Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: aigLKsvWkW1yBjhSfqGlaX6CtUhI919zvwIfhW1aTPc=
Subject key identifier: 92:BA:A2:1B:EB:36:38:6A:BA:35:01:A1:96:57:D1:C3:A2:C4:5D:9F
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 0194BCA97C7743E49ECC6CF61AC422F4E5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: gHGqqez8Kw7YOpFfLto2PuABj7zjxFbtx5TZk3ziNpo=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:77:43:e4:9e:cc:6c:f6:1a:c4:22:f4:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=92baa21beb36386aba3501a19657d1c3a2c45d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:1c:f5:5b:d6:96:c6:19:44:54:93:84:06:
8d:67:cb:dd:20:6d:2b:7b:5e:d7:8a:6b:b1:5d:53:
22:fb:96:cd:2e:3a:d6:5e:f1:41:81:77:1d:6a:ed:
f6:de:5f:74:ba:37:50:d1:77:73:b9:05:9e:cb:55:
9a:55:be:76:08:7d:f4:f9:9e:6b:ea:21:fb:aa:c4:
f4:13:8f:d3:56:fa:7b:3a:bf:1e:ed:09:dc:6b:b1:
6a:66:1d:f6:23:a7:5d:6e:1e:5e:3d:f2:31:ae:b2:
1a:96:fd:fb:ca:81:69:1f:e2:50:1c:b7:64:89:a8:
6e:84:f7:fd:d1:dc:2c:29:76:25:24:d5:ed:5a:de:
ce:2a:30:64:da:40:5c:9e:88:4c:25:4c:7c:b3:9c:
80:e1:07:42:a9:41:da:9b:9a:53:08:74:7e:d8:11:
5a:bf:95:de:d6:80:3c:b7:1b:3e:d2:91:90:d9:4e:
25:1d:34:ab:97:6e:c8:29:62:b0:ef:06:cf:c9:f3:
13:ac:1d:bf:3b:fc:a2:82:80:ce:05:4a:93:f2:a4:
a2:1c:1e:b2:1f:7f:a4:78:5f:d4:b0:af:f7:6f:58:
cc:f7:f5:4f:4d:46:52:b6:2a:b1:31:a6:99:c6:b9:
f9:7e:10:30:ae:f7:9b:c8:53:b2:76:9b:6b:61:3d:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:A2:1B:EB:36:38:6A:BA:35:01:A1:96:57:D1:C3:A2:C4:5D:9F
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:0a:8a:63:85:f5:b9:4c:c4:63:46:da:d0:e2:63:92:01:
d7:9d:76:44:32:8b:25:76:3e:0f:8a:0c:2c:89:5c:32:ce:ef:
83:a8:a1:dd:6a:f6:42:7c:f1:01:f7:00:3a:cb:34:23:55:e7:
34:66:2d:b4:2e:d9:f3:38:3e:20:39:f2:57:92:55:57:3d:13:
06:ca:d3:e5:a5:42:20:ed:2d:35:24:0e:79:46:8c:ee:4c:7f:
1d:1e:9b:cc:30:52:8a:0c:ba:c5:80:71:15:99:1c:51:fc:f6:
fc:cc:d7:86:05:d8:30:f8:76:87:0c:d5:ac:51:49:bb:31:6e:
88:74:68:76:07:0e:f6:7d:df:e1:3c:41:14:2a:cd:96:1e:ff:
e2:02:0f:a1:1d:8f:2a:11:d3:7b:f6:2d:98:84:dc:e8:9a:24:
aa:04:59:2e:6e:0c:00:b8:17:c7:d0:80:d7:a6:96:c9:88:92:
96:b7:02:4f:6b:de:00:52:74:f8:79:68:04:cf:46:64:b9:25:
92:f9:48:21:a1:e5:89:27:69:8a:68:e6:7b:97:cb:ef:ef:52:
e2:27:39:f6:e8:59:e9:50:96:4b:66:4d:81:5c:81:8c:9a:c7:
4e:42:45:8e:33:99:35:3e:7a:d2:5c:7b:b4:f3:4a:fb:3b:16:
77:96:50:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXx3Q+SezGz2GsQi9OXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1
MDc0MmEwHhcNMjUwMTMxMTQwMDExWhcNMjUwMjAxMTQwMDExWjAzMTEwLwYDVQQD
Eyg5MmJhYTIxYmViMzYzODZhYmEzNTAxYTE5NjU3ZDFjM2EyYzQ1ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoEc9VvWlsYZRFSThAaNZ8vdIG0r
e17XimuxXVMi+5bNLjrWXvFBgXcdau323l90ujdQ0XdzuQWey1WaVb52CH30+Z5r
6iH7qsT0E4/TVvp7Or8e7Qnca7FqZh32I6ddbh5ePfIxrrIalv37yoFpH+JQHLdk
iahuhPf90dwsKXYlJNXtWt7OKjBk2kBcnohMJUx8s5yA4QdCqUHam5pTCHR+2BFa
v5Xe1oA8txs+0pGQ2U4lHTSrl27IKWKw7wbPyfMTrB2/O/yigoDOBUqT8qSiHB6y
H3+keF/UsK/3b1jM9/VPTUZStiqxMaaZxrn5fhAwrvebyFOydptrYT0yyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK6ohvrNjhqujUBoZZX0cOixF2fMB8GA1UdIwQY
MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiU0KimOF
9blMxGNG2tDiY5IB1512RDKLJXY+D4oMLIlcMs7vg6ih3Wr2QnzxAfcAOss0I1Xn
NGYttC7Z8zg+IDnyV5JVVz0TBsrT5aVCIO0tNSQOeUaM7kx/HR6bzDBSigy6xYBx
FZkcUfz2/MzXhgXYMPh2hwzVrFFJuzFuiHRodgcO9n3f4TxBFCrNlh7/4gIPoR2P
KhHTe/YtmITc6JokqgRZLm4MALgXx9CA16aWyYiSlrcCT2veAFJ0+HloBM9GZLkl
kvlIIaHliSdpimjme5fL7+9S4ic59uhZ6VCWS2ZNgVyBjJrHTkJFjjOZNT560lx7
tPNK+zsWd5ZQ9g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:20 2025 by rpki-client