Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: PzHLqqh6K6LMhvgADfMLGiyHc7IXlXZhQPSJGlYVbpc=
Subject key identifier: 03:64:30:88:21:B1:5C:93:6E:8B:C1:AC:85:1D:4E:C5:44:F8:06:FA
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 0194BC3CA287509FE836223769293724DCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: 6Z0VCSa4wdIONOzTJcUBmDKeXYL1L+aN++te0vC7Rog=)
2: mVTx8X7zW9-jF_MuhkLfqeZLvKg.roa (hash: tYbEebrUyUiI4ejPIzbtFxeT7l12ooRdzaX7lTItoII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:87:50:9f:e8:36:22:37:69:29:37:24:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=0364308821b15c936e8bc1ac851d4ec544f806fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:23:64:a5:2d:3d:61:23:0a:9b:3f:a8:39:
4d:c0:c8:0e:16:17:ca:01:00:cb:c4:88:9e:c6:cf:
d5:c6:d4:18:67:c0:09:e0:f1:f9:f1:d2:04:93:b9:
1a:6e:d8:e0:07:c7:ab:53:7a:60:fc:0c:06:84:31:
5e:d1:6a:9c:e4:84:c4:7b:23:5c:05:0e:97:49:bf:
0d:76:5a:68:c1:4a:43:18:7a:02:ab:01:84:73:b7:
b0:0b:e6:8b:9e:3a:6a:7e:79:37:da:5c:0a:1f:82:
4d:8a:6c:2b:a8:4d:4a:b4:e4:d8:b1:a5:e3:94:2f:
3c:41:d8:09:7b:7c:0d:ed:09:4e:14:b4:fc:7c:d2:
40:51:17:49:79:a4:9b:44:88:ab:74:e0:9b:f2:a2:
b0:5d:c0:0c:7e:6e:7a:bd:3f:70:2d:41:c7:fe:95:
a6:b5:0d:1e:46:cf:ab:01:c8:2b:5d:7f:03:b6:13:
ff:00:ad:ad:7d:8c:f0:bc:04:96:1e:b7:06:cd:64:
9b:61:13:7c:58:a3:21:79:95:02:50:61:34:72:10:
56:c5:73:c5:37:99:aa:ee:71:9d:cc:85:41:ee:c6:
38:53:38:3a:ef:75:87:29:61:2a:a2:84:9c:ec:84:
2c:a0:2b:bb:43:bc:41:3b:11:4b:4e:e2:86:51:db:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:30:88:21:B1:5C:93:6E:8B:C1:AC:85:1D:4E:C5:44:F8:06:FA
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:8e:51:64:3c:10:66:76:4b:ec:3b:68:2e:84:27:80:89:
a2:8f:98:92:f3:79:08:85:19:ef:1a:5a:b0:06:4e:c5:71:da:
44:58:8d:52:1d:6b:5c:96:d8:0b:81:a7:db:87:0a:39:7d:ec:
10:a0:c5:1c:e4:11:59:6f:d3:50:e1:f3:cc:c0:2a:a9:cd:12:
1d:2f:c4:02:4d:68:ae:a6:74:a2:9a:05:1b:2c:dc:bc:97:55:
45:62:05:c5:11:c6:9e:c6:31:da:b9:df:23:20:85:51:7f:c1:
94:b8:7b:49:a5:e0:92:51:28:27:4b:93:72:0f:52:b0:03:9d:
eb:55:75:e0:c6:12:31:cb:01:0e:5b:67:15:1c:3f:54:cf:fe:
88:d8:af:9c:1b:f6:ae:36:d2:40:4f:48:61:5e:19:c7:02:5f:
46:c5:3a:d7:d9:d4:12:07:62:a8:5e:2b:92:05:a6:94:ca:b8:
aa:2a:58:6a:3e:58:c0:ce:77:b6:b7:24:b9:fb:28:5e:c5:53:
6a:54:16:40:7a:04:74:c2:cf:2b:ac:26:f9:56:83:80:67:4f:
f5:44:80:87:64:dd:31:bb:eb:8c:b7:36:ee:83:68:fa:a2:9f:
b3:88:c7:ee:27:bc:0f:6c:6d:5c:a2:5c:74:37:31:a4:1a:69:
5b:f0:f0:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKKHUJ/oNiI3aSk3JNypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh
MDBiNjcwHhcNMjUwMTMxMTIwMTE3WhcNMjUwMjAxMTIwMTE3WjAzMTEwLwYDVQQD
EygwMzY0MzA4ODIxYjE1YzkzNmU4YmMxYWM4NTFkNGVjNTQ0ZjgwNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTcjZKUtPWEjCps/qDlNwMgOFhfK
AQDLxIiexs/VxtQYZ8AJ4PH58dIEk7kabtjgB8erU3pg/AwGhDFe0Wqc5ITEeyNc
BQ6XSb8NdlpowUpDGHoCqwGEc7ewC+aLnjpqfnk32lwKH4JNimwrqE1KtOTYsaXj
lC88QdgJe3wN7QlOFLT8fNJAURdJeaSbRIirdOCb8qKwXcAMfm56vT9wLUHH/pWm
tQ0eRs+rAcgrXX8DthP/AK2tfYzwvASWHrcGzWSbYRN8WKMheZUCUGE0chBWxXPF
N5mq7nGdzIVB7sY4Uzg673WHKWEqooSc7IQsoCu7Q7xBOxFLTuKGUdtOowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANkMIghsVyTbovBrIUdTsVE+Ab6MB8GA1UdIwQY
MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt
YjllYjg3MWY2ZDk2LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2
LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCmOUWQ8
EGZ2S+w7aC6EJ4CJoo+YkvN5CIUZ7xpasAZOxXHaRFiNUh1rXJbYC4Gn24cKOX3s
EKDFHOQRWW/TUOHzzMAqqc0SHS/EAk1orqZ0opoFGyzcvJdVRWIFxRHGnsYx2rnf
IyCFUX/BlLh7SaXgklEoJ0uTcg9SsAOd61V14MYSMcsBDltnFRw/VM/+iNivnBv2
rjbSQE9IYV4ZxwJfRsU619nUEgdiqF4rkgWmlMq4qipYaj5YwM53trckufsoXsVT
alQWQHoEdMLPK6wm+VaDgGdP9USAh2TdMbvrjLc27oNo+qKfs4jH7ie8D2xtXKJc
dDcxpBppW/Dw+w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:55 2025 by rpki-client