Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: Qt66CbzAkaiaSbK4/L6AFHjMyxLG2S3LrR55YoKAazs=
Subject key identifier: 02:83:82:74:E7:31:C4:D0:10:AB:14:81:66:B3:99:65:1E:87:2C:C0
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 0194BD852812FCA52D02A494BB95E83F1122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: ejVbDdKzR1ethunpQzdbNZZlIhpPLx1qzhSdy0ITYw4=)
2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:28:12:fc:a5:2d:02:a4:94:bb:95:e8:3f:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=02838274e731c4d010ab148166b399651e872cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:04:44:4e:d3:4f:2b:24:0f:85:e7:a6:ea:
f9:aa:48:7f:2b:39:9e:a9:3f:09:7d:ea:aa:47:21:
19:2f:8f:51:42:93:84:cd:52:e2:89:fa:a5:aa:cb:
08:31:69:f9:ef:ee:a8:c6:86:cf:84:23:61:ad:cc:
e7:13:fe:e5:d1:22:69:ff:92:53:07:3b:e0:df:16:
4e:21:cd:76:5c:ce:0a:cd:c4:cd:c0:e6:88:5d:17:
10:10:fb:44:ee:b6:64:cc:6a:57:54:73:27:07:95:
f5:fd:04:38:76:be:49:10:34:e4:dd:b5:46:91:ce:
c2:b6:51:8a:ae:d7:b3:09:c4:d0:55:46:47:91:8f:
84:4a:5b:c1:f7:f1:97:62:7b:d6:b9:db:c6:90:86:
2d:a2:3f:34:cf:79:0a:da:7b:b0:34:bb:47:c7:d5:
0f:71:d1:50:c1:4f:18:61:48:10:1e:70:58:71:7e:
dd:85:8d:44:0c:af:f4:38:6c:88:e4:6b:81:96:2c:
6d:28:a7:35:00:79:e4:f6:a8:70:c5:1e:e2:37:19:
6c:f0:e0:3f:c6:b9:46:f2:17:1c:76:64:57:01:75:
1b:01:a4:56:5c:f1:bd:2b:78:f0:e4:c4:80:7a:29:
a7:54:f2:79:1c:00:44:06:9a:a2:59:0b:fd:e5:56:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:82:74:E7:31:C4:D0:10:AB:14:81:66:B3:99:65:1E:87:2C:C0
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f0:76:5a:12:7c:1f:2d:7b:d6:1e:f3:99:82:d1:91:23:0d:
d0:3b:8d:3c:83:21:ba:3a:2f:e2:e9:44:bd:3c:06:93:2c:39:
1b:ae:d3:58:d1:98:32:30:5d:02:46:4f:47:73:31:98:1f:48:
bc:b3:73:cb:3d:8c:cf:1a:e2:fb:c4:f4:92:e9:b8:0a:16:28:
a5:3a:f9:a1:d4:11:d3:85:b6:0b:dc:30:11:21:f2:37:08:e6:
e3:91:3d:90:c4:2c:d8:c3:06:9d:e2:80:4d:66:d7:db:18:0f:
b9:5d:df:c3:03:e4:47:20:60:b2:8c:97:32:88:0a:63:4b:22:
11:33:98:e1:b6:f0:ad:35:4f:c0:6c:17:c9:4f:c0:71:3b:dd:
27:59:d6:b6:0b:64:65:fc:eb:1b:ce:0f:30:6b:97:8b:2e:bf:
43:4a:d9:65:3a:cd:e6:35:98:41:d3:d7:97:1e:e3:1f:94:ad:
16:b5:ab:5b:c2:e3:1e:39:4c:32:7a:41:06:af:ac:91:3a:0b:
ba:a7:af:22:a5:c1:48:28:1c:ec:b4:05:8b:19:84:61:ba:99:
2e:9e:b5:d4:2b:f5:d9:33:b1:85:63:65:8a:94:d5:e2:73:12:
7f:a4:66:2f:4c:47:be:be:92:68:77:c5:af:fb:58:5f:c2:08:
d6:41:85:55
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9hSgS/KUtAqSUu5XoPxEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMzY0NmZiYTY5MDQ1ZWRlNWVmOGU1YzM5YTJmYzE3Zjlm
MGQyZGMwHhcNMjUwMTMxMTgwMDA3WhcNMjUwMjAxMTgwMDA3WjAzMTEwLwYDVQQD
EygwMjgzODI3NGU3MzFjNGQwMTBhYjE0ODE2NmIzOTk2NTFlODcyY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfYERE7TTyskD4Xnpur5qkh/Kzme
qT8JfeqqRyEZL49RQpOEzVLiifqlqssIMWn57+6oxobPhCNhrcznE/7l0SJp/5JT
Bzvg3xZOIc12XM4KzcTNwOaIXRcQEPtE7rZkzGpXVHMnB5X1/QQ4dr5JEDTk3bVG
kc7CtlGKrtezCcTQVUZHkY+ESlvB9/GXYnvWudvGkIYtoj80z3kK2nuwNLtHx9UP
cdFQwU8YYUgQHnBYcX7dhY1EDK/0OGyI5GuBlixtKKc1AHnk9qhwxR7iNxls8OA/
xrlG8hccdmRXAXUbAaRWXPG9K3jw5MSAeimnVPJ5HABEBpqiWQv95VarDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAKDgnTnMcTQEKsUgWazmWUehyzAMB8GA1UdIwQY
MBaAFPs2RvumkEXt5e+OXDmi/Bf58NLcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16WkctNmFRUmUzbDc0NWNPYUw4Rl9udzB0dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNzA2ZjU0LTg3YTUtNDVlNy1iZjIy
LThhNmI1NDc2NjZhYS8xLzEtelpHLTZhUVJlM2w3NDVjT2FMOEZfbncwdHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzViLzcwNmY1NC04N2E1LTQ1ZTctYmYyMi04YTZiNTQ3NjY2
YWEvMS8xLXpaRy02YVFSZTNsNzQ1Y09hTDhGX253MHR3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfB2
WhJ8Hy171h7zmYLRkSMN0DuNPIMhujov4ulEvTwGkyw5G67TWNGYMjBdAkZPR3Mx
mB9IvLNzyz2Mzxri+8T0kum4ChYopTr5odQR04W2C9wwESHyNwjm45E9kMQs2MMG
neKATWbX2xgPuV3fwwPkRyBgsoyXMogKY0siETOY4bbwrTVPwGwXyU/AcTvdJ1nW
tgtkZfzrG84PMGuXiy6/Q0rZZTrN5jWYQdPXlx7jH5StFrWrW8LjHjlMMnpBBq+s
kToLuqevIqXBSCgc7LQFixmEYbqZLp611Cv12TOxhWNlipTV4nMSf6RmL0xHvr6S
aHfFr/tYX8II1kGFVQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:50 2025 by rpki-client