Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: iflEmDJXuatF23Gy11oEPBO9BfyqaYarJUpGyK+QTK8=
Subject key identifier: B1:9A:B9:36:C1:2E:EA:8D:57:2C:FE:70:62:25:91:7C:13:A0:92:3D
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 0194BC04B455B40184AA579A21DFBF89782C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0A88
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: UfkFnTrORznAiAxrZn3vehNbFDJK5A7W+AiO/sHD61g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b4:55:b4:01:84:aa:57:9a:21:df:bf:89:78:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=b19ab936c12eea8d572cfe706225917c13a0923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:aa:c0:68:14:d9:d0:b2:5b:55:5a:0b:40:
8a:0e:ef:c2:2a:a7:5c:f7:79:ed:f7:f2:3c:cf:8b:
07:f6:a8:d7:8a:a9:95:50:d3:92:8a:50:7b:d2:64:
1c:79:5c:b1:98:3f:52:f9:c3:e7:73:b7:df:98:fa:
a1:41:1c:bd:73:36:a2:90:4d:ee:07:04:77:0f:b1:
a1:d0:a1:96:1a:e2:8e:7c:d0:34:dc:5a:ed:e9:05:
4a:ff:12:26:7b:df:4c:30:50:8e:f2:f3:22:4e:49:
4c:1e:b3:53:a4:33:a5:d6:a8:c6:a6:bb:c8:54:7c:
dd:b0:47:da:83:ee:95:30:6e:b8:50:d2:d8:14:89:
1e:51:72:3c:01:ac:49:be:86:9a:c0:2a:96:2e:f7:
db:6e:94:c8:95:1a:da:05:22:b7:77:ad:7c:99:3f:
e2:02:f8:b0:3a:35:f0:08:d0:69:f7:ef:b3:f6:5c:
f4:13:18:40:04:49:58:57:99:da:38:d5:0d:e7:00:
02:0a:90:ea:a9:79:b4:4c:47:4f:65:a8:f4:1c:f2:
4e:d4:bd:00:7f:9c:0c:9c:2f:4b:6d:53:e9:ca:49:
bf:fc:cb:12:01:d5:77:41:b9:84:21:04:78:97:f4:
8a:8e:b8:b8:57:22:8a:d6:86:c3:fa:5a:83:ff:80:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:B9:36:C1:2E:EA:8D:57:2C:FE:70:62:25:91:7C:13:A0:92:3D
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:86:18:d4:f6:17:e6:9d:30:02:30:84:07:cf:ee:6d:6e:a9:
10:b6:26:38:69:da:f6:7d:93:1c:55:b5:b8:8b:ce:ac:80:75:
26:8b:c7:20:37:fc:3b:1d:ff:f3:b3:5a:cd:a3:b4:83:a5:c3:
42:f5:6f:7d:4f:40:0d:57:e1:b7:15:79:48:8d:e1:38:23:2c:
db:34:f4:33:de:6e:b0:b8:18:8d:f8:2d:2e:dd:f1:09:fd:f1:
ac:ee:b7:e9:08:ea:b8:4f:69:f5:81:39:f7:42:2e:b9:2a:be:
58:55:4a:29:ad:55:26:5b:79:4c:7c:2a:de:64:79:40:f4:ea:
3c:31:ab:a0:55:60:60:95:34:1b:60:b0:36:7e:73:5f:9e:2a:
a5:f0:8f:46:c0:98:53:49:7b:70:72:3e:eb:c9:88:fa:5c:2b:
6c:69:3b:e1:c8:46:5b:42:57:f4:52:85:8c:01:86:0a:9e:bb:
2b:d1:85:69:47:8d:7b:a3:87:b5:e6:f1:e7:ae:32:9d:a1:49:
ce:fc:2e:be:20:4d:05:23:4a:c4:0e:47:58:e3:b2:de:d6:3e:
d7:75:9c:7f:7c:0a:12:be:7a:a4:97:20:91:9c:21:ef:ab:00:
ad:a9:2a:b3:c7:56:41:b1:4c:6c:8d:a9:36:ca:b5:ad:5c:25:
aa:e1:21:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLRVtAGEqleaId+/iXgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2
ZjljNDAwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
EyhiMTlhYjkzNmMxMmVlYThkNTcyY2ZlNzA2MjI1OTE3YzEzYTA5MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y6qwGgU2dCyW1VaC0CKDu/CKqdc
93nt9/I8z4sH9qjXiqmVUNOSilB70mQceVyxmD9S+cPnc7ffmPqhQRy9czaikE3u
BwR3D7Gh0KGWGuKOfNA03Frt6QVK/xIme99MMFCO8vMiTklMHrNTpDOl1qjGprvI
VHzdsEfag+6VMG64UNLYFIkeUXI8AaxJvoaawCqWLvfbbpTIlRraBSK3d618mT/i
AviwOjXwCNBp9++z9lz0ExhABElYV5naONUN5wACCpDqqXm0TEdPZaj0HPJO1L0A
f5wMnC9LbVPpykm//MsSAdV3QbmEIQR4l/SKjri4VyKK1obD+lqD/4D5/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGauTbBLuqNVyz+cGIlkXwToJI9MB8GA1UdIwQY
MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt
YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3
LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIYY1PYX
5p0wAjCEB8/ubW6pELYmOGna9n2THFW1uIvOrIB1JovHIDf8Ox3/87NazaO0g6XD
QvVvfU9ADVfhtxV5SI3hOCMs2zT0M95usLgYjfgtLt3xCf3xrO636QjquE9p9YE5
90IuuSq+WFVKKa1VJlt5THwq3mR5QPTqPDGroFVgYJU0G2CwNn5zX54qpfCPRsCY
U0l7cHI+68mI+lwrbGk74chGW0JX9FKFjAGGCp67K9GFaUeNe6OHtebx564ynaFJ
zvwuviBNBSNKxA5HWOOy3tY+13Wcf3wKEr56pJcgkZwh76sArakqs8dWQbFMbI2p
Nsq1rVwlquEhCw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:08 2025 by rpki-client