Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: 5BqLDNIfqTVOCipgVyqX1zVFwaBRs+OntRNQFfzZHSo=
Subject key identifier: A1:43:27:27:58:33:23:B8:B0:17:E5:D2:E6:2A:42:42:F8:4C:33:56
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 0194BD17A935EA1CF711A4F50E321859EF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: /8BGYU2uCwLrGesA8ZA7qLhNsB9ENo+iJ7A2ZV3TWro=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a9:35:ea:1c:f7:11:a4:f5:0e:32:18:59:ef:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=a1432727583323b8b017e5d2e62a4242f84c3356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:0f:6d:2c:ab:6e:62:5e:1b:e8:98:44:92:
9d:42:8b:39:65:05:a4:03:7d:1e:9a:9a:9e:1b:c4:
0a:9f:cd:33:63:97:f0:b5:2b:9f:97:b6:97:c3:ec:
e7:f7:76:05:68:2d:6f:be:34:89:da:a3:91:d9:70:
8e:37:f1:42:db:c4:01:3e:89:c5:ba:fd:29:75:b2:
16:7a:85:86:e9:9b:5a:18:9e:1f:2e:6e:90:25:21:
95:49:8e:2c:cc:1b:3d:81:14:dc:66:03:18:b9:71:
31:39:16:ef:76:58:b0:22:33:e6:98:3e:62:77:fb:
bc:75:c8:df:df:33:53:92:64:8e:99:11:a9:84:22:
3e:d4:6d:bb:72:bb:bd:26:b7:35:75:11:8e:47:9f:
66:03:14:95:31:11:b7:10:53:e5:18:03:35:f7:72:
2e:dc:47:eb:aa:3a:84:7f:07:4a:aa:5f:5e:78:95:
99:99:db:3f:81:38:c3:11:44:bb:c0:ae:f5:b5:c6:
6c:37:9e:25:1b:cb:8e:a4:22:97:61:d8:61:f1:d4:
4b:fb:b1:04:7b:82:eb:f8:61:49:2e:f5:3f:4d:14:
5b:9a:bb:e3:9b:ad:5e:ef:52:cb:53:51:28:cb:77:
44:96:94:5d:ae:c1:3b:85:09:20:9c:59:a9:6e:8e:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:27:27:58:33:23:B8:B0:17:E5:D2:E6:2A:42:42:F8:4C:33:56
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6e:e6:1b:6e:81:75:94:f4:e8:01:68:12:7c:01:08:53:b4:
cb:39:1b:23:78:6d:22:e8:ae:f8:25:36:c8:9e:2c:00:c7:b9:
71:85:17:a2:78:fd:bf:fb:40:06:fd:05:03:87:dc:ad:c5:3d:
7f:1a:dc:c0:c5:fd:c5:7c:99:d1:38:17:ad:ad:7b:2d:1f:2d:
fd:7f:23:42:a4:ff:ae:1b:b3:72:b7:8c:0f:da:27:3b:35:9e:
e5:31:7b:5d:64:55:c1:9b:0b:95:17:ba:15:89:44:2e:76:d6:
dd:60:ed:27:78:c6:67:7e:1d:96:81:92:bf:52:86:a8:fa:c2:
dc:f8:99:b5:ee:1d:d1:41:e5:e6:d1:3f:75:9b:be:d3:c6:eb:
10:1b:f8:f6:ba:cd:86:54:3b:95:3a:e0:80:12:cc:f4:85:8d:
9c:31:66:32:90:08:6f:16:85:71:e8:07:ac:a3:4f:1c:0d:9e:
2f:90:29:73:95:00:06:b8:71:0a:35:ec:48:92:5a:42:72:41:
0c:f0:04:9a:ec:9a:8d:68:7c:4c:94:72:56:0b:1e:7e:45:b5:
82:fc:0e:85:e5:85:e4:a0:ef:d1:98:0b:10:65:5f:ca:02:af:
fe:2b:4e:e6:76:bc:be:21:7e:43:f7:73:8c:85:16:ac:93:91:
32:4a:4e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6k16hz3EaT1DjIYWe+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MGMzMjk5NmFlMTI0NjE4OTcyMjJlMmQ5Y2MwOTM5MzA5
MjdkZGQwHhcNMjUwMTMxMTYwMDMxWhcNMjUwMjAxMTYwMDMxWjAzMTEwLwYDVQQD
EyhhMTQzMjcyNzU4MzMyM2I4YjAxN2U1ZDJlNjJhNDI0MmY4NGMzMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGEPbSyrbmJeG+iYRJKdQos5ZQWk
A30empqeG8QKn80zY5fwtSufl7aXw+zn93YFaC1vvjSJ2qOR2XCON/FC28QBPonF
uv0pdbIWeoWG6ZtaGJ4fLm6QJSGVSY4szBs9gRTcZgMYuXExORbvdliwIjPmmD5i
d/u8dcjf3zNTkmSOmRGphCI+1G27cru9Jrc1dRGOR59mAxSVMRG3EFPlGAM193Iu
3EfrqjqEfwdKql9eeJWZmds/gTjDEUS7wK71tcZsN54lG8uOpCKXYdhh8dRL+7EE
e4Lr+GFJLvU/TRRbmrvjm61e71LLU1Eoy3dElpRdrsE7hQkgnFmpbo5E2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFDJydYMyO4sBfl0uYqQkL4TDNWMB8GA1UdIwQY
MBaAFGYMMplq4SRhiXIi4tnMCTkwkn3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iOGQ0MDAtZTZlOC00MWVmLWFkMjQt
NTVjM2EyOGU2MmMzLzEvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iOGQ0MDAtZTZlOC00MWVmLWFkMjQtNTVjM2EyOGU2MmMz
LzEvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvm7mG26B
dZT06AFoEnwBCFO0yzkbI3htIuiu+CU2yJ4sAMe5cYUXonj9v/tABv0FA4fcrcU9
fxrcwMX9xXyZ0TgXra17LR8t/X8jQqT/rhuzcreMD9onOzWe5TF7XWRVwZsLlRe6
FYlELnbW3WDtJ3jGZ34dloGSv1KGqPrC3PiZte4d0UHl5tE/dZu+08brEBv49rrN
hlQ7lTrggBLM9IWNnDFmMpAIbxaFcegHrKNPHA2eL5Apc5UABrhxCjXsSJJaQnJB
DPAEmuyajWh8TJRyVgsefkW1gvwOheWF5KDv0ZgLEGVfygKv/itO5na8viF+Q/dz
jIUWrJORMkpOAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:30 2025 by rpki-client