Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: rgHvSZZHS6qzwH5TBzGPQ4cikKvRIQOeHZDGvttHoKo=
Subject key identifier: 8A:38:14:0B:53:9F:C4:50:B1:6B:2E:48:B6:80:CF:93:16:CE:85:81
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 0194BCE06A367D50C9A040F654E48F454294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: 8Ez0aDmgKkJ2e0bNN98n3REFAfWDWm4cvMx3ZCR9ATs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6a:36:7d:50:c9:a0:40:f6:54:e4:8f:45:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=8a38140b539fc450b16b2e48b680cf9316ce8581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:ff:07:66:81:7d:f9:77:a8:be:d2:6b:e6:
92:9b:5a:67:4d:86:31:a3:5e:13:47:7c:16:e2:db:
9b:d5:27:11:a8:9a:a8:04:77:2d:86:b0:b2:19:21:
59:a0:ad:6f:d7:47:5f:40:40:fd:e6:9a:76:30:5f:
9d:27:7d:b9:bc:ef:74:05:71:ef:85:0a:53:1c:da:
d5:b0:59:ab:ed:69:5c:81:1d:af:11:05:1b:de:40:
e1:c6:a6:91:b3:42:70:d2:93:3c:75:46:88:12:2e:
90:ee:4a:8a:67:9e:a5:eb:b1:7e:f7:9d:b4:4b:aa:
30:3a:ac:49:d6:a2:1a:13:1f:43:2c:cb:e3:50:87:
1f:6b:83:8a:fc:0b:bc:16:10:66:f1:41:d6:5c:cf:
d1:ac:f9:8e:ce:f9:03:7b:8d:91:36:30:4a:8d:13:
64:ee:48:ca:2a:dc:83:3a:b4:ab:51:53:35:9c:14:
f1:cc:56:f8:39:63:b1:f8:01:d8:0f:93:f3:ee:b9:
11:85:b3:71:7e:ea:73:d1:d1:f9:bb:d8:bd:be:b9:
a6:35:6d:2b:93:6b:fe:5c:8d:e6:eb:2f:d0:19:a4:
a5:30:6e:81:49:c7:41:f5:67:a0:60:29:2b:6b:ec:
f4:88:8d:42:fc:43:28:91:62:00:71:f7:a7:5b:dd:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:14:0B:53:9F:C4:50:B1:6B:2E:48:B6:80:CF:93:16:CE:85:81
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0d:0e:e9:bd:af:36:23:02:be:86:65:d1:81:65:ce:7d:f4:
00:9a:90:af:5a:67:65:92:7d:76:78:b1:08:8c:32:8b:13:e7:
a9:6f:47:12:21:6b:90:57:6c:6e:25:35:53:63:23:94:04:a3:
d9:3b:80:c4:63:0a:fd:de:0f:0f:44:d4:f2:56:f6:16:e9:a4:
79:c3:e4:15:d8:6e:b1:34:84:2a:3e:4b:6d:87:49:2f:c3:20:
17:b8:eb:de:82:3a:f4:48:14:52:2e:86:ce:5f:e1:f5:0e:42:
5a:1c:f2:1e:39:32:48:86:2f:c2:58:89:eb:21:11:a2:09:c1:
39:30:af:b5:32:c0:6f:fd:55:85:3d:2a:55:a1:84:a9:34:b2:
06:c6:13:dc:e6:a8:e1:8b:5e:0c:a3:15:7f:a0:1c:84:fa:f6:
00:4a:b7:08:6c:ad:e1:28:5a:71:ef:3e:9b:7a:ed:4b:12:c8:
4f:8c:9d:6a:4d:80:05:2c:f9:0e:8e:55:f0:19:ff:ff:a0:2a:
01:35:d3:9d:b6:c7:0b:0a:ce:1f:cf:43:a7:23:16:23:a5:e4:
51:09:28:d9:07:ab:95:63:ad:05:7c:23:67:ff:35:bf:bb:a0:
b1:dc:6d:a1:c0:10:5e:9d:a9:ab:e3:eb:6a:1a:20:43:50:7d:
0f:6e:96:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Go2fVDJoED2VOSPRUKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4
YzkwMDUwHhcNMjUwMTMxMTUwMDExWhcNMjUwMjAxMTUwMDExWjAzMTEwLwYDVQQD
Eyg4YTM4MTQwYjUzOWZjNDUwYjE2YjJlNDhiNjgwY2Y5MzE2Y2U4NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe//B2aBffl3qL7Sa+aSm1pnTYYx
o14TR3wW4tub1ScRqJqoBHcthrCyGSFZoK1v10dfQED95pp2MF+dJ325vO90BXHv
hQpTHNrVsFmr7WlcgR2vEQUb3kDhxqaRs0Jw0pM8dUaIEi6Q7kqKZ56l67F+9520
S6owOqxJ1qIaEx9DLMvjUIcfa4OK/Au8FhBm8UHWXM/RrPmOzvkDe42RNjBKjRNk
7kjKKtyDOrSrUVM1nBTxzFb4OWOx+AHYD5Pz7rkRhbNxfupz0dH5u9i9vrmmNW0r
k2v+XI3m6y/QGaSlMG6BScdB9WegYCkra+z0iI1C/EMokWIAcfenW923hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo4FAtTn8RQsWsuSLaAz5MWzoWBMB8GA1UdIwQY
MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt
ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm
LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw0O6b2v
NiMCvoZl0YFlzn30AJqQr1pnZZJ9dnixCIwyixPnqW9HEiFrkFdsbiU1U2MjlASj
2TuAxGMK/d4PD0TU8lb2FumkecPkFdhusTSEKj5LbYdJL8MgF7jr3oI69EgUUi6G
zl/h9Q5CWhzyHjkySIYvwliJ6yERognBOTCvtTLAb/1VhT0qVaGEqTSyBsYT3Oao
4YteDKMVf6AchPr2AEq3CGyt4Shace8+m3rtSxLIT4ydak2ABSz5Do5V8Bn//6Aq
ATXTnbbHCwrOH89DpyMWI6XkUQko2QerlWOtBXwjZ/81v7ugsdxtocAQXp2pq+Pr
ahogQ1B9D26WAA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:34 2025 by rpki-client