Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: fWVDJRSld8SSgRW0XLnm1sCGSRv/w6+ufD88VaW9aFM=
Subject key identifier: 81:D9:4B:E6:D4:8B:43:76:66:60:B2:B4:3A:42:9C:64:45:94:9E:C3
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 0194BBCE59B1C2E6A78FD11313094DF0206B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: 22yhpaXHh5B4HMR03TpVCut36u5FORbDJU8Lyj5BPQk=)
2: zwMZXsX6Z6y_GtPEpsaBS7FPtIU.roa (hash: bi378rHsH1o9Uq16RD7qe5x44q14EkwJzXLivtK1Naw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:b1:c2:e6:a7:8f:d1:13:13:09:4d:f0:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=81d94be6d48b43766660b2b43a429c6445949ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:a3:85:05:7f:b2:81:78:d4:d9:f2:f1:66:
0b:70:05:50:af:59:d8:06:f4:c7:b2:bd:02:70:b8:
72:76:c9:81:a0:91:d6:7b:0f:6f:06:64:ce:fb:a3:
0b:11:b2:d8:76:7d:73:95:51:46:b0:5a:e6:1c:5f:
b1:4e:3c:99:ea:05:60:0c:29:ae:05:be:74:8e:fd:
72:d0:89:61:75:ff:1c:20:cf:73:72:be:c8:e8:33:
29:79:3c:d5:46:4c:95:c8:b3:00:ae:cf:3c:f6:5f:
cc:37:ef:79:b1:7d:23:97:1e:78:38:a5:bc:56:a4:
58:1e:bb:4f:4c:41:36:8e:f4:e8:d9:d2:99:29:de:
07:cf:b4:58:b2:86:66:8a:9d:fa:49:8e:c7:95:3f:
e5:d6:31:58:3d:d8:fd:69:8b:28:f6:13:3a:66:35:
3c:19:ef:14:88:ee:97:45:25:0c:b2:e0:89:2b:37:
1b:f8:4a:22:fa:b8:23:0f:e2:6e:e3:7b:d5:7f:07:
c6:1a:c5:ef:a7:25:be:8e:27:25:65:97:df:dc:10:
40:c7:df:3d:4d:91:30:36:a3:a1:16:d3:cf:65:b8:
2b:d0:46:62:39:1c:b4:87:0c:76:91:62:cc:38:0c:
38:e6:31:99:10:c8:a3:41:5f:9c:03:f2:a0:79:ff:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D9:4B:E6:D4:8B:43:76:66:60:B2:B4:3A:42:9C:64:45:94:9E:C3
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ed:5b:6f:0d:e2:ba:c8:77:b1:42:bc:4b:b7:5f:99:a6:19:
29:3d:01:03:c3:c4:c3:da:f2:a5:7a:5b:6c:bf:c0:11:da:47:
e8:42:ef:03:f4:49:8c:b6:c8:2e:e2:22:38:df:07:89:fa:90:
c1:32:8a:a3:1c:bf:41:35:40:bc:00:66:cc:57:ca:46:30:29:
db:04:fa:cb:5e:d7:22:70:3d:97:30:f5:b7:63:8e:c5:55:af:
ac:c2:94:9b:69:b8:24:75:f1:42:17:7c:fb:80:a1:35:0b:c5:
a9:82:50:8f:4b:f4:f0:4d:65:6d:9d:50:3b:71:1b:27:bb:15:
01:a7:54:d6:1b:15:23:a2:a1:94:30:26:d4:d0:44:be:78:32:
44:dc:12:70:81:08:ff:db:d7:a8:91:e5:de:d0:a1:93:c0:36:
ab:6f:85:59:8c:2f:96:54:f6:30:44:c5:b8:34:ac:1d:7e:e7:
88:ff:7a:e5:74:07:f2:1a:b2:33:2e:2a:b4:58:ca:e7:7d:b7:
ea:d1:0e:62:de:7d:0e:8d:45:98:8b:97:9a:5e:58:c9:1a:25:
b4:d2:d7:ee:76:c1:bf:15:25:5f:cd:e0:82:09:c9:81:ca:dc:
68:4a:cb:5d:c5:34:14:b1:dc:c5:c7:3e:47:4b:13:5a:1c:e5:
4f:04:fc:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlmxwuanj9ETEwlN8CBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDFlMjg5MzBkNzdhN2ViOTg5MWI2ZmFiYmIyOTE1ZWUz
ODg1YWEwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
Eyg4MWQ5NGJlNmQ0OGI0Mzc2NjY2MGIyYjQzYTQyOWM2NDQ1OTQ5ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUOjhQV/soF41Nny8WYLcAVQr1nY
BvTHsr0CcLhydsmBoJHWew9vBmTO+6MLEbLYdn1zlVFGsFrmHF+xTjyZ6gVgDCmu
Bb50jv1y0Ilhdf8cIM9zcr7I6DMpeTzVRkyVyLMArs889l/MN+95sX0jlx54OKW8
VqRYHrtPTEE2jvTo2dKZKd4Hz7RYsoZmip36SY7HlT/l1jFYPdj9aYso9hM6ZjU8
Ge8UiO6XRSUMsuCJKzcb+Eoi+rgjD+Ju43vVfwfGGsXvpyW+jiclZZff3BBAx989
TZEwNqOhFtPPZbgr0EZiORy0hwx2kWLMOAw45jGZEMijQV+cA/Kgef+a4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHZS+bUi0N2ZmCytDpCnGRFlJ7DMB8GA1UdIwQY
MBaAFMzR4okw13p+uYkbb6u7KRXuOIWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMt
YzEzYjFmOTc3ZDU3LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMtYzEzYjFmOTc3ZDU3
LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO1bbw3i
ush3sUK8S7dfmaYZKT0BA8PEw9rypXpbbL/AEdpH6ELvA/RJjLbILuIiON8HifqQ
wTKKoxy/QTVAvABmzFfKRjAp2wT6y17XInA9lzD1t2OOxVWvrMKUm2m4JHXxQhd8
+4ChNQvFqYJQj0v08E1lbZ1QO3EbJ7sVAadU1hsVI6KhlDAm1NBEvngyRNwScIEI
/9vXqJHl3tChk8A2q2+FWYwvllT2METFuDSsHX7niP965XQH8hqyMy4qtFjK5323
6tEOYt59Do1FmIuXml5YyRoltNLX7nbBvxUlX83gggnJgcrcaErLXcU0FLHcxcc+
R0sTWhzlTwT8rw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:17 2025 by rpki-client