Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: wzoBG/a8Fc0iCfaF0NRCx7UzddRbRw/0Uxl/p3l7DRw=
Subject key identifier: AC:8F:01:5F:2C:5F:3E:FD:44:F6:CC:A3:2D:02:F0:61:76:85:20:4C
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 0194BD17730DD1C3FC7F8A2A7E842B92E45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 0E93
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: R5yup0aDNFLLen2FkH5MGWe4FC6wRK1B5sIdcjCBHsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:73:0d:d1:c3:fc:7f:8a:2a:7e:84:2b:92:e4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=ac8f015f2c5f3efd44f6cca32d02f0617685204c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:00:dc:cb:da:fc:2e:93:a2:cd:44:4f:60:
ad:11:d8:f3:01:7a:23:b5:cf:88:54:e3:02:2a:a8:
14:a6:e8:d9:c1:d0:60:93:a6:ca:75:42:2e:f9:1a:
3d:27:f3:ab:26:eb:c4:05:a6:d6:88:f5:dc:3e:2d:
aa:b7:95:5d:bb:18:78:93:72:5d:3f:92:43:d0:c1:
9f:98:af:61:a0:da:c8:69:51:00:1d:38:48:7d:61:
b1:34:8e:7b:17:ca:15:06:c3:a0:63:42:18:f9:fb:
6d:7f:87:63:ad:d7:16:98:99:e6:8b:ba:54:81:40:
46:f8:10:65:ee:f0:c3:f7:d6:00:5f:9a:5d:5d:fd:
5f:d0:d4:ac:ea:0b:6b:72:a2:24:50:dd:2c:44:82:
bf:f0:79:a7:93:52:1f:bb:61:9f:0f:04:d3:99:59:
ca:08:46:6e:9a:3c:bf:d4:01:9b:ca:1a:df:39:0a:
b5:1d:9d:44:40:0b:e3:b3:68:95:ad:13:11:90:66:
f6:3d:49:09:8e:5b:de:b4:cd:43:9f:61:e0:2c:ae:
e4:81:a9:b9:5a:a7:b5:14:00:02:aa:dc:c4:b1:12:
2b:9d:9a:4d:d8:b1:26:a6:f3:43:52:04:fe:6a:5a:
1d:c7:7d:ed:c0:62:44:d7:29:a1:4a:d6:59:42:6a:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:01:5F:2C:5F:3E:FD:44:F6:CC:A3:2D:02:F0:61:76:85:20:4C
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2b:19:2e:47:38:bf:02:4f:18:ab:e6:a2:dc:08:0d:53:1b:
e5:3d:b7:77:06:67:27:5a:fc:ca:13:b8:9d:b6:a1:bd:0d:47:
47:45:57:26:a7:bb:1f:75:74:61:61:eb:21:a8:7c:8b:d6:a3:
86:45:80:e6:7c:76:7b:cc:1a:c4:8f:1a:0b:72:da:e8:47:c4:
ba:53:90:62:28:4d:e5:24:64:08:7c:6e:ff:61:b0:f0:82:9d:
f0:e1:ab:cc:57:22:20:61:9a:61:44:be:40:18:c1:32:5f:9d:
b6:eb:92:37:1c:24:cd:6c:0b:aa:18:b0:1b:e8:98:57:5b:8f:
7f:00:96:3c:00:71:e1:c4:6f:17:03:8f:2b:0b:ef:b2:e3:86:
9f:9d:cb:27:81:d1:1f:03:c1:c0:1a:60:a9:0e:42:fd:c5:4a:
f3:3c:60:4a:8c:1b:15:b2:30:59:61:d3:13:df:52:9e:c0:7d:
68:8a:40:0a:66:d4:28:bd:46:53:4e:d0:5c:16:88:0c:bb:07:
11:a1:c8:9e:5a:dc:be:cd:18:51:d4:13:de:aa:bc:1c:19:9d:
44:2a:43:6d:9c:91:ff:39:cd:58:0b:44:d6:48:de:b7:40:47:
6e:0c:c5:43:04:e1:f6:82:5f:4b:31:b2:46:f3:9f:3a:81:6e:
38:c8:24:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3MN0cP8f4oqfoQrkuRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjg0ZTQ3NDljY2NkNTgzZmVmYzc3OTdjM2Q2N2IxMDg5
OGExODgwHhcNMjUwMTMxMTYwMDE4WhcNMjUwMjAxMTYwMDE4WjAzMTEwLwYDVQQD
EyhhYzhmMDE1ZjJjNWYzZWZkNDRmNmNjYTMyZDAyZjA2MTc2ODUyMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgYA3Mva/C6Tos1ET2CtEdjzAXoj
tc+IVOMCKqgUpujZwdBgk6bKdUIu+Ro9J/OrJuvEBabWiPXcPi2qt5Vduxh4k3Jd
P5JD0MGfmK9hoNrIaVEAHThIfWGxNI57F8oVBsOgY0IY+fttf4djrdcWmJnmi7pU
gUBG+BBl7vDD99YAX5pdXf1f0NSs6gtrcqIkUN0sRIK/8Hmnk1Ifu2GfDwTTmVnK
CEZumjy/1AGbyhrfOQq1HZ1EQAvjs2iVrRMRkGb2PUkJjlvetM1Dn2HgLK7kgam5
Wqe1FAACqtzEsRIrnZpN2LEmpvNDUgT+alodx33twGJE1ymhStZZQmrFYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyPAV8sXz79RPbMoy0C8GF2hSBMMB8GA1UdIwQY
MBaAFM74TkdJzM1YP+/HeXw9Z7EImKGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2Qt
ZGFiNmUyYzVmZGQ5LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2QtZGFiNmUyYzVmZGQ5
LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSsZLkc4
vwJPGKvmotwIDVMb5T23dwZnJ1r8yhO4nbahvQ1HR0VXJqe7H3V0YWHrIah8i9aj
hkWA5nx2e8waxI8aC3La6EfEulOQYihN5SRkCHxu/2Gw8IKd8OGrzFciIGGaYUS+
QBjBMl+dtuuSNxwkzWwLqhiwG+iYV1uPfwCWPABx4cRvFwOPKwvvsuOGn53LJ4HR
HwPBwBpgqQ5C/cVK8zxgSowbFbIwWWHTE99SnsB9aIpACmbUKL1GU07QXBaIDLsH
EaHInlrcvs0YUdQT3qq8HBmdRCpDbZyR/znNWAtE1kjet0BHbgzFQwTh9oJfSzGy
RvOfOoFuOMgknA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:28 2025 by rpki-client