Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: s6fx3sw6AeAfnY1pstPM6QBdxqe7s8GveiIEUfztWOo=
Subject key identifier: 5A:C7:3B:46:33:73:6C:1F:43:0F:2B:5B:B9:11:38:90:1D:A2:B6:A9
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 0194BC04CB4222C5E555170EE8DAB2B9F098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 070C
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: pAHeOjygfSqlqw8WfYBHxCiiBG7i+K2QmyDWldJUCX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:42:22:c5:e5:55:17:0e:e8:da:b2:b9:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=5ac73b4633736c1f430f2b5bb91138901da2b6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:44:e2:4b:dd:ff:2f:5a:9c:9f:35:33:83:
db:60:c5:93:23:41:28:9b:66:91:8b:15:37:b6:18:
01:2b:1c:5e:ae:c0:7f:f5:ed:7f:79:31:ab:9b:fc:
d3:43:a5:9d:ba:3c:24:db:8b:e2:bb:7d:b7:e9:0e:
ec:8c:17:72:84:61:37:75:fd:70:e0:ba:06:3e:e6:
a3:72:d3:7a:d9:68:68:71:23:ef:a1:1c:7f:82:94:
71:fd:48:25:21:ed:11:5d:99:82:7c:35:78:fe:88:
f7:e6:a6:b9:1b:69:09:d3:bc:47:b6:73:45:fa:14:
c1:7b:77:5c:e3:17:04:ad:06:23:cc:d9:0e:46:f5:
95:cf:66:a3:b1:83:7b:f5:94:47:bf:89:b9:29:87:
be:d7:1a:22:f6:93:66:3d:aa:0f:a9:e3:49:d9:ed:
54:fc:7a:ec:ac:d8:4f:c1:77:71:e3:34:1d:d1:2a:
14:e3:b9:a1:38:a3:b5:68:f7:ef:77:19:fc:88:5b:
65:4a:ec:d6:79:76:65:a4:b2:88:8f:12:bd:61:33:
f9:a7:48:f9:7f:a9:81:a5:ea:a1:8c:a5:bf:ca:c8:
9f:14:e2:28:7e:a0:f7:12:34:62:c5:5a:9b:43:d0:
f8:4e:e6:e3:bc:27:a6:92:e2:a9:1b:2a:6b:24:bb:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C7:3B:46:33:73:6C:1F:43:0F:2B:5B:B9:11:38:90:1D:A2:B6:A9
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ac:f0:93:9e:ec:99:57:dd:22:16:9a:ae:43:59:8b:aa:a6:
9d:ac:da:2b:83:d9:3d:a3:67:21:75:91:da:8e:da:95:6f:c1:
09:1a:b3:9e:1d:f2:cf:6c:b8:b3:7a:c4:da:b0:16:99:08:de:
35:3c:e9:ec:f7:ac:07:a8:6f:93:61:fb:f1:f7:eb:1a:d3:96:
4b:4e:37:c3:6b:15:96:80:87:ed:64:ff:85:ca:a8:1f:02:23:
91:96:05:ff:53:eb:8f:04:f6:97:72:44:d6:32:76:2e:42:9c:
eb:9e:0b:52:71:85:a6:ac:b7:f5:d6:54:75:5b:03:0e:a6:e5:
7d:fe:3b:00:f0:ef:9a:c6:2c:a1:19:b6:e1:b5:a7:09:61:e0:
01:46:ae:ef:48:b9:7e:c0:a4:d2:68:3d:62:b1:92:0d:65:a0:
8e:80:3e:6c:77:ff:8d:47:65:7a:27:4e:38:86:65:1b:1e:e7:
8f:d4:9a:40:2c:73:a4:fd:a3:e0:d1:f5:86:a1:aa:b3:32:21:
24:a0:a7:ef:03:31:f4:c2:9a:d7:e3:6a:cf:16:44:0b:e2:fc:
22:32:4f:3a:9b:80:ac:7e:f8:eb:8b:29:8f:b9:73:99:8c:0c:
8a:8e:8c:66:65:8a:00:4b:32:33:df:bf:86:21:c9:3d:c5:f0:
7c:46:6b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMtCIsXlVRcO6NqyufCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj
Yzg3OGEwHhcNMjUwMTMxMTEwMDE3WhcNMjUwMjAxMTEwMDE3WjAzMTEwLwYDVQQD
Eyg1YWM3M2I0NjMzNzM2YzFmNDMwZjJiNWJiOTExMzg5MDFkYTJiNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjupE4kvd/y9anJ81M4PbYMWTI0Eo
m2aRixU3thgBKxxersB/9e1/eTGrm/zTQ6Wdujwk24viu3236Q7sjBdyhGE3df1w
4LoGPuajctN62WhocSPvoRx/gpRx/UglIe0RXZmCfDV4/oj35qa5G2kJ07xHtnNF
+hTBe3dc4xcErQYjzNkORvWVz2ajsYN79ZRHv4m5KYe+1xoi9pNmPaoPqeNJ2e1U
/HrsrNhPwXdx4zQd0SoU47mhOKO1aPfvdxn8iFtlSuzWeXZlpLKIjxK9YTP5p0j5
f6mBpeqhjKW/ysifFOIofqD3EjRixVqbQ9D4TubjvCemkuKpGyprJLs5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrHO0Yzc2wfQw8rW7kROJAdorapMB8GA1UdIwQY
MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt
MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk
LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIazwk57s
mVfdIhaarkNZi6qmnazaK4PZPaNnIXWR2o7alW/BCRqznh3yz2y4s3rE2rAWmQje
NTzp7PesB6hvk2H78ffrGtOWS043w2sVloCH7WT/hcqoHwIjkZYF/1PrjwT2l3JE
1jJ2LkKc654LUnGFpqy39dZUdVsDDqblff47APDvmsYsoRm24bWnCWHgAUau70i5
fsCk0mg9YrGSDWWgjoA+bHf/jUdleidOOIZlGx7nj9SaQCxzpP2j4NH1hqGqszIh
JKCn7wMx9MKa1+NqzxZEC+L8IjJPOpuArH7464spj7lzmYwMio6MZmWKAEsyM9+/
hiHJPcXwfEZrhA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:11 2025 by rpki-client