Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: v9XdIPFnS9CnDMHiDKMBl6qf9pol99vzXvmPhGYH3nA=
Subject key identifier: FE:DB:A3:82:B4:AF:89:00:48:B0:E4:10:08:BD:AB:B0:BC:A6:00:CE
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 0194BCE08A8F52A90C70B65AC9C7C109AD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1173
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: YAWvjypLVC7/t0TRsVgiD2bKvUGBwbty1rZiyZMlpfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:8f:52:a9:0c:70:b6:5a:c9:c7:c1:09:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=fedba382b4af890048b0e41008bdabb0bca600ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:f5:a0:27:9f:44:87:a7:47:d7:3a:ac:51:
a6:72:03:ca:9e:c5:99:f9:35:31:ba:26:7d:16:c8:
b3:ef:37:f3:c2:3d:2d:61:90:a8:0e:4d:c1:67:d2:
86:88:e5:45:fb:a4:71:eb:4a:22:0d:3b:24:25:00:
62:0c:bc:59:b4:c2:54:2d:ca:d2:14:58:fb:66:77:
e5:da:32:19:56:6c:20:56:50:b4:38:50:42:41:6a:
4a:70:91:88:86:27:36:b3:28:14:44:cb:7f:2e:c3:
3d:aa:c4:64:90:f6:32:84:b2:fa:20:31:75:74:b5:
9a:00:40:5d:a7:ff:39:ab:b9:d1:8b:a2:e3:2c:42:
89:7d:b7:7d:25:3d:16:e4:40:b4:c3:6c:1d:0a:25:
1d:9f:15:3d:13:96:e7:45:0e:81:c9:ee:70:46:2c:
ba:7d:df:c2:5d:97:68:a2:5b:b1:57:e8:70:fb:2e:
9e:5a:65:30:99:1e:a7:e3:2a:2e:c9:99:a1:be:6e:
87:d6:63:31:52:bb:df:9f:88:c2:da:1f:17:4d:1a:
0b:ff:27:86:3c:e5:53:15:15:c9:be:34:fc:5c:86:
ef:83:e2:80:fe:c6:0a:20:c8:fb:df:fb:1a:f1:7f:
0a:b9:a6:7d:4f:de:11:11:bb:52:88:ee:9e:af:b4:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:A3:82:B4:AF:89:00:48:B0:E4:10:08:BD:AB:B0:BC:A6:00:CE
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:69:57:1f:a0:d4:8e:ef:37:b2:cc:6c:7c:53:3b:03:5e:25:
b3:1f:73:e0:4f:51:3d:40:22:d5:ab:5e:fc:23:61:f0:6a:5f:
e3:f8:a6:57:31:a8:87:4b:29:66:2e:f5:1c:cb:44:17:16:39:
47:ac:8a:4c:b1:33:d8:e7:0c:a5:8a:f6:af:b0:b1:06:45:ec:
ed:33:78:e9:8c:8e:38:e0:c2:b5:00:d9:ed:e5:0e:47:8c:9f:
49:43:19:9b:70:9b:24:9e:b5:95:c7:b7:96:e0:fc:23:d2:e4:
cc:6e:fc:e6:42:97:85:f4:a7:06:7d:a9:8b:83:59:eb:e1:09:
c4:ae:0c:05:bd:86:1d:78:80:12:ef:2d:24:43:db:2e:32:2b:
cd:f1:17:00:ee:37:e7:7e:77:91:d7:2c:0c:f9:ca:e7:94:9c:
fb:3d:ff:15:48:dd:75:dd:bf:20:40:d2:4e:c5:8a:45:7c:24:
8a:e7:e7:78:5f:c9:80:d7:22:ff:89:bd:d0:94:1c:f0:df:12:
b9:22:93:e5:21:f6:61:24:d9:ea:bd:af:94:4f:07:ba:e5:17:
20:44:a0:9a:68:a9:0d:58:1f:1b:57:4f:81:8f:24:f3:4a:ba:
e6:35:db:43:ab:20:a8:b3:cb:91:34:ff:0c:08:b6:fc:11:53:
7b:be:21:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IqPUqkMcLZaycfBCa0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjUwMTMxMTUwMDE5WhcNMjUwMjAxMTUwMDE5WjAzMTEwLwYDVQQD
EyhmZWRiYTM4MmI0YWY4OTAwNDhiMGU0MTAwOGJkYWJiMGJjYTYwMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2j1oCefRIenR9c6rFGmcgPKnsWZ
+TUxuiZ9Fsiz7zfzwj0tYZCoDk3BZ9KGiOVF+6Rx60oiDTskJQBiDLxZtMJULcrS
FFj7Znfl2jIZVmwgVlC0OFBCQWpKcJGIhic2sygURMt/LsM9qsRkkPYyhLL6IDF1
dLWaAEBdp/85q7nRi6LjLEKJfbd9JT0W5EC0w2wdCiUdnxU9E5bnRQ6Bye5wRiy6
fd/CXZdooluxV+hw+y6eWmUwmR6n4youyZmhvm6H1mMxUrvfn4jC2h8XTRoL/yeG
POVTFRXJvjT8XIbvg+KA/sYKIMj73/sa8X8KuaZ9T94REbtSiO6er7QyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7bo4K0r4kASLDkEAi9q7C8pgDOMB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA02lXH6DU
ju83ssxsfFM7A14lsx9z4E9RPUAi1ate/CNh8Gpf4/imVzGoh0spZi71HMtEFxY5
R6yKTLEz2OcMpYr2r7CxBkXs7TN46YyOOODCtQDZ7eUOR4yfSUMZm3CbJJ61lce3
luD8I9LkzG785kKXhfSnBn2pi4NZ6+EJxK4MBb2GHXiAEu8tJEPbLjIrzfEXAO43
5353kdcsDPnK55Sc+z3/FUjddd2/IEDSTsWKRXwkiufneF/JgNci/4m90JQc8N8S
uSKT5SH2YSTZ6r2vlE8HuuUXIESgmmipDVgfG1dPgY8k80q65jXbQ6sgqLPLkTT/
DAi2/BFTe74hZw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:17 2025 by rpki-client