Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: Yr+d4a5ZVMyk/XXlxH9rR3LoHwTwodmj+Ij9nQlg1+8=
Subject key identifier: 47:CB:3E:52:7F:DB:5A:82:F7:24:EA:52:2D:60:58:03:12:9B:E7:83
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 0194BC3C7F741FBA9056A41A1EB510215079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: M4F6VB0kyo74uD3PBtEuXBSFEfSWa6GfaV1KsMi5wUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:74:1f:ba:90:56:a4:1a:1e:b5:10:21:50:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=47cb3e527fdb5a82f724ea522d605803129be783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:11:c4:0c:f3:eb:16:41:34:d0:4e:47:4c:
79:83:1f:87:0b:40:ed:32:40:2b:01:28:82:b6:79:
f4:a5:4b:80:8c:7f:7a:d6:37:56:80:ce:b2:28:61:
6d:fa:f7:0a:cf:62:05:4a:1b:82:93:91:43:49:92:
33:02:4a:35:19:01:11:38:d5:93:8a:70:14:38:43:
96:38:24:ab:6f:cc:11:d0:2c:3a:4b:c5:e1:cb:57:
60:cb:6f:12:b7:27:83:e5:e4:25:cf:90:6d:b1:08:
70:3d:bb:2d:6b:ca:a1:84:54:51:f8:3f:7e:05:41:
40:9d:e5:d1:f5:d7:9a:97:ed:3f:0e:2c:5b:c3:4b:
65:59:8f:a4:8b:7a:ec:91:61:e1:97:df:08:f1:41:
41:76:4f:5d:e5:b9:f3:88:84:1c:11:a8:a6:a7:35:
53:00:c5:e7:66:a3:70:da:a5:81:2b:2c:7c:5e:e4:
d1:ea:43:b8:f6:b7:e8:b2:a8:d6:d3:c0:dc:5a:7c:
b9:38:c5:41:e8:4d:fb:8b:c6:7d:fd:3c:1c:47:62:
02:a7:0f:42:d5:f5:99:33:df:af:b2:7e:6f:f8:87:
6a:53:95:f6:9f:40:17:70:1d:fc:84:78:f0:62:db:
88:d4:5e:b8:06:dc:c4:7c:43:64:8d:d6:ab:f5:40:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:3E:52:7F:DB:5A:82:F7:24:EA:52:2D:60:58:03:12:9B:E7:83
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:34:98:98:6e:4b:c1:f3:42:d7:c2:f8:4c:b7:98:9b:46:c4:
ae:50:20:2d:be:83:81:d9:44:f3:17:85:1d:98:2f:49:c6:ae:
18:69:77:1f:92:2e:83:93:80:08:09:20:0a:23:fa:5c:d4:12:
05:ef:7f:e4:e0:37:8b:5e:c8:9c:f2:c0:a8:ab:af:b6:7a:90:
9b:ce:20:11:e7:84:78:80:56:d9:42:b6:db:9e:ba:e3:23:30:
2a:07:38:b0:f6:68:9e:22:0a:83:8d:4d:f8:b4:1b:1e:28:c6:
c4:a2:27:15:20:89:4a:61:04:66:6f:2e:35:37:2c:66:f1:d9:
1e:b0:af:5a:a7:70:d4:6c:f4:fb:56:5b:17:ca:77:ea:47:37:
c8:fc:57:ae:c5:ee:97:d9:08:cb:c6:19:45:40:79:4b:c3:19:
0d:32:fe:b7:db:47:ad:35:08:a8:00:97:14:b8:28:db:09:65:
cf:ed:c9:9a:55:8e:95:9c:2c:81:53:25:3c:8d:28:6e:99:76:
39:6d:b3:8a:34:8d:79:88:10:2d:3c:d9:d3:9a:1b:16:e8:17:
5f:d1:25:08:fc:a7:37:dc:c7:0c:6b:c9:5d:7b:81:7b:1d:2b:
65:71:d2:f8:55:e5:70:3b:99:5c:24:20:2f:95:a4:46:1a:6f:
e4:37:a7:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PH90H7qQVqQaHrUQIVB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjUwMTMxMTIwMTA4WhcNMjUwMjAxMTIwMTA4WjAzMTEwLwYDVQQD
Eyg0N2NiM2U1MjdmZGI1YTgyZjcyNGVhNTIyZDYwNTgwMzEyOWJlNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukkRxAzz6xZBNNBOR0x5gx+HC0Dt
MkArASiCtnn0pUuAjH961jdWgM6yKGFt+vcKz2IFShuCk5FDSZIzAko1GQERONWT
inAUOEOWOCSrb8wR0Cw6S8Xhy1dgy28StyeD5eQlz5BtsQhwPbsta8qhhFRR+D9+
BUFAneXR9deal+0/Dixbw0tlWY+ki3rskWHhl98I8UFBdk9d5bnziIQcEaimpzVT
AMXnZqNw2qWBKyx8XuTR6kO49rfosqjW08DcWny5OMVB6E37i8Z9/TwcR2ICpw9C
1fWZM9+vsn5v+IdqU5X2n0AXcB38hHjwYtuI1F64BtzEfENkjdar9UB43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfLPlJ/21qC9yTqUi1gWAMSm+eDMB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjSYmG5L
wfNC18L4TLeYm0bErlAgLb6DgdlE8xeFHZgvScauGGl3H5Iug5OACAkgCiP6XNQS
Be9/5OA3i17InPLAqKuvtnqQm84gEeeEeIBW2UK225664yMwKgc4sPZoniIKg41N
+LQbHijGxKInFSCJSmEEZm8uNTcsZvHZHrCvWqdw1Gz0+1ZbF8p36kc3yPxXrsXu
l9kIy8YZRUB5S8MZDTL+t9tHrTUIqACXFLgo2wllz+3JmlWOlZwsgVMlPI0obpl2
OW2zijSNeYgQLTzZ05obFugXX9ElCPynN9zHDGvJXXuBex0rZXHS+FXlcDuZXCQg
L5WkRhpv5DenvA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:15 2025 by rpki-client