Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: SBlXvvjVq0Fjvum/2rWz7Gqvv6eCsKTDXGLSHa5SLTI=
Subject key identifier: 96:49:C2:61:CF:11:3C:B8:D2:0F:F0:DC:EC:7E:C8:6F:D0:EF:A9:CF
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 0194BC72BF91756184F81A3DC34761A38AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: ThExIzo5sInJDu4QtgSyRUIeQsjjAnCoXjVj+MUlg+A=)
2: eVvmAEAIedlVHCPd9SMP0Bncqxc.roa (hash: 4VuWPxpiNhIPFJNGqrNiqAkoBmgIxFNuRTiyh6Py9uk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bf:91:75:61:84:f8:1a:3d:c3:47:61:a3:8a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=9649c261cf113cb8d20ff0dcec7ec86fd0efa9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:0b:03:b9:96:98:6d:9e:20:c3:83:7c:c4:
73:aa:c1:87:84:ac:a4:5e:01:03:f2:70:14:f6:98:
71:20:e6:de:b4:e4:31:d4:f5:da:b7:1b:a2:bf:ad:
24:ca:66:d3:b1:ef:a8:ac:af:38:65:57:2c:97:03:
c1:0d:33:cf:a8:cd:84:03:07:02:29:5a:fe:02:0a:
15:f6:82:a4:84:13:83:d4:3c:75:5f:37:14:cf:b2:
4c:51:87:8c:28:30:32:ac:9a:14:6d:d4:8c:00:23:
66:5f:ae:07:e2:a2:8c:52:fb:b3:7e:92:0a:be:94:
d7:04:13:38:cf:0d:39:76:9f:56:47:50:1b:0c:17:
b0:cd:28:31:ab:ac:1c:8a:5b:51:96:92:91:b3:46:
6f:5a:06:cf:73:f0:bc:3b:2c:f8:76:54:b2:17:83:
7b:b8:4a:f3:ab:3c:fb:12:2a:73:25:5a:c6:36:a2:
9a:64:66:8c:be:c5:10:20:9d:c9:28:f8:1b:13:d8:
d2:b2:e3:d0:ab:dd:0e:05:cd:51:87:e6:6b:7e:78:
1f:a7:69:6a:93:5d:6e:b6:9b:09:04:96:7c:bd:1e:
1d:da:85:58:95:be:c4:a5:0d:5a:f0:c9:cf:91:d0:
7e:06:00:41:fb:2a:76:a5:c5:f5:8d:3f:7d:2a:24:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:C2:61:CF:11:3C:B8:D2:0F:F0:DC:EC:7E:C8:6F:D0:EF:A9:CF
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9b:00:88:f6:7e:c6:6c:12:c5:31:ab:b2:13:df:ee:a6:ec:
ba:cb:0a:55:97:3f:c7:a5:7e:1b:42:b4:04:08:36:9f:1f:39:
14:1b:7b:4c:e6:81:f3:6d:b9:b9:02:c5:de:43:ee:a9:3c:3a:
82:74:e1:dc:23:1d:cd:ae:6e:01:0e:af:de:af:d0:50:66:99:
3e:56:30:e3:21:fa:97:6f:bb:e3:bb:e2:2c:8d:a8:54:76:6f:
3e:c2:55:6b:e9:6b:8e:42:57:f0:51:12:3e:ca:c8:bf:c9:9f:
5f:50:71:5b:2b:9e:b9:5f:90:2f:66:b0:82:a9:6e:9c:b2:6d:
ba:03:1c:d1:14:db:f2:1b:b0:e8:be:6a:d6:2e:15:bd:ae:65:
3e:a5:5e:db:b5:63:12:c4:08:d1:9c:9b:e0:2b:2c:00:3f:93:
f3:67:76:e1:28:a8:08:3a:86:be:c0:1f:0d:0d:d8:9d:74:98:
ee:a8:1d:be:9b:d5:c5:81:0a:26:77:2e:aa:37:3b:fc:63:9d:
71:46:84:e6:fb:34:e3:03:53:37:b1:75:5a:a1:18:cd:a9:87:
72:b3:81:a9:f3:23:37:0b:f7:68:5e:2e:9c:54:94:f1:89:1c:
77:bb:d6:5e:ed:90:61:f8:9c:d3:c9:7a:a8:37:d6:e0:af:72:
a6:bb:c7:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cr+RdWGE+Bo9w0dho4r+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh
Yjc4NzYwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
Eyg5NjQ5YzI2MWNmMTEzY2I4ZDIwZmYwZGNlYzdlYzg2ZmQwZWZhOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqQLA7mWmG2eIMODfMRzqsGHhKyk
XgED8nAU9phxIObetOQx1PXatxuiv60kymbTse+orK84ZVcslwPBDTPPqM2EAwcC
KVr+AgoV9oKkhBOD1Dx1XzcUz7JMUYeMKDAyrJoUbdSMACNmX64H4qKMUvuzfpIK
vpTXBBM4zw05dp9WR1AbDBewzSgxq6wciltRlpKRs0ZvWgbPc/C8Oyz4dlSyF4N7
uErzqzz7EipzJVrGNqKaZGaMvsUQIJ3JKPgbE9jSsuPQq90OBc1Rh+Zrfngfp2lq
k11utpsJBJZ8vR4d2oVYlb7EpQ1a8MnPkdB+BgBB+yp2pcX1jT99KiSJBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZJwmHPETy40g/w3Ox+yG/Q76nPMB8GA1UdIwQY
MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt
MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx
LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5sAiPZ+
xmwSxTGrshPf7qbsussKVZc/x6V+G0K0BAg2nx85FBt7TOaB8225uQLF3kPuqTw6
gnTh3CMdza5uAQ6v3q/QUGaZPlYw4yH6l2+747viLI2oVHZvPsJVa+lrjkJX8FES
PsrIv8mfX1BxWyueuV+QL2awgqlunLJtugMc0RTb8huw6L5q1i4Vva5lPqVe27Vj
EsQI0Zyb4CssAD+T82d24SioCDqGvsAfDQ3YnXSY7qgdvpvVxYEKJncuqjc7/GOd
cUaE5vs04wNTN7F1WqEYzamHcrOBqfMjNwv3aF4unFSU8Ykcd7vWXu2QYfic08l6
qDfW4K9yprvHAw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:22 2025 by rpki-client