Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: 4pmgD7xa15mf3RiRzBv5twVNtn5SEiNsApH20j/t4I0=
Subject key identifier: E7:1E:20:91:C0:8C:56:17:09:52:5E:F3:69:13:7E:43:93:D1:8E:A8
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 0194BD4E6DC36104A50E21724FD2905B6E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 0BF5
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: csLlB2_7ZU9INE3L_6ugKHhSDQQ.roa (hash: BxnQAxFWJTM/5t57UZc7jxNqT2v2r8SrFwjEv7ulSZQ=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: bY06WQOW/jWgDW44jGr9ZcDeyB7gbrfKGOpMRxs9uCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6d:c3:61:04:a5:0e:21:72:4f:d2:90:5b:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=e71e2091c08c561709525ef369137e4393d18ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:f9:da:d1:87:3d:0f:ac:81:56:55:ff:32:
cb:7b:18:51:77:f0:99:18:b9:20:b1:62:b4:81:cc:
4a:4e:ee:79:b4:9c:e1:8c:e7:82:7f:c2:8a:73:7d:
b1:01:91:99:75:9e:0b:48:6d:f3:8f:16:15:5a:18:
0d:51:86:b2:b6:ee:0c:8e:70:69:5a:71:47:75:26:
31:64:ba:70:c4:cc:4b:ce:36:0c:52:f2:d4:ad:e6:
be:ed:a4:63:61:e5:8e:45:e8:6d:de:06:68:9f:c8:
77:7e:7a:5e:14:e0:b7:5c:34:e8:7a:fc:03:10:dd:
63:dd:c9:09:3f:9d:ec:63:85:d8:7c:7f:f9:c9:04:
92:f3:8a:5d:19:97:2f:64:28:38:6e:83:e4:7b:9e:
81:b5:31:85:95:16:51:fc:19:60:f0:50:51:51:2b:
b5:7c:aa:ca:97:ee:83:c2:c9:1a:c7:71:63:a3:64:
ea:13:a0:6f:89:20:ed:69:36:15:cb:66:37:f0:f6:
74:ee:15:86:76:c3:03:1f:64:ca:ce:a1:6e:f2:90:
6d:b7:74:5b:08:b2:f9:7d:c7:cc:a3:94:33:df:0d:
ec:b3:c6:5a:05:ff:09:f6:a5:e4:a8:fd:b2:45:94:
09:e8:c0:8b:0b:ce:0d:f1:b5:c6:e2:54:d1:ed:ab:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1E:20:91:C0:8C:56:17:09:52:5E:F3:69:13:7E:43:93:D1:8E:A8
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0a:11:2b:8d:6a:13:5c:b2:d4:0a:63:5d:28:36:4f:58:8a:
fe:6f:dd:ea:77:e4:f0:bb:70:05:f5:56:8b:13:3a:f5:06:e4:
8a:b6:8b:de:b4:bd:49:01:bb:6d:c7:3f:61:e2:39:86:46:5c:
e9:a7:db:ac:0f:1f:9c:1f:a3:d4:a3:68:bd:90:c9:0a:17:2f:
80:fa:f2:3a:10:8a:a7:eb:5b:bf:25:a8:77:8b:d7:98:eb:56:
ca:49:d9:de:84:78:7e:36:c6:0f:7b:27:d1:e7:ab:3f:1b:0a:
c8:06:ef:d5:03:04:82:2b:ee:9f:df:34:a1:83:b2:04:eb:f1:
56:a6:fc:ac:f3:6f:34:c8:92:12:a3:8e:97:e5:2c:5c:67:fa:
35:b5:0b:2e:17:b6:f6:b2:ac:02:f6:bb:3e:c2:fb:94:5e:d7:
dc:ad:24:98:9a:17:42:5c:31:ad:12:76:27:24:c3:db:32:9d:
83:d4:05:86:8a:fd:80:66:da:30:fb:0a:ca:6c:95:73:32:10:
dd:77:7d:a1:02:ef:fa:0c:4b:75:46:70:54:bb:08:d8:89:9f:
fd:0b:5a:fb:87:80:7e:7e:2d:09:7a:4a:e9:a5:e2:00:19:79:
c2:38:0d:92:b6:40:b6:40:e1:1a:ec:59:58:c7:6d:2a:b0:c1:
c8:fa:1d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tm3DYQSlDiFyT9KQW258MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZTU3ZGM4MjM0ZGY1ZjU5ZDY3ZmRjNjg1NmJiMjYyZTcx
OTNmNTIwHhcNMjUwMTMxMTcwMDIxWhcNMjUwMjAxMTcwMDIxWjAzMTEwLwYDVQQD
EyhlNzFlMjA5MWMwOGM1NjE3MDk1MjVlZjM2OTEzN2U0MzkzZDE4ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tD52tGHPQ+sgVZV/zLLexhRd/CZ
GLkgsWK0gcxKTu55tJzhjOeCf8KKc32xAZGZdZ4LSG3zjxYVWhgNUYaytu4MjnBp
WnFHdSYxZLpwxMxLzjYMUvLUrea+7aRjYeWOReht3gZon8h3fnpeFOC3XDToevwD
EN1j3ckJP53sY4XYfH/5yQSS84pdGZcvZCg4boPke56BtTGFlRZR/Blg8FBRUSu1
fKrKl+6Dwskax3Fjo2TqE6BviSDtaTYVy2Y38PZ07hWGdsMDH2TKzqFu8pBtt3Rb
CLL5fcfMo5Qz3w3ss8ZaBf8J9qXkqP2yRZQJ6MCLC84N8bXG4lTR7at6ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOceIJHAjFYXCVJe82kTfkOT0Y6oMB8GA1UdIwQY
MBaAFMzlfcgjTfX1nWf9xoVrsmLnGT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjkt
NDAyZjFmYjg0OGNmLzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjktNDAyZjFmYjg0OGNm
LzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawoRK41q
E1yy1ApjXSg2T1iK/m/d6nfk8LtwBfVWixM69QbkiraL3rS9SQG7bcc/YeI5hkZc
6afbrA8fnB+j1KNovZDJChcvgPryOhCKp+tbvyWod4vXmOtWyknZ3oR4fjbGD3sn
0eerPxsKyAbv1QMEgivun980oYOyBOvxVqb8rPNvNMiSEqOOl+UsXGf6NbULLhe2
9rKsAva7PsL7lF7X3K0kmJoXQlwxrRJ2JyTD2zKdg9QFhor9gGbaMPsKymyVczIQ
3Xd9oQLv+gxLdUZwVLsI2Imf/Qta+4eAfn4tCXpK6aXiABl5wjgNkrZAtkDhGuxZ
WMdtKrDByPodoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:07 2025 by rpki-client