Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: dEQqo8onhrzjK1xYqnq7Kmq+5BtEpFW8qOQdy6Ixv3k=
Subject key identifier: 36:04:38:A7:F3:2F:C2:D9:33:BD:62:1D:DC:E5:78:63:AA:37:75:28
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 0194BC3C205FFFD51A058B32FD59D85A4038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0813
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: zStrPu4Igr9Own+Oy+U/Z+1QGz2ZWgLpQpO3kOoMyhE=)
2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:20:5f:ff:d5:1a:05:8b:32:fd:59:d8:5a:40:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=360438a7f32fc2d933bd621ddce57863aa377528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:5b:df:50:72:56:9b:7b:7b:2e:65:a9:4e:
54:e7:9e:52:c2:0b:68:aa:a1:70:48:a2:38:67:f7:
92:a5:2a:97:45:59:02:cb:26:79:6e:47:1a:86:99:
04:e8:74:73:f4:17:07:be:e5:3a:0a:50:98:1d:b5:
ea:b9:b4:cb:97:26:7b:ec:8d:23:f1:3e:f2:f0:09:
d0:c5:29:7e:98:d0:3b:68:56:09:18:d0:04:3d:9f:
fc:3c:e9:95:56:ce:f6:08:dd:c3:bb:ed:8f:9c:35:
a5:91:a3:5e:45:60:c6:c0:63:98:46:11:34:a9:bf:
44:08:2a:91:0a:5a:e4:86:1c:a6:96:16:bc:1a:7b:
58:ca:87:29:50:d2:56:9b:8c:33:04:d5:83:0c:f5:
68:37:74:b9:97:fa:c9:76:87:8a:95:3a:74:56:4d:
56:c3:ee:d9:7b:59:f2:cd:3e:e1:00:27:16:23:aa:
62:b0:fc:db:39:16:80:09:4c:a0:b4:77:91:c9:1d:
10:10:ad:9d:0a:43:9b:f3:be:49:5d:b1:89:ee:4b:
f4:ec:b9:71:84:14:df:b1:38:72:be:e5:3e:6c:fb:
ff:e0:3d:6d:55:35:f8:5b:23:92:8d:4b:13:25:df:
8e:bc:73:13:ae:32:dc:b1:0f:7d:93:55:d8:d1:10:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:04:38:A7:F3:2F:C2:D9:33:BD:62:1D:DC:E5:78:63:AA:37:75:28
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a7:7d:04:a1:53:06:08:5d:98:4c:bb:ee:08:69:37:b9:25:
89:0a:ce:42:23:22:03:85:e5:c6:52:1b:69:28:58:ce:f9:32:
65:97:61:dd:0c:db:fb:88:87:f1:5c:95:9d:38:e5:b8:2b:f2:
2a:8c:78:6b:4f:c0:1e:b4:a7:e4:29:1c:53:db:18:1f:fd:3a:
36:e7:2f:d7:43:0c:9b:ad:fd:f5:70:59:a2:47:2d:28:62:43:
79:7b:bc:6a:3e:20:91:2d:f3:e9:e5:5e:5f:b0:f7:da:4e:43:
e4:65:44:16:30:aa:c7:e0:3b:c7:45:82:2f:c2:05:b9:a6:ed:
b4:92:8a:8e:d9:16:e7:b5:83:b1:e4:f2:cb:fa:84:d5:9c:fc:
e9:be:81:52:3f:c1:40:83:5a:43:b4:31:85:6a:d8:fb:e8:a8:
9b:fc:96:db:9a:9d:d3:50:bd:14:51:0d:cd:98:88:1a:4b:7e:
fd:b2:ad:3f:17:f3:e2:63:21:b6:ed:e0:d8:9b:af:58:11:fc:
b3:dc:50:0a:b8:33:90:0c:60:2c:40:dc:54:94:6f:72:8a:19:
f5:93:bb:65:5d:f3:f8:10:ef:6d:c9:8d:90:f8:20:6f:f5:f2:
1b:ff:82:f5:f1:7e:2a:8b:ce:c6:91:a2:f5:47:e8:45:1d:ab:
ce:24:e5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCBf/9UaBYsy/VnYWkA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy
NTIxYzcwHhcNMjUwMTMxMTIwMDQ0WhcNMjUwMjAxMTIwMDQ0WjAzMTEwLwYDVQQD
EygzNjA0MzhhN2YzMmZjMmQ5MzNiZDYyMWRkY2U1Nzg2M2FhMzc3NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5epb31ByVpt7ey5lqU5U555Swgto
qqFwSKI4Z/eSpSqXRVkCyyZ5bkcahpkE6HRz9BcHvuU6ClCYHbXqubTLlyZ77I0j
8T7y8AnQxSl+mNA7aFYJGNAEPZ/8POmVVs72CN3Du+2PnDWlkaNeRWDGwGOYRhE0
qb9ECCqRClrkhhymlha8GntYyocpUNJWm4wzBNWDDPVoN3S5l/rJdoeKlTp0Vk1W
w+7Ze1nyzT7hACcWI6pisPzbORaACUygtHeRyR0QEK2dCkOb875JXbGJ7kv07Llx
hBTfsThyvuU+bPv/4D1tVTX4WyOSjUsTJd+OvHMTrjLcsQ99k1XY0RAdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYEOKfzL8LZM71iHdzleGOqN3UoMB8GA1UdIwQY
MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt
ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx
LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqd9BKFT
BghdmEy77ghpN7kliQrOQiMiA4XlxlIbaShYzvkyZZdh3Qzb+4iH8VyVnTjluCvy
Kox4a0/AHrSn5CkcU9sYH/06Nucv10MMm6399XBZokctKGJDeXu8aj4gkS3z6eVe
X7D32k5D5GVEFjCqx+A7x0WCL8IFuabttJKKjtkW57WDseTyy/qE1Zz86b6BUj/B
QINaQ7QxhWrY++iom/yW25qd01C9FFENzZiIGkt+/bKtPxfz4mMhtu3g2JuvWBH8
s9xQCrgzkAxgLEDcVJRvcooZ9ZO7ZV3z+BDvbcmNkPggb/XyG/+C9fF+KovOxpGi
9UfoRR2rziTldw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:05 2025 by rpki-client