Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: hp8MnJLOzRx9sE+6nbAScfMkj5WcQynWlVNlIGrlp3g=
Subject key identifier: 87:30:7D:F4:4C:8E:60:BE:28:36:89:F4:45:C1:4A:8F:F8:22:C3:57
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 0194BC049EA830F7B1D5752F9BB41FAD7C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: qo2Izl0G+Yf+Q8TwHwISQOTiHlSu5LPjB3slmbIjuao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9e:a8:30:f7:b1:d5:75:2f:9b:b4:1f:ad:7c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=87307df44c8e60be283689f445c14a8ff822c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:9c:98:80:5d:b6:e9:67:b3:95:a0:cb:91:
2f:21:07:29:21:9c:5a:4d:a9:7f:70:15:04:ec:7a:
37:71:25:6c:cc:27:3d:e3:29:82:6a:d4:22:e5:66:
27:4b:8f:38:85:53:cc:25:36:52:f9:55:17:cd:95:
c4:3e:d1:8d:62:67:68:20:ba:de:9c:24:1f:84:ce:
40:d0:a6:ed:7c:00:e8:f9:ce:3b:b1:4e:b0:d8:bd:
92:0a:93:e8:f9:c2:ac:c6:d6:b2:a6:ed:04:b4:44:
67:14:2a:30:3b:10:6d:4c:1f:f4:a9:d5:52:2a:bc:
0a:02:61:fa:c0:de:4a:f5:97:80:96:04:e3:a7:25:
b4:b3:26:77:2f:f8:af:08:c3:8f:55:ab:ac:0a:04:
de:4d:68:28:7f:32:ff:20:58:51:e3:aa:72:9e:7b:
28:25:8e:26:69:6f:ec:f0:0f:a8:bc:ed:02:47:76:
6c:5e:99:64:c2:c2:2c:93:df:50:df:51:db:1a:34:
bc:5a:d9:37:67:0f:3d:ee:57:50:b3:8a:0c:d6:42:
4a:01:b2:34:72:ce:9e:31:00:5c:78:c0:31:f4:a6:
37:ad:45:7a:cc:9d:ff:16:49:39:c6:f6:18:c7:ea:
5e:db:72:d8:20:81:a0:e1:bd:26:22:44:a0:48:e2:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:30:7D:F4:4C:8E:60:BE:28:36:89:F4:45:C1:4A:8F:F8:22:C3:57
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:af:86:06:bc:67:0d:b1:67:0a:51:1f:74:f6:f0:6c:87:c6:
bc:b2:be:67:99:ea:7c:f0:91:29:5d:c6:d7:ba:6d:03:4d:d6:
ae:b5:a7:c8:1b:9f:5c:a7:61:50:84:be:b5:c6:7b:c9:9a:88:
d8:de:82:11:9d:d9:40:27:7e:d9:36:1d:2f:25:e4:09:5c:2c:
ed:9d:ab:bd:ec:d9:dd:7b:c6:f0:88:c9:74:72:58:01:38:ca:
f8:50:cb:0c:f5:da:23:49:77:a7:0d:17:ac:b1:80:e1:01:e6:
c8:40:be:8b:b8:e2:2a:12:73:6c:55:f5:1b:f9:f6:cf:0b:c6:
ff:4f:77:07:b0:dc:c0:9a:95:ad:c5:08:c0:d0:91:d7:61:c8:
bf:40:52:49:b8:f2:ce:bf:be:92:f3:1a:3e:14:7b:38:38:d6:
de:12:c2:ab:82:54:43:f8:19:46:3f:ee:09:ec:ba:b1:91:66:
05:2d:e8:fa:36:19:74:a2:95:d8:c2:a9:76:f3:6c:f9:3c:ff:
4d:d6:f2:f4:df:0d:86:bd:61:0a:96:97:51:95:f1:85:32:8f:
b0:1d:db:fd:5a:59:3d:b3:da:f3:08:9d:8b:ba:5c:35:8a:f3:
62:27:2d:54:a1:ab:d1:9d:0e:dd:14:06:c9:d9:90:33:5f:a7:
75:fd:98:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BJ6oMPex1XUvm7QfrXwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzBmZTY5OGU0ZGFlOWQ3YzMyYmMxNTZjNDE4MDY0ZmRj
ZmY0YjAwHhcNMjUwMTMxMTEwMDA2WhcNMjUwMjAxMTEwMDA2WjAzMTEwLwYDVQQD
Eyg4NzMwN2RmNDRjOGU2MGJlMjgzNjg5ZjQ0NWMxNGE4ZmY4MjJjMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNCcmIBdtulns5Wgy5EvIQcpIZxa
Tal/cBUE7Ho3cSVszCc94ymCatQi5WYnS484hVPMJTZS+VUXzZXEPtGNYmdoILre
nCQfhM5A0KbtfADo+c47sU6w2L2SCpPo+cKsxtaypu0EtERnFCowOxBtTB/0qdVS
KrwKAmH6wN5K9ZeAlgTjpyW0syZ3L/ivCMOPVausCgTeTWgofzL/IFhR46pynnso
JY4maW/s8A+ovO0CR3ZsXplkwsIsk99Q31HbGjS8Wtk3Zw897ldQs4oM1kJKAbI0
cs6eMQBceMAx9KY3rUV6zJ3/Fkk5xvYYx+pe23LYIIGg4b0mIkSgSOLUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcwffRMjmC+KDaJ9EXBSo/4IsNXMB8GA1UdIwQY
MBaAFM5w/mmOTa6dfDK8FWxBgGT9z/SwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2Qt
ODFmZWEwZjc3Mjg2LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2QtODFmZWEwZjc3Mjg2
LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbK+GBrxn
DbFnClEfdPbwbIfGvLK+Z5nqfPCRKV3G17ptA03WrrWnyBufXKdhUIS+tcZ7yZqI
2N6CEZ3ZQCd+2TYdLyXkCVws7Z2rvezZ3XvG8IjJdHJYATjK+FDLDPXaI0l3pw0X
rLGA4QHmyEC+i7jiKhJzbFX1G/n2zwvG/093B7DcwJqVrcUIwNCR12HIv0BSSbjy
zr++kvMaPhR7ODjW3hLCq4JUQ/gZRj/uCey6sZFmBS3o+jYZdKKV2MKpdvNs+Tz/
Tdby9N8Nhr1hCpaXUZXxhTKPsB3b/VpZPbPa8widi7pcNYrzYictVKGr0Z0O3RQG
ydmQM1+ndf2YEg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:03 2025 by rpki-client