Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: k2Rgc5LsvuyzO49qi3GWJn3xdxEbuMUo4aGaTaLS8Q8=
Subject key identifier: 94:33:9A:1D:81:17:9E:91:3B:20:F5:DE:36:D5:78:9A:F8:C2:A5:D6
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 0194BC3BD7824E6A8C2C2FB7DB17B60D26CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: EGl8QFRi0o1b6t43VAWy72apT6kYhuQK5FitOJ0tMBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d7:82:4e:6a:8c:2c:2f:b7:db:17:b6:0d:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=94339a1d81179e913b20f5de36d5789af8c2a5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:a6:63:2c:f0:64:f4:3c:28:f1:ce:fe:0f:
90:94:6e:4c:8a:5d:0e:e1:8d:44:0f:9a:a3:33:40:
e8:1c:da:69:c9:18:8c:54:7b:59:45:8d:ff:58:d7:
30:3c:c0:86:fc:18:67:3f:b4:3a:ac:bf:d5:5b:62:
55:34:ec:09:9e:a9:37:95:1e:0f:24:4c:c2:3e:de:
72:22:c8:32:b2:8a:af:46:48:34:e5:0a:09:5f:0f:
59:ea:30:ce:e2:92:fc:9e:80:f7:d2:a6:63:48:b2:
02:f6:1e:ec:f9:00:86:0e:6a:32:4c:5e:80:00:36:
2f:79:97:6f:f6:dc:05:4c:01:eb:88:52:a8:df:bc:
a8:be:4c:7c:41:3f:09:38:24:54:4f:2b:af:61:62:
07:39:1b:63:1d:56:97:6a:86:29:16:08:7a:b9:04:
35:90:66:97:a6:3e:d4:f6:73:95:17:0d:78:02:da:
be:5b:b2:c3:cf:cb:d5:d1:a9:89:7d:68:4b:60:54:
19:f3:d0:d7:92:22:0e:cf:b7:e1:bc:a1:0c:13:7c:
88:fb:2e:82:bb:5f:1c:61:57:44:c4:2a:19:62:93:
71:ae:26:5f:cb:9e:cf:c2:43:b3:4b:09:f8:30:cd:
40:fc:a6:68:83:c9:25:0c:65:cf:9f:7b:10:ee:5a:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:33:9A:1D:81:17:9E:91:3B:20:F5:DE:36:D5:78:9A:F8:C2:A5:D6
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f5:c9:65:d2:b7:3e:f0:9f:a4:91:28:28:0a:a4:66:a0:ed:
ae:41:1f:48:56:17:dc:f6:d6:e7:60:1d:25:1e:2d:c6:51:1f:
38:29:bb:00:e3:b5:b9:b1:08:a0:99:f0:fd:b9:64:19:b0:6b:
60:78:96:a3:81:ee:ba:37:7b:98:ca:e4:06:64:ff:14:f0:6d:
02:fc:ad:9e:26:79:cd:a3:87:51:71:50:ca:16:14:fa:fc:a4:
70:ce:82:d2:e6:7a:98:a6:11:8c:4a:dd:4e:ef:a5:11:74:bd:
23:ce:47:a5:80:96:13:95:a6:62:01:24:a2:d0:7e:04:6b:e3:
a6:49:24:42:54:93:12:5f:b7:81:75:38:20:cd:2d:29:8e:ac:
5d:e8:57:4a:6a:b0:27:5c:86:48:ae:e1:63:e8:fe:d7:c5:15:
6b:e0:45:7a:ee:e1:d7:e9:a6:cc:17:93:82:6a:ce:f5:05:91:
c3:a3:f6:1b:ce:a5:27:00:7c:d7:e1:d3:d0:f3:12:fc:be:b6:
79:29:cd:81:90:a2:a8:d3:a0:96:ae:3a:64:46:b8:44:94:e1:
50:3f:62:c7:83:ae:2d:09:a7:46:df:15:28:73:37:4f:a6:52:
bd:eb:ed:e2:ce:87:b3:df:b9:96:89:63:4c:2a:fd:c9:e8:fc:
99:bd:a9:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9eCTmqMLC+32xe2DSbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYWU0NjExODhmZmMxZWYyZjNhMTQ3NDU3MWE5NDM5YTU1
Mzc0YWMwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
Eyg5NDMzOWExZDgxMTc5ZTkxM2IyMGY1ZGUzNmQ1Nzg5YWY4YzJhNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1GmYyzwZPQ8KPHO/g+QlG5Mil0O
4Y1ED5qjM0DoHNppyRiMVHtZRY3/WNcwPMCG/BhnP7Q6rL/VW2JVNOwJnqk3lR4P
JEzCPt5yIsgysoqvRkg05QoJXw9Z6jDO4pL8noD30qZjSLIC9h7s+QCGDmoyTF6A
ADYveZdv9twFTAHriFKo37yovkx8QT8JOCRUTyuvYWIHORtjHVaXaoYpFgh6uQQ1
kGaXpj7U9nOVFw14Atq+W7LDz8vV0amJfWhLYFQZ89DXkiIOz7fhvKEME3yI+y6C
u18cYVdExCoZYpNxriZfy57PwkOzSwn4MM1A/KZog8klDGXPn3sQ7lrEWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQzmh2BF56ROyD13jbVeJr4wqXWMB8GA1UdIwQY
MBaAFM+uRhGI/8HvLzoUdFcalDmlU3SsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMt
NTVmMDZmMDYyY2UwLzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMtNTVmMDZmMDYyY2Uw
LzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPXJZdK3
PvCfpJEoKAqkZqDtrkEfSFYX3PbW52AdJR4txlEfOCm7AOO1ubEIoJnw/blkGbBr
YHiWo4Huujd7mMrkBmT/FPBtAvytniZ5zaOHUXFQyhYU+vykcM6C0uZ6mKYRjErd
Tu+lEXS9I85HpYCWE5WmYgEkotB+BGvjpkkkQlSTEl+3gXU4IM0tKY6sXehXSmqw
J1yGSK7hY+j+18UVa+BFeu7h1+mmzBeTgmrO9QWRw6P2G86lJwB81+HT0PMS/L62
eSnNgZCiqNOglq46ZEa4RJThUD9ix4OuLQmnRt8VKHM3T6ZSvevt4s6Hs9+5lolj
TCr9yej8mb2pnw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:20 2025 by rpki-client