Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: 2REFVIWfsdlNaBDYzSSHgAwLUyjhw3hAIXn6/sdoDec=
Subject key identifier: 6F:5A:0F:09:61:D3:EF:68:D3:A5:69:F2:5F:7B:15:38:B3:74:1C:B6
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 0194BD4EB5443B777013C6AF73A1065F9A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 0102
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: /c7/nLCswuZTSQIJXs5bWKmT3GzQw+8NFfAXw9PyJ8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:44:3b:77:70:13:c6:af:73:a1:06:5f:9a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=6f5a0f0961d3ef68d3a569f25f7b1538b3741cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:a3:49:ce:2a:eb:46:d7:79:22:1e:80:b0:
4a:30:d6:d2:49:28:2d:23:02:42:d1:c8:08:1a:5a:
8f:6a:fb:b2:91:8e:74:12:92:04:90:51:7c:32:00:
dd:3d:37:50:c7:4c:82:54:55:92:e2:c5:76:28:85:
26:be:56:d5:1a:1d:74:a9:f3:15:0a:53:bc:26:21:
0d:b0:df:ad:fa:da:f1:b5:0e:e8:f6:4b:e6:e7:19:
1e:29:ac:5e:ad:82:81:f1:c7:80:81:1d:25:00:de:
9c:15:ba:09:04:f8:70:8b:17:50:4a:73:ba:90:3a:
21:ce:51:eb:20:b1:38:d4:ff:03:1a:5e:37:2a:ce:
83:09:3b:2b:17:9c:56:68:62:73:a3:25:7b:fb:28:
60:17:57:ac:b6:05:e8:3a:26:1b:83:85:52:ac:98:
59:27:54:64:78:8c:16:1a:a2:4f:bf:05:e3:e3:0d:
bd:fa:f5:d6:b6:e0:57:35:c5:82:c3:d1:b7:0c:3d:
0d:91:9e:0f:2d:57:b9:8b:b9:08:5c:45:07:51:42:
ec:d4:48:de:9f:ca:96:f1:f7:1f:2a:09:cb:6e:98:
84:90:36:0d:c2:23:5a:42:0a:24:ea:dc:42:58:d3:
87:01:a5:fa:9d:9e:c1:c6:43:f4:dd:54:b0:73:bf:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:0F:09:61:D3:EF:68:D3:A5:69:F2:5F:7B:15:38:B3:74:1C:B6
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:82:ae:fb:5b:4a:b2:1a:7b:24:93:2f:59:51:19:60:8e:7f:
32:20:24:01:04:d8:41:a4:c4:3d:60:ef:b0:44:92:59:35:52:
46:76:d9:af:24:52:6c:28:9b:7d:49:89:1c:e2:75:40:59:67:
d8:dc:b5:61:9b:54:b0:a1:8d:f7:cc:20:8c:9e:a1:8a:1a:f4:
78:32:c8:9b:e3:8f:5d:2b:0a:b6:ed:bf:8a:f2:56:ac:5e:3d:
08:0d:04:05:12:bf:71:58:b3:d0:2f:c4:f5:c8:d7:0d:8d:50:
77:ca:04:8c:fd:51:28:2c:4d:f2:b3:1f:a7:47:c7:c3:34:72:
20:dc:62:5e:78:80:fc:36:07:2d:dd:a6:23:85:75:72:ad:a4:
32:f2:38:20:5b:2b:02:4c:0c:72:5e:fe:78:2a:d0:92:ba:c0:
40:6a:68:3c:a0:65:8f:6f:b0:3e:7a:d6:57:84:5f:58:ba:53:
a2:7b:74:5a:f0:e9:15:65:d4:9e:c5:f2:2e:a7:9c:b3:c5:6f:
15:d0:32:ed:6d:5f:bb:69:50:2f:c3:e8:be:9d:73:0b:d7:b2:
c4:7b:95:98:fd:74:f1:14:7e:fc:a1:f2:18:da:49:6f:9e:a9:
27:cf:83:ed:25:9d:42:8f:76:07:f9:93:ee:7f:a1:9d:9a:ea:
30:dc:b5:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrVEO3dwE8avc6EGX5pMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDk1NTBjNWFlNjY0MDAyOTE4NmNmYzlkZWE3NGU5MWE3
YjYxZTcwHhcNMjUwMTMxMTcwMDM5WhcNMjUwMjAxMTcwMDM5WjAzMTEwLwYDVQQD
Eyg2ZjVhMGYwOTYxZDNlZjY4ZDNhNTY5ZjI1ZjdiMTUzOGIzNzQxY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHWjSc4q60bXeSIegLBKMNbSSSgt
IwJC0cgIGlqPavuykY50EpIEkFF8MgDdPTdQx0yCVFWS4sV2KIUmvlbVGh10qfMV
ClO8JiENsN+t+trxtQ7o9kvm5xkeKaxerYKB8ceAgR0lAN6cFboJBPhwixdQSnO6
kDohzlHrILE41P8DGl43Ks6DCTsrF5xWaGJzoyV7+yhgF1estgXoOiYbg4VSrJhZ
J1RkeIwWGqJPvwXj4w29+vXWtuBXNcWCw9G3DD0NkZ4PLVe5i7kIXEUHUULs1Eje
n8qW8fcfKgnLbpiEkDYNwiNaQgok6txCWNOHAaX6nZ7BxkP03VSwc79FmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9aDwlh0+9o06Vp8l97FTizdBy2MB8GA1UdIwQY
MBaAFGVJVQxa5mQAKRhs/J3qdOkae2HnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUt
YTYyZTE4MGNmYmIyLzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUtYTYyZTE4MGNmYmIy
LzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIKu+1tK
shp7JJMvWVEZYI5/MiAkAQTYQaTEPWDvsESSWTVSRnbZryRSbCibfUmJHOJ1QFln
2Ny1YZtUsKGN98wgjJ6hihr0eDLIm+OPXSsKtu2/ivJWrF49CA0EBRK/cViz0C/E
9cjXDY1Qd8oEjP1RKCxN8rMfp0fHwzRyINxiXniA/DYHLd2mI4V1cq2kMvI4IFsr
AkwMcl7+eCrQkrrAQGpoPKBlj2+wPnrWV4RfWLpTont0WvDpFWXUnsXyLqecs8Vv
FdAy7W1fu2lQL8Povp1zC9eyxHuVmP108RR+/KHyGNpJb56pJ8+D7SWdQo92B/mT
7n+hnZrqMNy1qQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:21 2025 by rpki-client