/qMQ3Zp9QT6y/0gLyJ8hljWk8dA+dlQcXMGlLk
SaII4/AQWxq4gm/dpvWkhoVVk9sOro8ApAhQemchC1GbQc4/nts0I9rOr7y4iXvP
xJHekjyR53dn6Lh7TuLHbNuQgdPCTnyxtIjUw6G6NTrm5a5TIHFDPGzloM52yrK6
c54WB/AF2BOBl9BcoDNBwhDdWg+qaEBWs7p4HI3DOe8BiEukc1tsRkLAl5VF9hL+
XLOAmlgVflY9xA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:26 2025 by rpki-client