Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: sSn7Quv7qU2zZiDcrHKTXHHKH5mojMnYLv+/I4Vq6Aw=
Subject key identifier: B4:D3:E1:5F:E4:64:4B:4D:BD:20:47:85:2A:92:38:7F:6C:4D:27:B0
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 0194BD852E649C4B3B1FF46C83BCA7B0D9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 100E
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=)
2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: xWJQ+X4Zqy8tCvMgL3uwlL+PZajUgDMoLw3OcFPjOJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2e:64:9c:4b:3b:1f:f4:6c:83:bc:a7:b0:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=b4d3e15fe4644b4dbd2047852a92387f6c4d27b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:2b:04:c1:de:07:fb:3a:66:2d:d3:90:a5:
b5:fc:0a:ac:5f:13:87:a2:7a:e1:0a:07:36:2b:21:
d1:d4:0e:e9:d7:ee:3f:60:d5:30:83:00:bc:c3:58:
99:b5:d8:7c:d3:cf:ad:96:30:7b:f5:9a:58:33:cb:
e4:b2:64:0d:7d:c6:e9:fa:16:89:90:75:99:22:0f:
2f:70:ce:4a:07:94:d1:ab:f8:c5:37:05:40:30:79:
cd:6f:0e:1c:e5:1d:4e:98:ee:6b:f3:05:1a:cd:8f:
fe:56:84:82:6f:4d:31:65:99:51:ff:ff:18:f3:31:
81:6e:b0:ae:cb:bb:e6:09:6d:42:66:f7:6d:11:93:
9b:4b:0e:52:87:7d:a7:6c:83:f0:d9:9e:a7:f4:94:
63:23:3b:e0:d1:28:b0:e4:50:cd:32:6f:e2:53:d8:
a5:76:76:a2:11:11:dc:02:93:f4:46:17:d3:38:a8:
e0:04:b9:9d:fe:9b:c5:4d:78:e6:98:d4:4a:f0:cd:
d2:f9:e5:10:e8:cc:89:ef:7f:7a:bc:ed:66:cf:8d:
71:70:7f:d2:2e:3a:28:b7:bb:83:2d:bc:32:ec:59:
22:4a:66:91:32:24:a8:a6:ca:5d:78:c1:7d:91:c7:
3a:dd:32:bd:2f:e3:de:24:2e:a2:df:39:f1:ab:8a:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:E1:5F:E4:64:4B:4D:BD:20:47:85:2A:92:38:7F:6C:4D:27:B0
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:5d:09:f1:b0:85:1f:e0:c1:c4:a9:70:2f:da:64:0b:d5:
d2:c1:f9:b8:f8:13:35:7c:c9:af:c2:0a:4a:04:37:08:56:1c:
39:97:24:9b:d3:8a:f6:bb:ca:bb:7a:36:0a:8e:b0:71:56:df:
1d:27:b2:48:f4:84:02:42:c7:32:b2:ae:80:68:0b:51:ae:b3:
98:65:00:c3:d9:7d:bf:13:b9:f4:2c:c6:d4:c7:32:86:5a:9c:
40:2c:73:60:2e:cc:87:c0:70:44:02:65:45:12:28:f8:2c:07:
0a:06:ee:95:f0:08:c8:80:79:46:41:7d:63:03:c2:dc:10:90:
cf:be:c9:98:70:4b:5e:7e:7c:09:8d:d8:46:62:33:c8:66:e6:
2a:92:06:0c:73:8e:2f:fc:70:ea:e2:75:ed:ed:c0:8a:fa:bf:
88:61:44:b2:8d:02:40:f6:b9:32:55:6b:37:63:62:bd:ff:a3:
f6:d7:7e:e3:dd:c3:b0:1d:b3:38:f6:62:94:21:bd:08:91:f8:
7f:fc:07:4d:e9:5c:76:0d:16:38:4e:22:f8:4c:41:b3:9d:8a:
79:d2:d8:fa:83:77:ee:2d:19:4d:26:fc:7f:04:46:97:ad:c6:
b6:9a:62:d9:4e:69:1f:7b:67:85:7c:4b:fa:7d:4e:28:25:4c:
56:0b:3c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hS5knEs7H/Rsg7ynsNn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5
MTk3NWUwHhcNMjUwMTMxMTgwMDA5WhcNMjUwMjAxMTgwMDA5WjAzMTEwLwYDVQQD
EyhiNGQzZTE1ZmU0NjQ0YjRkYmQyMDQ3ODUyYTkyMzg3ZjZjNGQyN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozQrBMHeB/s6Zi3TkKW1/AqsXxOH
onrhCgc2KyHR1A7p1+4/YNUwgwC8w1iZtdh808+tljB79ZpYM8vksmQNfcbp+haJ
kHWZIg8vcM5KB5TRq/jFNwVAMHnNbw4c5R1OmO5r8wUazY/+VoSCb00xZZlR//8Y
8zGBbrCuy7vmCW1CZvdtEZObSw5Sh32nbIPw2Z6n9JRjIzvg0Siw5FDNMm/iU9il
dnaiERHcApP0RhfTOKjgBLmd/pvFTXjmmNRK8M3S+eUQ6MyJ7396vO1mz41xcH/S
Ljoot7uDLbwy7FkiSmaRMiSopspdeMF9kcc63TK9L+PeJC6i3znxq4okiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTT4V/kZEtNvSBHhSqSOH9sTSewMB8GA1UdIwQY
MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt
YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky
LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+BdCfGw
hR/gwcSpcC/aZAvV0sH5uPgTNXzJr8IKSgQ3CFYcOZckm9OK9rvKu3o2Co6wcVbf
HSeySPSEAkLHMrKugGgLUa6zmGUAw9l9vxO59CzG1McyhlqcQCxzYC7Mh8BwRAJl
RRIo+CwHCgbulfAIyIB5RkF9YwPC3BCQz77JmHBLXn58CY3YRmIzyGbmKpIGDHOO
L/xw6uJ17e3Aivq/iGFEso0CQPa5MlVrN2Nivf+j9td+493DsB2zOPZilCG9CJH4
f/wHTelcdg0WOE4i+ExBs52KedLY+oN37i0ZTSb8fwRGl63Gtppi2U5pH3tnhXxL
+n1OKCVMVgs8gA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:47 2025 by rpki-client