Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: BcZ1AP5GORRnZZfK8SHDHUDwHKufFoGK0XikQJ8FX88=
Subject key identifier: E6:61:F5:EF:02:E7:AF:E6:B8:22:80:41:0F:9C:CC:F6:BA:A5:4C:64
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 0194BBCECC10CA8A6C86024D0E1C0383BB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0DB7
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: qoT/Z4eCucbKtepA9dx53hwXY1flEtDVvIcDJ91W70Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cc:10:ca:8a:6c:86:02:4d:0e:1c:03:83:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=e661f5ef02e7afe6b82280410f9cccf6baa54c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:97:4a:d1:0f:6b:1e:e7:d6:f5:f9:36:16:
68:10:82:95:1d:12:d1:e4:4f:10:e7:49:d0:04:c1:
d9:98:7f:42:f0:88:03:ae:41:e6:11:e4:db:81:eb:
29:71:e7:ac:c4:b4:6e:85:d1:7b:d5:1f:39:bb:e9:
aa:67:cd:43:ba:05:f5:ea:42:ef:3a:b9:a7:80:4e:
7a:1b:a8:7d:20:62:8f:2b:65:98:05:84:25:19:64:
6b:79:75:dc:a0:92:d9:8c:24:b6:4b:83:29:5c:30:
50:2d:2d:0e:cd:7d:6a:71:ce:27:4c:29:d1:15:72:
7e:4a:cc:d6:09:42:8d:db:b2:b2:af:50:32:a6:84:
f0:1f:7a:2e:d7:1e:d2:28:ba:f7:59:a3:14:0c:1c:
89:e6:94:35:d0:02:46:59:d0:9b:00:82:29:3f:bf:
af:43:6c:0d:66:9c:12:17:df:c7:30:3f:66:9f:ee:
f7:03:a0:1c:ad:b8:11:b9:87:c8:b3:15:14:8e:0d:
47:00:fc:da:a8:54:1d:f2:2d:dd:99:9b:b4:bf:fc:
29:e9:41:2f:58:3a:ae:0c:af:f0:3a:f4:16:37:a5:
51:05:a8:9b:e1:bd:b8:56:11:09:eb:ad:16:5b:40:
5b:5c:64:da:31:31:1d:52:5d:3d:58:e9:09:3c:28:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:61:F5:EF:02:E7:AF:E6:B8:22:80:41:0F:9C:CC:F6:BA:A5:4C:64
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1c:c0:72:a0:05:8b:8d:b0:be:d8:66:ca:e4:a7:a1:3b:46:
f5:4a:38:38:e6:44:21:38:f0:e8:6c:fe:2e:b3:34:a1:f4:e0:
55:74:de:38:21:05:47:4b:a0:79:b8:45:d7:a6:79:01:f6:22:
bd:d6:ab:d5:8b:79:23:d2:23:cb:7f:eb:4c:5f:4b:c2:20:56:
75:ed:7a:c9:96:ba:80:e4:14:72:d1:dc:03:da:10:9b:39:47:
04:fc:bf:5d:14:df:fe:e5:ab:2a:7f:0e:bb:ad:1e:89:38:03:
5d:3c:ae:0f:76:73:91:0c:02:b5:de:81:a2:43:49:50:5e:da:
c4:be:1c:22:36:17:9d:bf:03:cb:cd:03:c8:35:1f:87:28:65:
d5:27:f1:23:1f:6b:76:5d:24:ae:03:5e:2f:ad:d3:7a:0d:bd:
fe:11:35:08:21:f4:42:4f:d2:07:b6:9d:9b:69:74:65:40:7f:
79:f2:13:5c:55:52:02:f3:cd:d3:d5:84:d5:c6:87:cf:74:20:
c6:99:2c:4e:a4:38:a0:35:d3:3c:97:8c:b9:08:07:97:92:06:
7a:50:ff:ff:76:03:fa:40:cc:c5:fd:d8:71:45:b0:c0:9e:02:
ee:86:12:1a:0d:15:71:99:ca:c0:85:24:18:8e:dc:cf:fb:a4:
9b:2f:10:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zswQyopshgJNDhwDg7s0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZmY5NGQzOTExZDA0NGE3NjYxODZkNzZhYTRhMDkxMzZk
ODlkN2MwHhcNMjUwMTMxMTAwMTE5WhcNMjUwMjAxMTAwMTE5WjAzMTEwLwYDVQQD
EyhlNjYxZjVlZjAyZTdhZmU2YjgyMjgwNDEwZjljY2NmNmJhYTU0YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuryXStEPax7n1vX5NhZoEIKVHRLR
5E8Q50nQBMHZmH9C8IgDrkHmEeTbgespceesxLRuhdF71R85u+mqZ81DugX16kLv
OrmngE56G6h9IGKPK2WYBYQlGWRreXXcoJLZjCS2S4MpXDBQLS0OzX1qcc4nTCnR
FXJ+SszWCUKN27Kyr1AypoTwH3ou1x7SKLr3WaMUDByJ5pQ10AJGWdCbAIIpP7+v
Q2wNZpwSF9/HMD9mn+73A6AcrbgRuYfIsxUUjg1HAPzaqFQd8i3dmZu0v/wp6UEv
WDquDK/wOvQWN6VRBaib4b24VhEJ660WW0BbXGTaMTEdUl09WOkJPCjgSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZh9e8C56/muCKAQQ+czPa6pUxkMB8GA1UdIwQY
MBaAFM//lNORHQRKdmGG12qkoJE22J18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel8tVTA1RWRCRXAyWVliWGFxU2drVGJZblh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85NTg2YzEtMDUzYy00MzVmLWJhMGIt
ZTk1YWUyZDE0M2FkLzEvel8tVTA1RWRCRXAyWVliWGFxU2drVGJZblh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS85NTg2YzEtMDUzYy00MzVmLWJhMGItZTk1YWUyZDE0M2Fk
LzEvel8tVTA1RWRCRXAyWVliWGFxU2drVGJZblh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRzAcqAF
i42wvthmyuSnoTtG9Uo4OOZEITjw6Gz+LrM0ofTgVXTeOCEFR0ugebhF16Z5AfYi
vdar1Yt5I9Ijy3/rTF9LwiBWde16yZa6gOQUctHcA9oQmzlHBPy/XRTf/uWrKn8O
u60eiTgDXTyuD3ZzkQwCtd6BokNJUF7axL4cIjYXnb8Dy80DyDUfhyhl1SfxIx9r
dl0krgNeL63Teg29/hE1CCH0Qk/SB7adm2l0ZUB/efITXFVSAvPN09WE1caHz3Qg
xpksTqQ4oDXTPJeMuQgHl5IGelD//3YD+kDMxf3YcUWwwJ4C7oYSGg0VcZnKwIUk
GI7cz/ukmy8QBA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:22 2025 by rpki-client