Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: YAdzOxedS+hrlCG6jjBu9B8Sf0Luk8GDh+2lR1RMG04=
Subject key identifier: 60:5E:6F:AA:0A:E6:BF:9D:A8:8C:AA:C5:6B:83:37:6E:5F:66:23:61
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 0194BC3C0A029CE5BAAE691021F9F8001DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 0597
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: 61Gq7F9HDY76tR6eiEQWqVAvCDc.roa (hash: UnYiE/hrC17fToVR4tEZHFP7UPTNmsiE/lDxvNs6zSU=)
2: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: ossihpPOOFUEfhOpnQlzP1lLe/G1i242n3oRhhE/ElQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:02:9c:e5:ba:ae:69:10:21:f9:f8:00:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=605e6faa0ae6bf9da88caac56b83376e5f662361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:36:3d:91:ae:b6:a5:b8:29:88:80:19:61:
80:7c:23:bc:89:dc:49:16:25:3f:be:6b:84:d8:43:
f5:2d:7a:fa:bf:f1:38:54:ae:17:55:a7:ed:fc:6a:
1a:7a:bb:e2:8a:ce:b3:06:07:ee:9f:a2:cb:29:fe:
69:82:b3:2a:84:32:54:33:77:e0:56:9b:08:03:bb:
45:13:79:50:7f:df:ba:4d:cb:dd:40:f1:0f:02:31:
32:49:6e:60:b5:18:77:ef:bc:cc:27:dd:a1:30:33:
81:e2:94:d6:93:55:82:49:cd:20:af:04:5c:b7:3e:
3a:af:ad:b6:52:ec:94:b9:27:6b:23:48:97:34:54:
c0:1b:20:64:c7:08:59:8d:cc:5d:09:20:32:f8:85:
4d:b7:dd:32:b4:a3:ac:e5:88:2f:7a:5d:d4:71:a4:
74:b9:09:48:93:c2:32:b7:f9:36:51:81:2a:fb:e6:
e2:16:9c:b6:8a:73:86:3f:f3:c1:5d:5f:4a:b4:52:
27:f9:f2:b2:19:d4:79:b1:d9:68:ca:be:8d:39:bb:
e9:f6:c4:3e:63:67:ab:dc:4e:d2:ea:79:da:ff:29:
c6:33:bc:7e:94:3a:8b:85:b0:54:76:d9:e1:0b:4d:
bd:dd:cc:22:a8:66:99:06:92:72:a7:3e:b2:6a:2b:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:6F:AA:0A:E6:BF:9D:A8:8C:AA:C5:6B:83:37:6E:5F:66:23:61
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a7:a2:2e:a8:0e:7d:1c:05:1f:c0:bf:79:cf:6d:b2:80:97:
4a:be:f3:50:ee:b4:14:f8:f6:18:96:26:dc:58:77:af:b6:6b:
6a:12:96:24:d0:9d:97:50:10:1b:4f:a8:0e:ff:58:f9:81:79:
2c:f6:c3:58:06:fb:bc:bc:77:72:96:29:ac:25:34:a8:d2:50:
11:b9:24:9b:d4:b3:66:be:c5:2b:99:92:c3:b2:ca:66:68:e0:
dc:3a:4d:59:eb:88:8a:68:49:fc:d9:c6:0b:b5:e1:e7:1b:bb:
b6:ed:33:2d:89:87:c1:ee:6a:35:7d:44:c1:d4:c7:83:16:ee:
44:bc:14:28:90:d2:e8:d3:c7:03:95:2f:27:14:08:06:ba:53:
40:19:5a:61:6e:77:3d:31:09:93:cb:12:1b:5a:69:2f:41:5b:
23:8f:b7:30:d8:70:25:c2:66:03:d0:ff:39:55:d7:8e:92:c7:
30:67:04:b1:3b:03:3b:1c:9e:90:cc:a3:b1:7f:02:23:e9:90:
a2:c8:53:fe:8e:92:c3:e9:ec:5a:84:59:c2:ac:88:d1:8d:0d:
1a:90:f9:5e:58:4e:7d:f0:b5:c6:5f:dc:d7:46:ec:66:88:da:
bc:57:21:fb:78:93:f2:39:a5:3d:fb:90:f6:c3:46:b8:15:e5:
93:cb:f1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAoCnOW6rmkQIfn4AB3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0
YjI5ZDcwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
Eyg2MDVlNmZhYTBhZTZiZjlkYTg4Y2FhYzU2YjgzMzc2ZTVmNjYyMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL42PZGutqW4KYiAGWGAfCO8idxJ
FiU/vmuE2EP1LXr6v/E4VK4XVaft/Goaerviis6zBgfun6LLKf5pgrMqhDJUM3fg
VpsIA7tFE3lQf9+6TcvdQPEPAjEySW5gtRh377zMJ92hMDOB4pTWk1WCSc0grwRc
tz46r622UuyUuSdrI0iXNFTAGyBkxwhZjcxdCSAy+IVNt90ytKOs5Ygvel3UcaR0
uQlIk8Iyt/k2UYEq++biFpy2inOGP/PBXV9KtFIn+fKyGdR5sdloyr6NObvp9sQ+
Y2er3E7S6nna/ynGM7x+lDqLhbBUdtnhC0293cwiqGaZBpJypz6yaivrWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBeb6oK5r+dqIyqxWuDN25fZiNhMB8GA1UdIwQY
MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt
NWU4MjJmMzEwNjM4LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4
LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqeiLqgO
fRwFH8C/ec9tsoCXSr7zUO60FPj2GJYm3Fh3r7ZrahKWJNCdl1AQG0+oDv9Y+YF5
LPbDWAb7vLx3cpYprCU0qNJQEbkkm9SzZr7FK5mSw7LKZmjg3DpNWeuIimhJ/NnG
C7Xh5xu7tu0zLYmHwe5qNX1EwdTHgxbuRLwUKJDS6NPHA5UvJxQIBrpTQBlaYW53
PTEJk8sSG1ppL0FbI4+3MNhwJcJmA9D/OVXXjpLHMGcEsTsDOxyekMyjsX8CI+mQ
oshT/o6Sw+nsWoRZwqyI0Y0NGpD5XlhOffC1xl/c10bsZojavFch+3iT8jmlPfuQ
9sNGuBXlk8vxaw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:11 2025 by rpki-client