Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: o4NO96SMKWACQad+q00xiENQLsK5+S7rc4TYqG/UzhY=
Subject key identifier: 64:1D:D6:D7:FC:DA:9D:71:82:AB:1E:91:49:E5:02:C2:E7:31:79:A1
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 0194BC3BEBE784AC9F2711F5DF5D106C68A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 0765
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: deuWJ6OlbYV/7sf8gk19iD6m1R3bHwp2WVAr0/7CdDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:e7:84:ac:9f:27:11:f5:df:5d:10:6c:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=641dd6d7fcda9d7182ab1e9149e502c2e73179a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:97:4b:a4:f0:f4:f6:14:f6:73:09:08:ba:
f7:1f:a8:8c:84:5e:bf:7a:c5:46:64:1f:4a:b5:19:
14:ce:76:24:19:2e:43:27:ff:84:50:c3:72:1e:90:
3f:33:04:23:2c:71:0d:fc:3c:f6:93:56:47:8e:4e:
f4:4f:51:83:45:a0:df:1e:07:7b:a3:3f:46:f2:68:
be:72:a4:b9:d9:c1:e7:ec:af:f3:b0:dc:74:94:86:
b8:3e:a3:87:c8:91:45:80:d8:8c:d6:e7:15:16:d6:
7f:c8:c1:db:b1:c2:41:be:ba:e5:47:f7:9a:fd:b5:
d7:30:15:b1:54:d8:cb:45:d6:f6:57:b5:98:31:05:
ea:5f:83:dc:e6:a9:73:fe:72:94:88:e5:c9:ec:50:
da:5d:00:44:5e:92:96:0d:35:55:97:0e:57:4d:45:
8c:85:0c:1c:bc:23:93:f7:f9:14:35:e8:42:d8:82:
67:23:76:c7:12:3d:49:ca:29:08:11:bd:48:a9:9c:
8f:32:20:7c:ee:9d:3f:24:5d:a1:62:4f:23:49:04:
d6:3d:23:62:01:e1:67:d5:06:23:fa:7b:b9:8e:ba:
07:cf:f7:d4:95:5d:b1:04:78:ae:90:92:3b:75:a8:
21:71:ed:83:6c:ce:ad:67:73:d4:3a:97:2d:9f:7e:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:D6:D7:FC:DA:9D:71:82:AB:1E:91:49:E5:02:C2:E7:31:79:A1
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d7:85:64:23:ac:6d:10:39:c6:2b:f9:25:2f:b5:33:f1:57:
8b:85:90:10:1a:48:21:f8:41:b9:8c:05:c4:9f:f0:70:34:5a:
27:93:e2:3a:f2:47:af:af:16:71:79:42:fc:cf:d3:63:e3:0f:
3a:e7:24:64:7c:40:5d:c3:ca:12:05:49:8f:89:9f:4f:3d:aa:
45:8b:e6:3c:0a:e7:ba:83:49:47:93:3a:a0:85:58:53:be:e2:
60:99:06:c0:0a:e2:1d:a7:13:e3:fd:22:13:3c:75:5f:bb:e8:
9b:a0:c7:36:c1:c4:5c:7f:db:b8:7d:ed:ff:02:1b:c5:f2:43:
a2:28:45:ac:a0:86:9e:3c:d6:86:10:80:d8:d3:30:de:58:cd:
cd:9d:11:d9:48:fa:5e:3e:3c:46:35:92:90:28:e3:21:1a:c0:
7a:e2:d4:b1:a2:75:c6:d9:45:65:e5:50:b0:17:a9:bf:d0:5a:
89:d9:20:26:c2:0d:05:2a:d2:72:8e:f5:73:e3:dd:0b:e6:ba:
69:f7:86:fb:f3:2d:78:a4:95:e2:90:94:d7:ad:e0:e3:a5:05:
6d:7e:62:81:f6:bc:bc:33:c4:6f:10:de:15:c1:86:1a:73:41:
d5:db:a7:be:9f:87:ce:c7:53:58:4b:87:9e:28:d7:67:31:55:
e9:2d:03:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+vnhKyfJxH1310QbGipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MjM5YTUxMDg0ZjFiMmI1YzY4NDY0M2NhYzE0NjIxN2M3
OWY4ZDEwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
Eyg2NDFkZDZkN2ZjZGE5ZDcxODJhYjFlOTE0OWU1MDJjMmU3MzE3OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqemXS6Tw9PYU9nMJCLr3H6iMhF6/
esVGZB9KtRkUznYkGS5DJ/+EUMNyHpA/MwQjLHEN/Dz2k1ZHjk70T1GDRaDfHgd7
oz9G8mi+cqS52cHn7K/zsNx0lIa4PqOHyJFFgNiM1ucVFtZ/yMHbscJBvrrlR/ea
/bXXMBWxVNjLRdb2V7WYMQXqX4Pc5qlz/nKUiOXJ7FDaXQBEXpKWDTVVlw5XTUWM
hQwcvCOT9/kUNehC2IJnI3bHEj1JyikIEb1IqZyPMiB87p0/JF2hYk8jSQTWPSNi
AeFn1QYj+nu5jroHz/fUlV2xBHiukJI7daghce2DbM6tZ3PUOpctn36FowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQd1tf82p1xgqsekUnlAsLnMXmhMB8GA1UdIwQY
MBaAFGQjmlEITxsrXGhGQ8rBRiF8efjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYt
NGU5MzA1Y2FmMWEzLzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYtNGU5MzA1Y2FmMWEz
LzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArteFZCOs
bRA5xiv5JS+1M/FXi4WQEBpIIfhBuYwFxJ/wcDRaJ5PiOvJHr68WcXlC/M/TY+MP
OuckZHxAXcPKEgVJj4mfTz2qRYvmPArnuoNJR5M6oIVYU77iYJkGwAriHacT4/0i
Ezx1X7vom6DHNsHEXH/buH3t/wIbxfJDoihFrKCGnjzWhhCA2NMw3ljNzZ0R2Uj6
Xj48RjWSkCjjIRrAeuLUsaJ1xtlFZeVQsBepv9BaidkgJsINBSrSco71c+PdC+a6
afeG+/MteKSV4pCU163g46UFbX5igfa8vDPEbxDeFcGGGnNB1dunvp+HzsdTWEuH
nijXZzFV6S0DJQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:27 2025 by rpki-client