Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: 9riR295QDvMNtov08AEVPJUPLzhnQjI4WRWTnURb4Yw=
Subject key identifier: 8F:0D:68:C4:C0:59:92:34:A3:C5:01:4E:D5:D5:17:BA:36:06:CF:08
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 0194BCA9F97645BED8236A71C599C790F4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0B91
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: /C3OnW5Z+FC6ymx8tCTiy0AAtnFWlrPYqtZTobf/tlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f9:76:45:be:d8:23:6a:71:c5:99:c7:90:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=8f0d68c4c0599234a3c5014ed5d517ba3606cf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:c0:fe:4c:2c:57:75:10:44:76:66:53:02:
31:34:2f:30:09:2a:82:6b:48:64:0a:f8:a1:00:ed:
27:90:97:8b:e2:94:4e:2d:55:f1:e1:26:65:54:73:
8c:f4:4e:f3:68:0b:1e:f2:61:ae:a5:12:72:b4:2d:
fe:6e:6a:22:4b:2d:6f:23:83:60:95:33:12:53:75:
f4:87:20:d7:60:de:16:fc:5d:cf:db:db:28:8e:bd:
a3:cc:3c:ab:21:81:ca:3f:5e:c9:ed:71:80:81:d1:
93:6c:8a:d5:be:43:17:ee:c6:85:0f:36:86:d9:84:
e7:b5:be:31:5f:85:a7:f2:f6:bc:ac:fb:e1:12:57:
b1:3f:68:53:be:ad:22:d4:82:7c:13:ad:b1:3f:e8:
0f:b1:9d:46:fa:26:b0:0d:2a:d0:2c:04:fc:5c:93:
99:25:f9:87:ca:09:ac:89:f7:d2:a8:be:11:63:ee:
fa:61:50:ee:fa:43:6e:98:26:2f:f5:50:60:b1:8a:
79:4a:34:d6:64:3e:7e:42:c0:1b:19:40:26:69:a4:
06:81:8f:a5:80:f2:ce:be:6b:53:bf:dc:ca:af:ba:
41:7c:e0:5e:59:91:3b:45:50:ed:22:ab:82:7a:41:
c6:25:51:f7:be:bc:d5:0b:2c:29:de:dc:5e:7d:6d:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:68:C4:C0:59:92:34:A3:C5:01:4E:D5:D5:17:BA:36:06:CF:08
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:52:08:0d:42:aa:de:b0:f3:44:fe:dc:ce:e8:4d:7c:3b:23:
84:57:f7:a2:61:4d:cc:0b:e2:28:65:52:1f:2a:d7:9c:0a:25:
db:d2:75:6f:a6:c4:e8:35:86:b3:ef:fa:b2:f3:95:a7:03:e8:
9a:5a:6d:a7:8b:8d:34:05:33:96:c9:b8:8c:61:d4:ed:d5:80:
76:24:f3:a9:d7:2b:a9:98:b7:a9:b0:9c:d9:cd:55:46:35:2d:
88:0b:6a:fb:04:cb:b6:72:9e:e7:aa:99:61:97:7d:b1:6a:79:
f1:ef:41:13:25:6f:0c:b9:a4:19:b4:c8:b7:a0:19:07:d4:5e:
3d:80:b4:db:57:a3:f0:aa:41:de:a2:26:6c:8f:cd:b1:75:eb:
ef:f9:f9:0e:c3:f2:a1:01:c7:1d:2a:fc:35:bc:4d:11:cc:68:
03:0f:cd:6b:ee:8e:87:cc:a2:25:51:6d:31:ad:c8:b3:8f:57:
29:0b:54:04:81:31:65:3b:99:68:72:1c:db:ab:1d:80:f1:af:
eb:bf:09:e3:b6:48:16:d1:0d:dd:9f:13:44:e7:57:89:40:63:
08:ea:3c:a8:9a:dd:e4:a2:72:59:a0:da:21:ad:ef:b0:4f:d6:
2e:6b:db:9a:61:48:5f:09:eb:24:c9:8d:1b:84:06:44:70:fd:
f7:2b:73:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfl2Rb7YI2pxxZnHkPS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2I0ZjZjZDg0ODlmZGRkMTczOTcwYTBlZjQ0ZDRlMTU0
N2E0MDUwHhcNMjUwMTMxMTQwMDQzWhcNMjUwMjAxMTQwMDQzWjAzMTEwLwYDVQQD
Eyg4ZjBkNjhjNGMwNTk5MjM0YTNjNTAxNGVkNWQ1MTdiYTM2MDZjZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz7A/kwsV3UQRHZmUwIxNC8wCSqC
a0hkCvihAO0nkJeL4pROLVXx4SZlVHOM9E7zaAse8mGupRJytC3+bmoiSy1vI4Ng
lTMSU3X0hyDXYN4W/F3P29sojr2jzDyrIYHKP17J7XGAgdGTbIrVvkMX7saFDzaG
2YTntb4xX4Wn8va8rPvhElexP2hTvq0i1IJ8E62xP+gPsZ1G+iawDSrQLAT8XJOZ
JfmHygmsiffSqL4RY+76YVDu+kNumCYv9VBgsYp5SjTWZD5+QsAbGUAmaaQGgY+l
gPLOvmtTv9zKr7pBfOBeWZE7RVDtIquCekHGJVH3vrzVCywp3txefW1W8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8NaMTAWZI0o8UBTtXVF7o2Bs8IMB8GA1UdIwQY
MBaAFGXLT2zYSJ/d0XOXCg70TU4VR6QFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2It
MDgyZDkyNGMyZjMzLzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2ItMDgyZDkyNGMyZjMz
LzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1IIDUKq
3rDzRP7czuhNfDsjhFf3omFNzAviKGVSHyrXnAol29J1b6bE6DWGs+/6svOVpwPo
mlptp4uNNAUzlsm4jGHU7dWAdiTzqdcrqZi3qbCc2c1VRjUtiAtq+wTLtnKe56qZ
YZd9sWp58e9BEyVvDLmkGbTIt6AZB9RePYC021ej8KpB3qImbI/NsXXr7/n5DsPy
oQHHHSr8NbxNEcxoAw/Na+6Oh8yiJVFtMa3Is49XKQtUBIExZTuZaHIc26sdgPGv
678J47ZIFtEN3Z8TROdXiUBjCOo8qJrd5KJyWaDaIa3vsE/WLmvbmmFIXwnrJMmN
G4QGRHD99ytzLw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:40 2025 by rpki-client