Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.mft
File: dzW3DconD8uOS5CStyADZBOPXfE.mft (raw, json)
Hash identifier: +RyL+2yTwnLCyA7Mo/H4ekKLMhQo5OqdKoLCfnuTyhw=
Subject key identifier: 82:05:EC:77:A1:39:B7:F8:16:EC:78:AB:FD:59:21:0D:86:E0:21:3D
Authority key identifier: 77:35:B7:0D:CA:27:0F:CB:8E:4B:90:92:B7:20:03:64:13:8F:5D:F1
Certificate issuer: /CN=7735b70dca270fcb8e4b9092b7200364138f5df1
Certificate serial: 0194BBCEFCD864C2DBE357D3C1A5D90B6A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzW3DconD8uOS5CStyADZBOPXfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: dzW3DconD8uOS5CStyADZBOPXfE.crl (hash: zC0NiqgPD5WG8xC+kgdP0zBwVypij+3ba1CrDUUtRtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fc:d8:64:c2:db:e3:57:d3:c1:a5:d9:0b:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7735b70dca270fcb8e4b9092b7200364138f5df1
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=8205ec77a139b7f816ec78abfd59210d86e0213d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:b6:43:b0:3a:64:e5:f7:5c:83:9f:f8:ed:
a7:be:fc:39:a1:c2:d2:81:07:b0:56:80:ba:27:04:
ff:61:5c:d6:05:bb:fc:99:d3:7c:b2:25:e1:b9:fe:
9f:a4:97:78:b0:1e:a8:d4:ba:dc:19:83:f6:c7:f4:
52:bb:9f:94:a9:01:55:c3:83:99:91:d9:69:6a:3b:
bf:1c:7d:da:ed:1c:a8:3c:07:03:03:0f:c4:98:0b:
6d:f1:04:86:6d:08:24:b0:bb:71:11:7e:1e:80:15:
31:7b:3c:16:30:30:3e:b1:f6:8f:83:cc:6d:4e:cc:
bd:92:50:b5:bc:46:71:75:d8:b1:c6:e6:18:d4:e3:
49:79:00:7d:f5:49:c7:16:c3:a5:8a:40:3c:5e:4b:
62:3c:68:2b:13:03:db:7a:44:b7:3b:7b:10:69:e5:
9c:ee:28:c6:6c:11:cc:18:a1:19:b9:bc:95:51:61:
f8:2b:e3:17:a0:be:25:81:d3:74:9f:43:35:7b:be:
6e:73:68:96:d1:bb:17:3f:e4:c3:c6:bf:49:52:8f:
a7:81:8a:ad:57:80:e5:e6:49:ea:5e:17:a8:24:6c:
0b:92:b8:5a:27:bd:c0:4f:84:2b:9d:f8:77:c9:b6:
6f:bd:95:90:f3:b8:ba:41:47:69:29:07:56:66:76:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:EC:77:A1:39:B7:F8:16:EC:78:AB:FD:59:21:0D:86:E0:21:3D
X509v3 Authority Key Identifier:
keyid:77:35:B7:0D:CA:27:0F:CB:8E:4B:90:92:B7:20:03:64:13:8F:5D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzW3DconD8uOS5CStyADZBOPXfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ca:88:97:f4:32:3f:ba:75:e3:6a:0a:c6:12:72:a6:8b:b3:
a5:55:db:08:4c:ef:15:49:8f:02:12:fe:e9:8f:5b:51:39:e9:
9f:ea:6a:ef:6f:97:42:47:95:60:bd:00:ba:40:0c:0b:ed:6f:
67:6a:f5:3c:85:e2:f6:74:22:fe:5b:1f:54:4a:67:f8:e1:65:
f0:de:14:dc:a1:06:98:cf:76:a7:68:93:51:ba:28:a3:e9:b8:
f7:55:fd:24:39:17:c0:0c:6a:0e:9c:84:58:0e:b1:91:d4:94:
39:38:23:65:c9:75:d3:d9:7e:88:c9:7c:a1:a3:2a:39:2e:2b:
49:06:df:59:e2:1e:ad:05:44:2c:16:3b:b3:20:24:cc:c0:26:
40:e7:ec:35:f5:ac:76:ca:77:c4:6e:08:76:53:21:a1:b6:d6:
76:8a:d8:2d:14:e3:50:a2:af:d0:cb:f7:7f:1a:5b:43:9b:61:
10:50:4e:a8:f8:05:fa:5d:23:6d:77:07:12:54:c5:34:c7:31:
0e:bb:a1:f9:4a:3e:23:f5:96:8d:a6:3b:2c:77:9f:cb:b1:b5:
bc:97:af:07:49:ad:8d:26:15:ae:14:2a:be:7f:82:a5:bd:9d:
02:df:b2:f8:27:f5:0f:c9:73:a1:7f:10:11:3e:6d:9e:07:c4:
11:aa:4a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvzYZMLb41fTwaXZC2o0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzViNzBkY2EyNzBmY2I4ZTRiOTA5MmI3MjAwMzY0MTM4
ZjVkZjEwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
Eyg4MjA1ZWM3N2ExMzliN2Y4MTZlYzc4YWJmZDU5MjEwZDg2ZTAyMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiES2Q7A6ZOX3XIOf+O2nvvw5ocLS
gQewVoC6JwT/YVzWBbv8mdN8siXhuf6fpJd4sB6o1LrcGYP2x/RSu5+UqQFVw4OZ
kdlpaju/HH3a7RyoPAcDAw/EmAtt8QSGbQgksLtxEX4egBUxezwWMDA+sfaPg8xt
Tsy9klC1vEZxddixxuYY1ONJeQB99UnHFsOlikA8XktiPGgrEwPbekS3O3sQaeWc
7ijGbBHMGKEZubyVUWH4K+MXoL4lgdN0n0M1e75uc2iW0bsXP+TDxr9JUo+ngYqt
V4Dl5knqXheoJGwLkrhaJ73AT4Qrnfh3ybZvvZWQ87i6QUdpKQdWZna5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIF7HehObf4Fux4q/1ZIQ2G4CE9MB8GA1UdIwQY
MBaAFHc1tw3KJw/LjkuQkrcgA2QTj13xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpXM0Rjb25EOHVPUzVDU3R5QURaQk9QWGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZmJjZTgtNTQzNy00OWQ3LWE3Zjkt
YzZkZGViNDk0NzM1LzEvZHpXM0Rjb25EOHVPUzVDU3R5QURaQk9QWGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZmJjZTgtNTQzNy00OWQ3LWE3ZjktYzZkZGViNDk0NzM1
LzEvZHpXM0Rjb25EOHVPUzVDU3R5QURaQk9QWGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosqIl/Qy
P7p142oKxhJypouzpVXbCEzvFUmPAhL+6Y9bUTnpn+pq72+XQkeVYL0AukAMC+1v
Z2r1PIXi9nQi/lsfVEpn+OFl8N4U3KEGmM92p2iTUbooo+m491X9JDkXwAxqDpyE
WA6xkdSUOTgjZcl109l+iMl8oaMqOS4rSQbfWeIerQVELBY7syAkzMAmQOfsNfWs
dsp3xG4IdlMhobbWdorYLRTjUKKv0Mv3fxpbQ5thEFBOqPgF+l0jbXcHElTFNMcx
Druh+Uo+I/WWjaY7LHefy7G1vJevB0mtjSYVrhQqvn+Cpb2dAt+y+Cf1D8lzoX8Q
ET5tngfEEapKPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:10 2025 by rpki-client