Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: KiBqK+j83HOZxvqaxtTS+QHNSHhrSqlqKnLw7YuJuYo=
Subject key identifier: 7D:79:AC:34:BF:69:2B:1C:79:93:DB:97:FA:DC:6D:05:35:E0:C2:7B
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 0194BBCDD45D2C5C9F9778CA7C3CF18D6265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: PPp2mR4GAsHGZNkpgHQxdSHD0ybkKUIJAe/fI0dMnhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:5d:2c:5c:9f:97:78:ca:7c:3c:f1:8d:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=7d79ac34bf692b1c7993db97fadc6d0535e0c27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:3c:9a:b9:f8:97:4c:f0:77:71:73:56:6f:
8d:17:d8:77:77:8d:6c:01:ad:0c:91:fc:73:9f:e0:
8e:01:00:9b:d8:1c:64:83:34:b5:2b:21:18:34:fd:
68:f6:3c:03:25:d1:9d:50:9a:57:54:b9:68:88:87:
ef:46:53:da:0d:ff:2d:64:10:ca:c0:38:08:27:b8:
fb:1f:21:8f:75:06:be:5b:98:42:a1:30:24:1d:0e:
37:a1:60:a4:81:7b:26:83:6e:60:70:27:f9:29:d5:
76:b0:1a:2b:7a:66:b0:51:5d:5e:ff:3e:41:2b:24:
6c:e8:cb:32:1d:8f:b3:2e:9b:fb:44:ae:30:2c:16:
ff:08:93:2b:fa:3c:30:97:25:b7:4f:ba:df:3e:79:
b4:e4:63:48:5d:78:a4:9f:15:d5:0f:67:91:f7:34:
cd:52:56:cf:6e:87:ff:38:04:d9:22:62:a8:c8:1d:
d2:c8:09:2f:2e:f3:43:fb:77:5d:42:7b:28:0c:59:
f2:dd:a9:a8:0b:df:fd:6d:03:10:d9:2b:db:70:f9:
7c:96:28:72:7a:c1:67:16:f5:ff:93:0c:d7:66:9a:
26:be:f9:2a:cd:3c:10:f9:fd:ce:87:f8:42:b4:7c:
74:63:b5:be:61:0a:f2:58:d1:9d:f0:d1:d7:8b:f6:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:79:AC:34:BF:69:2B:1C:79:93:DB:97:FA:DC:6D:05:35:E0:C2:7B
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:37:fa:c1:8e:5e:b1:23:65:4e:94:70:e3:4a:f7:d5:ed:a4:
ab:4c:a4:1b:e4:dd:7c:23:35:fb:b2:de:9c:54:e3:9f:08:a6:
1e:87:cd:d2:61:0e:9a:41:8b:f6:ba:e1:d4:dc:01:ff:a6:57:
29:e3:29:63:f1:8a:f3:c6:d2:12:6a:c4:7d:4f:62:3f:d6:bf:
e4:44:91:6f:9b:37:23:69:64:3c:a7:0a:ef:a1:dd:2a:27:e9:
9b:d0:12:02:e0:80:e6:94:42:f1:7c:b3:13:92:ee:7e:8f:74:
e8:ad:31:ec:d6:d2:f4:aa:47:31:2f:7b:d1:84:23:4e:06:57:
7e:96:3c:8f:21:d2:4c:01:8b:22:6e:68:5a:8b:ba:ee:d3:70:
4b:1e:ea:4c:d3:58:1e:72:04:3c:21:18:96:0e:fa:e3:14:0a:
e6:0e:a1:13:98:13:b4:91:29:13:45:14:45:72:1f:e9:c8:f7:
9a:4e:6e:5a:4d:8d:88:78:a0:ef:0a:79:b8:b7:be:cb:78:fe:
6d:c3:88:c5:35:50:ca:93:0a:f7:0b:2a:89:5d:b5:4c:57:8d:
86:87:00:4d:8a:ec:a4:c7:49:54:21:19:91:15:b7:56:db:ad:
07:9f:02:ed:cb:4d:99:4c:4e:db:ec:d7:05:b8:e2:a7:3a:ff:
68:92:bb:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdRdLFyfl3jKfDzxjWJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOWM0MWExMjM3NjRjZjdkYzBmMmRiOTg0MWY3MzJhM2I5
NjEzNDMwHhcNMjUwMTMxMTAwMDE1WhcNMjUwMjAxMTAwMDE1WjAzMTEwLwYDVQQD
Eyg3ZDc5YWMzNGJmNjkyYjFjNzk5M2RiOTdmYWRjNmQwNTM1ZTBjMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtY8mrn4l0zwd3FzVm+NF9h3d41s
Aa0Mkfxzn+COAQCb2BxkgzS1KyEYNP1o9jwDJdGdUJpXVLloiIfvRlPaDf8tZBDK
wDgIJ7j7HyGPdQa+W5hCoTAkHQ43oWCkgXsmg25gcCf5KdV2sBoremawUV1e/z5B
KyRs6MsyHY+zLpv7RK4wLBb/CJMr+jwwlyW3T7rfPnm05GNIXXiknxXVD2eR9zTN
UlbPbof/OATZImKoyB3SyAkvLvND+3ddQnsoDFny3amoC9/9bQMQ2SvbcPl8lihy
esFnFvX/kwzXZpomvvkqzTwQ+f3Oh/hCtHx0Y7W+YQryWNGd8NHXi/ZCYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH15rDS/aSsceZPbl/rcbQU14MJ7MB8GA1UdIwQY
MBaAFMycQaEjdkz33A8tuYQfcyo7lhNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUt
MDYyNDdhOTc4ZDY5LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUtMDYyNDdhOTc4ZDY5
LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTf6wY5e
sSNlTpRw40r31e2kq0ykG+TdfCM1+7LenFTjnwimHofN0mEOmkGL9rrh1NwB/6ZX
KeMpY/GK88bSEmrEfU9iP9a/5ESRb5s3I2lkPKcK76HdKifpm9ASAuCA5pRC8Xyz
E5Lufo906K0x7NbS9KpHMS970YQjTgZXfpY8jyHSTAGLIm5oWou67tNwSx7qTNNY
HnIEPCEYlg764xQK5g6hE5gTtJEpE0UURXIf6cj3mk5uWk2NiHig7wp5uLe+y3j+
bcOIxTVQypMK9wsqiV21TFeNhocATYrspMdJVCEZkRW3VtutB58C7ctNmUxO2+zX
Bbjipzr/aJK7Rg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:38 2025 by rpki-client