Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: qOTzg7MhbWVs8rLVGzQYQ2uMgf1hiDa5+ItGJIDYink=
Subject key identifier: 89:B0:85:3B:56:FC:C3:29:6A:3B:42:9A:10:44:29:6F:F5:8B:E2:6F
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 0194BC72B5FA8049F9ED06D98F60632FEA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: xz6o4va3auFRTsoFOA7I7lzGOS7ofNSNLuPD4JSA2h0=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b5:fa:80:49:f9:ed:06:d9:8f:60:63:2f:ea:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=89b0853b56fcc3296a3b429a1044296ff58be26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:6b:53:17:00:3e:3e:dc:6b:7c:37:5b:3b:
f7:82:8a:4c:aa:61:74:ce:65:2f:4b:cf:dc:f0:49:
c7:c0:88:3b:a1:45:ba:3a:5d:51:a1:3c:84:34:a7:
e1:33:86:34:a9:a6:a6:8a:87:57:00:81:92:6c:0b:
58:70:44:e6:ea:dd:ce:52:4f:bf:70:ca:e2:af:a4:
74:3d:76:28:28:8b:70:37:2c:70:fc:d8:72:e7:39:
27:39:ab:5a:a4:12:8d:83:72:44:e8:e2:15:5d:5a:
96:2c:25:f0:4f:99:42:42:38:20:f6:69:4c:81:6b:
ed:18:b0:f2:67:5c:b8:9a:06:03:c1:d0:1c:75:f1:
5d:1a:4e:5c:53:19:1f:8b:94:ee:d4:2f:f0:cc:24:
40:0c:37:9c:9c:60:a3:3b:6e:e4:2d:f4:d9:b4:d0:
72:96:fa:43:d9:94:14:cf:b6:98:cb:a2:35:9b:fd:
a8:57:1a:ec:1d:b3:ca:62:9c:4e:d5:de:05:16:a9:
41:12:ce:5f:2f:11:8a:7a:1a:dd:38:80:5c:39:12:
16:45:5f:b9:f9:a6:5a:ad:4f:03:73:93:89:64:a4:
a4:66:b8:05:b3:19:57:f1:1a:e7:69:5f:66:78:f2:
8d:e8:90:9c:61:a2:6b:4f:27:af:a1:ae:9f:a3:fc:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:85:3B:56:FC:C3:29:6A:3B:42:9A:10:44:29:6F:F5:8B:E2:6F
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c0:c2:f2:b0:20:8c:e8:04:da:b2:0c:45:de:bc:93:5c:b2:
39:4a:c0:6a:5b:f1:34:2e:bd:fd:10:cc:a4:a6:83:0f:fb:c3:
3e:99:60:0b:61:a7:ed:a4:23:79:e8:6b:26:f0:96:1e:93:09:
d5:52:01:0d:d2:02:18:a9:07:83:77:d0:35:94:d6:d9:95:ca:
f1:e0:27:d4:8e:39:bb:5c:e0:ac:7f:df:b3:63:0a:87:a4:f0:
c0:ea:eb:4f:8a:9f:52:2f:4d:7b:4b:40:47:58:3a:8f:1b:aa:
75:9b:1f:01:e4:3e:4a:03:93:c9:7e:a6:fc:ee:8b:d1:13:7a:
07:58:2b:06:51:a8:0e:a2:7a:ea:4e:d2:3c:fa:15:ce:cf:de:
77:d9:a0:b1:93:05:5a:23:1e:e8:3c:3d:c5:e0:2a:2a:ea:08:
0a:14:a0:99:dd:8f:cd:97:a8:12:a7:9d:21:46:54:26:5d:51:
b6:3b:33:e8:b5:9e:18:c7:84:fc:6e:e8:81:a6:88:e0:0c:90:
8b:5b:de:68:be:b1:0d:97:d6:40:98:10:50:3e:27:df:84:13:
ae:e0:78:20:5b:ae:46:9f:f6:b1:64:7c:de:0b:20:be:61:e8:
2f:9f:e3:30:49:f5:3e:d3:1a:e2:ba:f1:3d:3c:81:51:f4:fa:
ef:b7:2a:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crX6gEn57QbZj2BjL+ohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjNiNThiNDUyMjM5MDAxZWFjMmUyMjFiYTU2YzNhZmVk
N2E3OTAwHhcNMjUwMTMxMTMwMDIxWhcNMjUwMjAxMTMwMDIxWjAzMTEwLwYDVQQD
Eyg4OWIwODUzYjU2ZmNjMzI5NmEzYjQyOWExMDQ0Mjk2ZmY1OGJlMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUlrUxcAPj7ca3w3Wzv3gopMqmF0
zmUvS8/c8EnHwIg7oUW6Ol1RoTyENKfhM4Y0qaamiodXAIGSbAtYcETm6t3OUk+/
cMrir6R0PXYoKItwNyxw/Nhy5zknOatapBKNg3JE6OIVXVqWLCXwT5lCQjgg9mlM
gWvtGLDyZ1y4mgYDwdAcdfFdGk5cUxkfi5Tu1C/wzCRADDecnGCjO27kLfTZtNBy
lvpD2ZQUz7aYy6I1m/2oVxrsHbPKYpxO1d4FFqlBEs5fLxGKehrdOIBcORIWRV+5
+aZarU8Dc5OJZKSkZrgFsxlX8RrnaV9mePKN6JCcYaJrTyevoa6fo/yE1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImwhTtW/MMpajtCmhBEKW/1i+JvMB8GA1UdIwQY
MBaAFGeztYtFIjkAHqwuIhulbDr+16eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgt
Yjc5NTUyZTcwMGM1LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgtYjc5NTUyZTcwMGM1
LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcDC8rAg
jOgE2rIMRd68k1yyOUrAalvxNC69/RDMpKaDD/vDPplgC2Gn7aQjeehrJvCWHpMJ
1VIBDdICGKkHg3fQNZTW2ZXK8eAn1I45u1zgrH/fs2MKh6TwwOrrT4qfUi9Ne0tA
R1g6jxuqdZsfAeQ+SgOTyX6m/O6L0RN6B1grBlGoDqJ66k7SPPoVzs/ed9mgsZMF
WiMe6Dw9xeAqKuoIChSgmd2PzZeoEqedIUZUJl1Rtjsz6LWeGMeE/G7ogaaI4AyQ
i1veaL6xDZfWQJgQUD4n34QTruB4IFuuRp/2sWR83gsgvmHoL5/jMEn1PtMa4rrx
PTyBUfT677cqaA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:25 2025 by rpki-client