Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: Yjb05hVaLysFSw/1zZtpDjehPCwIchrKdQvtJS4avFI=
Subject key identifier: B8:13:24:C8:B2:75:8F:85:0F:20:24:8D:4A:C4:53:8E:67:D8:FB:CF
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 0194BBCDC52AB147CBE093647E0D7A8175E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 0B14
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: NDngy/IhzVPsRT4sqN7WtH588srnBMj33MXSVF4W+kY=)
2: g-_eT5ct7bDp65zymgf5llHzTKc.roa (hash: 6qrqxL/Wtd1D30D40m2/VyQoFXL4FQNDdMtRsZ56brc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c5:2a:b1:47:cb:e0:93:64:7e:0d:7a:81:75:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=b81324c8b2758f850f20248d4ac4538e67d8fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:93:d0:82:03:57:dd:c4:d5:f6:d0:4b:78:
dd:d7:0b:81:35:bc:9e:41:ab:e4:03:c6:f2:51:84:
27:4d:36:3f:70:c6:e7:5a:1c:a4:27:da:8a:ff:47:
e3:a3:b7:07:be:4f:ef:9e:a9:62:a9:c7:b1:df:e1:
ef:53:cb:41:2f:6f:9e:c4:95:86:58:da:1a:79:b0:
6f:a4:bd:19:9c:a6:6b:1c:02:14:e4:2e:5e:f8:68:
69:68:e8:d8:92:e5:35:cd:31:b2:2e:1d:d0:ff:73:
5c:5a:db:f2:53:95:bd:26:2b:4c:43:1f:05:f8:ff:
ac:fb:c1:86:39:0c:a0:fb:55:47:71:af:14:78:00:
37:71:80:71:97:3e:b4:11:e8:a1:cc:bb:0b:bb:03:
70:41:ba:89:b0:68:ac:21:51:f3:94:0b:7b:70:f1:
ad:06:b3:ed:3b:81:bd:91:7a:4f:11:f6:99:b8:70:
d0:12:70:ed:c4:b6:b8:02:37:c1:fe:42:9a:3e:b4:
50:30:09:3b:e1:41:32:01:07:c8:75:5c:c7:f1:1f:
a6:2f:fe:f3:75:dd:98:47:d1:5f:e4:71:20:4f:14:
e9:99:0d:09:90:6c:76:ed:c9:6d:d0:e5:7a:24:bd:
e3:0e:f6:1e:e4:79:f5:02:23:bc:d0:6c:a1:31:ee:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:24:C8:B2:75:8F:85:0F:20:24:8D:4A:C4:53:8E:67:D8:FB:CF
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:1d:44:1f:71:c2:ae:68:18:dc:ae:9f:f8:c8:2d:0a:6f:
c7:13:e9:0a:55:a1:8c:df:73:95:82:b0:18:81:dd:1c:ad:89:
20:d0:ac:f6:78:eb:d3:d3:46:44:58:16:17:26:04:cf:84:f9:
4e:77:ca:38:ce:b0:c0:af:0d:00:db:03:03:23:84:b4:95:ab:
2a:dc:9d:45:1b:80:3e:e6:5a:11:4c:6f:79:6e:5e:a4:83:d7:
04:70:7f:01:6c:b1:21:e8:45:2c:5b:06:55:fb:79:02:53:cb:
63:4e:21:3d:ac:cc:85:60:7c:86:b6:ed:da:00:50:83:19:d4:
7b:ab:cd:68:c9:9d:76:70:da:d3:ff:4e:31:db:30:a9:4f:ab:
44:5d:e8:83:0d:4a:30:1c:ce:74:ca:bb:97:33:8f:c2:01:73:
74:ca:64:1e:f4:83:e6:66:8d:7b:2c:8f:ce:c7:0a:31:6c:2f:
63:19:2b:05:c7:3c:3e:f6:29:60:b3:e4:76:52:2b:02:f6:c9:
ec:d0:51:a9:17:68:a0:48:a9:a1:d5:f2:df:cb:ad:86:25:76:
d7:3c:50:0b:e6:ed:45:bb:5e:b0:52:e6:40:23:b5:03:eb:db:
35:a8:1e:8d:ba:72:fd:89:cb:17:1d:6f:9b:dc:5a:38:94:ad:
2e:05:32:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcUqsUfL4JNkfg16gXXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGVjNTMwNjgzOTNkOTBkYjYwMWVjMjk1ZTQyOTA4NTI1
ZTEwYzIwHhcNMjUwMTMxMTAwMDEyWhcNMjUwMjAxMTAwMDEyWjAzMTEwLwYDVQQD
EyhiODEzMjRjOGIyNzU4Zjg1MGYyMDI0OGQ0YWM0NTM4ZTY3ZDhmYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o2T0IIDV93E1fbQS3jd1wuBNbye
QavkA8byUYQnTTY/cMbnWhykJ9qK/0fjo7cHvk/vnqliqcex3+HvU8tBL2+exJWG
WNoaebBvpL0ZnKZrHAIU5C5e+GhpaOjYkuU1zTGyLh3Q/3NcWtvyU5W9JitMQx8F
+P+s+8GGOQyg+1VHca8UeAA3cYBxlz60EeihzLsLuwNwQbqJsGisIVHzlAt7cPGt
BrPtO4G9kXpPEfaZuHDQEnDtxLa4AjfB/kKaPrRQMAk74UEyAQfIdVzH8R+mL/7z
dd2YR9Ff5HEgTxTpmQ0JkGx27clt0OV6JL3jDvYe5Hn1AiO80GyhMe5xUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgTJMiydY+FDyAkjUrEU45n2PvPMB8GA1UdIwQY
MBaAFGcOxTBoOT2Q22AewpXkKQhSXhDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEt
NzNkMjE4YTQ5MDNlLzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEtNzNkMjE4YTQ5MDNl
LzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirQdRB9x
wq5oGNyun/jILQpvxxPpClWhjN9zlYKwGIHdHK2JINCs9njr09NGRFgWFyYEz4T5
TnfKOM6wwK8NANsDAyOEtJWrKtydRRuAPuZaEUxveW5epIPXBHB/AWyxIehFLFsG
Vft5AlPLY04hPazMhWB8hrbt2gBQgxnUe6vNaMmddnDa0/9OMdswqU+rRF3ogw1K
MBzOdMq7lzOPwgFzdMpkHvSD5maNeyyPzscKMWwvYxkrBcc8PvYpYLPkdlIrAvbJ
7NBRqRdooEipodXy38uthiV21zxQC+btRbtesFLmQCO1A+vbNagejbpy/YnLFx1v
m9xaOJStLgUyZA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:09 2025 by rpki-client