Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: hDbQh1TN/kI1ibC1KsAM4JygTREg/HERkkc2eswhRD0=
Subject key identifier: EC:01:32:FD:40:31:52:2F:6D:35:6D:53:E7:F5:57:11:0C:28:92:33
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 0194BBCE4DB7DF2AD6F06113C2BE0565F196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: U9ttQy2dr0MdGNJC2N3LHxuCkWlEQiVTc2HOC4rVhQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:b7:df:2a:d6:f0:61:13:c2:be:05:65:f1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=ec0132fd4031522f6d356d53e7f557110c289233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:1b:1c:8d:e3:ab:16:3f:e5:b0:e0:e0:9b:
6c:9b:7a:cd:21:33:46:63:84:fa:87:60:ad:cd:7d:
f1:a6:a5:c0:fe:c3:05:60:69:c8:7a:ba:e5:cb:57:
c5:46:01:1b:68:a0:8c:8b:b2:08:66:6a:79:8c:c0:
09:4e:ed:0b:35:0a:e1:d7:ab:a5:0e:11:24:7d:a4:
10:74:ae:25:15:ed:eb:5f:85:94:ce:74:e1:85:05:
8a:8f:11:75:03:f7:17:8f:55:60:20:da:78:18:f4:
27:27:ea:e6:4d:f9:31:02:b5:64:68:55:bf:13:8d:
b3:36:4d:ab:79:ed:8a:63:df:ce:7e:5a:25:08:9b:
fa:cb:4a:a8:73:38:e0:8a:f7:cb:6e:71:cf:49:83:
c9:05:78:69:61:87:5d:ba:94:36:4c:3b:7a:14:fe:
7a:ee:a4:fa:8b:bf:4c:0f:36:df:58:49:31:f7:1c:
5f:25:c1:48:64:42:25:c2:2a:43:1c:05:d2:69:b8:
e4:74:87:68:d0:c3:01:d6:9a:57:93:8d:b3:c2:44:
1b:77:eb:26:cd:ec:d6:55:a8:be:2f:9f:a0:e7:48:
eb:58:6a:0d:e8:7a:8e:52:4b:34:3b:96:d2:b5:00:
d1:a5:70:31:d1:09:a0:71:8c:05:23:75:14:4b:fd:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:32:FD:40:31:52:2F:6D:35:6D:53:E7:F5:57:11:0C:28:92:33
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:02:c2:8d:4b:09:82:0a:60:86:f4:7c:11:5a:a6:3a:e1:75:
30:ab:b7:59:0f:25:38:aa:a4:48:31:58:27:a5:21:df:49:49:
63:24:67:46:ec:bc:8b:31:ac:e1:63:bf:0f:a8:62:ab:2b:7f:
80:1a:ac:36:23:d5:84:6e:64:7b:2c:83:54:2f:f7:08:82:3a:
5a:9e:39:e0:3a:5e:4b:0a:33:2a:3f:cb:97:8a:c1:ed:92:87:
99:3f:fb:83:a5:e0:3e:60:63:f8:c3:5e:5f:74:f3:29:9f:a3:
9a:45:3f:09:cc:58:56:8d:56:ca:bd:44:70:f8:6f:ef:8c:03:
4c:1a:b2:d0:56:df:3e:44:22:9e:8c:d8:1e:29:b2:01:61:a8:
35:fe:9b:dd:09:e9:ac:0a:84:bb:67:bf:55:5b:46:89:f8:0f:
35:53:16:49:f5:3b:17:65:65:a1:b5:da:83:78:46:99:6d:0a:
d0:fa:0b:62:05:9b:13:a7:1c:bd:65:de:a0:ad:6d:a3:47:23:
2e:f7:b8:f7:f1:7a:ce:0d:ea:a2:e1:c1:09:9b:34:08:98:27:
ed:a6:c6:d7:4d:e2:f5:c3:7a:95:ba:e7:4d:4a:f6:4e:71:e6:
0d:95:b7:5b:ff:28:49:c6:3f:4b:14:e8:ee:a5:96:1c:c1:86:
8f:df:e6:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk233yrW8GETwr4FZfGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDFjM2FmMmNkNTk4NjU3NWQxYmNmNjVlYzllODc3NjY2
ZWRlMzYwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
EyhlYzAxMzJmZDQwMzE1MjJmNmQzNTZkNTNlN2Y1NTcxMTBjMjg5MjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTwbHI3jqxY/5bDg4Jtsm3rNITNG
Y4T6h2CtzX3xpqXA/sMFYGnIerrly1fFRgEbaKCMi7IIZmp5jMAJTu0LNQrh16ul
DhEkfaQQdK4lFe3rX4WUznThhQWKjxF1A/cXj1VgINp4GPQnJ+rmTfkxArVkaFW/
E42zNk2ree2KY9/OflolCJv6y0qoczjgivfLbnHPSYPJBXhpYYddupQ2TDt6FP56
7qT6i79MDzbfWEkx9xxfJcFIZEIlwipDHAXSabjkdIdo0MMB1ppXk42zwkQbd+sm
zezWVai+L5+g50jrWGoN6HqOUks0O5bStQDRpXAx0QmgcYwFI3UUS/3VwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwBMv1AMVIvbTVtU+f1VxEMKJIzMB8GA1UdIwQY
MBaAFMxBw68s1ZhlddG89l7J6Hdmbt42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEt
NGM2NTIyNDUzYzlhLzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEtNGM2NTIyNDUzYzlh
LzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnALCjUsJ
ggpghvR8EVqmOuF1MKu3WQ8lOKqkSDFYJ6Uh30lJYyRnRuy8izGs4WO/D6hiqyt/
gBqsNiPVhG5keyyDVC/3CII6Wp454DpeSwozKj/Ll4rB7ZKHmT/7g6XgPmBj+MNe
X3TzKZ+jmkU/CcxYVo1Wyr1EcPhv74wDTBqy0FbfPkQinozYHimyAWGoNf6b3Qnp
rAqEu2e/VVtGifgPNVMWSfU7F2VlobXag3hGmW0K0PoLYgWbE6ccvWXeoK1to0cj
Lve49/F6zg3qouHBCZs0CJgn7abG103i9cN6lbrnTUr2TnHmDZW3W/8oScY/SxTo
7qWWHMGGj9/moA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:24 2025 by rpki-client