Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: QFSCy4mam9KuEt1haC3vf0tziwrsVigmZTATQwc7+1c=
Subject key identifier: 4B:AF:13:BD:D9:7E:31:0F:B6:69:3D:4E:9F:0E:58:A0:37:7C:33:8E
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 0194BBCE2425EBC64BD093985F2706F5EE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 0BB4
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: I3z+9NdSyhXsS0BPlzYg88VPAGVejWwEE1+Xcf/25S4=)
3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:25:eb:c6:4b:d0:93:98:5f:27:06:f5:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=4baf13bdd97e310fb6693d4e9f0e58a0377c338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:8f:61:36:30:97:98:7e:80:1c:6e:ec:1d:
80:80:47:9f:f3:1c:92:47:c8:93:4b:2e:5d:19:f1:
8a:cb:47:4d:74:80:17:d5:3e:cc:07:85:c7:91:d8:
08:85:b0:31:0c:3a:9d:48:fc:16:71:32:a9:47:8a:
35:c1:81:a4:41:e8:73:8c:81:3a:15:e9:7f:7a:90:
fd:5e:28:52:9b:0e:d1:af:1c:f3:d1:bb:5c:cb:54:
b1:7b:bf:aa:b5:fd:98:74:ef:d6:96:51:72:b9:93:
8a:cc:99:99:29:0c:37:f2:03:2f:54:e9:5a:90:26:
dd:c7:7d:21:5b:29:02:29:d3:ba:28:9f:71:ba:4c:
11:45:2e:72:70:f6:b9:f6:76:56:da:10:e0:99:78:
cb:f1:19:b0:fd:e2:0a:16:2c:ba:b4:8f:58:b1:30:
37:8d:2c:bb:bb:fe:47:e5:0d:0c:ff:60:a0:92:cb:
c7:c4:dc:41:ae:53:77:88:5b:b9:f6:1a:46:84:f3:
1f:ff:e1:4d:a3:4e:15:e0:80:03:4d:f0:5f:73:a0:
70:f2:6f:05:ca:76:c1:47:13:67:6a:57:2a:4e:f5:
b0:8f:25:1a:32:ac:6b:24:49:b9:20:8e:97:de:7f:
4e:b5:95:e4:01:b6:4e:bd:a2:ca:70:d5:e5:67:60:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AF:13:BD:D9:7E:31:0F:B6:69:3D:4E:9F:0E:58:A0:37:7C:33:8E
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:01:5e:f1:72:e8:f9:8d:1e:3c:c9:99:29:59:9f:44:f0:53:
69:ba:fd:eb:cf:84:ba:5a:64:2b:22:fb:18:a9:5e:db:5a:9a:
db:d9:18:e5:88:b4:cc:09:d6:f7:aa:09:d1:03:f1:bc:48:ed:
2c:af:22:df:b7:df:98:c1:b5:9a:70:68:9d:99:ca:30:9a:55:
5b:1d:a9:ba:24:e3:a4:31:f3:b3:c3:a8:a6:5d:10:c7:9c:2b:
c4:f9:d2:2e:61:8e:75:63:ef:db:d7:b5:72:5b:a6:f1:b3:56:
3c:dc:00:1b:1b:61:73:2c:c5:1e:be:6f:a3:0f:34:a0:2f:7d:
89:23:e8:17:19:52:2e:88:bc:d6:4c:5d:64:37:08:ca:c3:31:
ab:b3:c9:12:ad:a2:10:4e:9e:80:51:63:11:5b:1a:06:be:2a:
54:cf:81:1a:17:34:00:d6:2b:de:5c:2c:5f:01:89:e5:90:0f:
2a:48:38:cb:75:a2:4e:49:57:24:b3:15:ca:89:4b:2e:bb:90:
f3:d0:65:1f:04:c6:bd:b0:a0:f7:02:e5:9f:a4:af:d1:23:51:
ac:ab:be:7a:74:53:b0:ae:26:4d:b5:c9:52:46:e9:3e:f9:63:
82:1f:23:d5:59:fd:19:69:4f:d9:3f:4d:3e:a9:9e:fd:13:ba:
fe:c8:0c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziQl68ZL0JOYXycG9e55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OGMwYzQ5OWE4ZTY5ZDk3OTVmNGJkMGI1YmYxNjgyYjFm
MDBmOWEwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
Eyg0YmFmMTNiZGQ5N2UzMTBmYjY2OTNkNGU5ZjBlNThhMDM3N2MzMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/SPYTYwl5h+gBxu7B2AgEef8xyS
R8iTSy5dGfGKy0dNdIAX1T7MB4XHkdgIhbAxDDqdSPwWcTKpR4o1wYGkQehzjIE6
Fel/epD9XihSmw7Rrxzz0btcy1Sxe7+qtf2YdO/WllFyuZOKzJmZKQw38gMvVOla
kCbdx30hWykCKdO6KJ9xukwRRS5ycPa59nZW2hDgmXjL8Rmw/eIKFiy6tI9YsTA3
jSy7u/5H5Q0M/2CgksvHxNxBrlN3iFu59hpGhPMf/+FNo04V4IADTfBfc6Bw8m8F
ynbBRxNnalcqTvWwjyUaMqxrJEm5II6X3n9OtZXkAbZOvaLKcNXlZ2BnvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuvE73ZfjEPtmk9Tp8OWKA3fDOOMB8GA1UdIwQY
MBaAFGWMDEmajmnZeV9L0LW/FoKx8A+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWll3TVNacU9hZGw1WDB2UXRiOFdnckh3RDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNjY5MTMtOGY1Zi00N2VmLWE3MzAt
MzJjMWIyY2VlNTkzLzEvWll3TVNacU9hZGw1WDB2UXRiOFdnckh3RDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNjY5MTMtOGY1Zi00N2VmLWE3MzAtMzJjMWIyY2VlNTkz
LzEvWll3TVNacU9hZGw1WDB2UXRiOFdnckh3RDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgFe8XLo
+Y0ePMmZKVmfRPBTabr968+EulpkKyL7GKle21qa29kY5Yi0zAnW96oJ0QPxvEjt
LK8i37ffmMG1mnBonZnKMJpVWx2puiTjpDHzs8Oopl0Qx5wrxPnSLmGOdWPv29e1
clum8bNWPNwAGxthcyzFHr5vow80oC99iSPoFxlSLoi81kxdZDcIysMxq7PJEq2i
EE6egFFjEVsaBr4qVM+BGhc0ANYr3lwsXwGJ5ZAPKkg4y3WiTklXJLMVyolLLruQ
89BlHwTGvbCg9wLln6Sv0SNRrKu+enRTsK4mTbXJUkbpPvljgh8j1Vn9GWlP2T9N
Pqme/RO6/sgMOw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:13 2025 by rpki-client