Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: j/cX+kA/csKHBE2paMKi0ghWThKVgVCPK4u8ZH4uP/Y=
Subject key identifier: 09:B5:5A:46:5E:C8:DC:86:9E:A1:CC:2C:81:3B:37:A5:FE:E4:18:7D
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 0194BC04EF917C378A35EA2869ABB16DE0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 0CFF
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: KdeQ3ba8C2wLBi+D4sqTIoiQpAhLkWtSuSlgEHZNq50=)
2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ef:91:7c:37:8a:35:ea:28:69:ab:b1:6d:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=09b55a465ec8dc869ea1cc2c813b37a5fee4187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:15:ab:30:1e:3e:bb:8b:55:24:be:f6:d8:
2f:73:88:58:9b:33:86:ae:a1:40:1b:f0:64:96:87:
44:e3:de:21:98:36:d0:cc:95:34:f6:43:c9:6a:fb:
05:4c:c3:d6:39:3e:31:24:75:b9:62:7e:31:89:6e:
df:ea:75:22:7c:16:4e:2f:11:93:fa:fe:ce:37:2a:
dd:06:74:f0:c8:fd:0e:11:3b:07:1c:9a:51:db:f6:
ae:af:42:01:45:34:ad:d4:69:e2:bf:2a:d7:57:78:
45:68:1d:df:f9:f6:61:a3:a5:bc:2f:68:59:2c:2c:
32:1f:ac:f6:29:c0:35:9f:7b:68:18:46:31:92:5c:
24:6c:df:87:77:de:f7:46:c1:c4:82:93:48:1f:c4:
85:2c:00:75:9d:6b:6a:40:1a:d3:ac:1c:2d:53:7e:
d3:e8:64:d4:41:56:ea:ac:7d:a9:a6:3b:2f:81:a2:
8f:d2:59:ab:43:17:b2:c0:fd:63:39:bc:4d:94:e9:
a7:1f:11:ea:15:25:f6:ca:a1:7e:96:ac:51:41:6a:
20:e1:a4:14:c4:a7:93:05:8b:da:03:5e:0d:53:50:
af:bf:42:38:ea:f5:79:80:6f:9b:19:1e:e4:89:25:
ae:95:eb:99:4d:04:64:74:9a:ce:87:24:b9:28:fe:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:5A:46:5E:C8:DC:86:9E:A1:CC:2C:81:3B:37:A5:FE:E4:18:7D
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:98:ed:47:0c:78:8c:f7:3e:ab:82:9c:db:b9:81:59:d6:f6:
13:cd:6b:7d:f2:c9:fd:c8:fa:2f:3f:55:a5:b9:d5:b2:75:ce:
f3:37:2e:a3:a6:bd:93:94:9e:3f:50:54:e4:06:51:1d:d3:f5:
fc:2e:c8:17:00:c2:c1:4a:e9:47:d2:5f:ae:61:48:f4:31:be:
46:47:cf:d3:00:52:3c:e3:1e:7b:03:a5:93:cd:98:c3:39:88:
ea:4c:5b:38:6f:33:e0:38:a8:b3:7a:f2:c0:a5:ad:be:fd:a2:
e5:61:57:41:43:96:58:e7:43:7f:b7:02:57:b1:93:79:d6:c2:
1a:f0:9a:f9:aa:14:b3:68:02:40:5e:39:fd:d0:0b:5a:e4:17:
5f:e8:5f:9e:99:c9:ec:41:73:e1:2c:11:c6:89:8d:17:29:4c:
94:93:03:53:7d:a3:54:e6:31:ab:5b:d3:7e:a4:aa:91:df:95:
75:17:ae:0f:12:67:8c:05:4a:1c:dd:91:bb:4f:1f:f5:ad:0f:
8e:4d:3a:af:06:98:5e:06:52:e5:13:ec:f5:38:ba:c1:8d:9b:
15:a1:6e:52:e2:5f:41:41:d5:d1:90:9c:19:65:6c:ae:cb:2a:
c8:01:60:54:92:ee:ab:5d:5a:a4:24:59:0a:59:39:47:53:72:
60:80:31:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BO+RfDeKNeooaauxbeCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZmFmM2EzZjIxNDBjYjdjNmZmMGNkNmE3ZjU2MTRhMDVl
NGU0NjcwHhcNMjUwMTMxMTEwMDI3WhcNMjUwMjAxMTEwMDI3WjAzMTEwLwYDVQQD
EygwOWI1NWE0NjVlYzhkYzg2OWVhMWNjMmM4MTNiMzdhNWZlZTQxODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNkVqzAePruLVSS+9tgvc4hYmzOG
rqFAG/BklodE494hmDbQzJU09kPJavsFTMPWOT4xJHW5Yn4xiW7f6nUifBZOLxGT
+v7ONyrdBnTwyP0OETsHHJpR2/aur0IBRTSt1GnivyrXV3hFaB3f+fZho6W8L2hZ
LCwyH6z2KcA1n3toGEYxklwkbN+Hd973RsHEgpNIH8SFLAB1nWtqQBrTrBwtU37T
6GTUQVbqrH2ppjsvgaKP0lmrQxeywP1jObxNlOmnHxHqFSX2yqF+lqxRQWog4aQU
xKeTBYvaA14NU1Cvv0I46vV5gG+bGR7kiSWuleuZTQRkdJrOhyS5KP6wpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm1WkZeyNyGnqHMLIE7N6X+5Bh9MB8GA1UdIwQY
MBaAFNf686PyFAy3xv8M1qf1YUoF5ORnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYt
ZjM3OTdjZmQ2NWFlLzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYtZjM3OTdjZmQ2NWFl
LzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZjtRwx4
jPc+q4Kc27mBWdb2E81rffLJ/cj6Lz9VpbnVsnXO8zcuo6a9k5SeP1BU5AZRHdP1
/C7IFwDCwUrpR9JfrmFI9DG+RkfP0wBSPOMeewOlk82YwzmI6kxbOG8z4Dios3ry
wKWtvv2i5WFXQUOWWOdDf7cCV7GTedbCGvCa+aoUs2gCQF45/dALWuQXX+hfnpnJ
7EFz4SwRxomNFylMlJMDU32jVOYxq1vTfqSqkd+VdReuDxJnjAVKHN2Ru08f9a0P
jk06rwaYXgZS5RPs9Ti6wY2bFaFuUuJfQUHV0ZCcGWVsrssqyAFgVJLuq11apCRZ
Clk5R1NyYIAxPA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:18:47 2025 by rpki-client