Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: Ch9YVmnqPPfsdM1huxP7epbdIBwpIp7WPY0swkaA//U=
Subject key identifier: 2C:5A:0D:C8:B0:F1:43:5E:3E:69:F7:32:F1:5A:46:6D:B1:02:5E:DB
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 0194BC3BF64C2CBE5161ADFDEF5FC2D38CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 1340
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: dnKVndNQXATs3qWc1CkRQOuRSRvp7c/a+uzI4O7eKfE=)
2: hgdnPYifylvEbRhPG5rcZMHgm-E.roa (hash: kVaA/BoHtOWfVS1UNUVlSYGZdZvXh/V05GtETEpyoE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f6:4c:2c:be:51:61:ad:fd:ef:5f:c2:d3:8c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=2c5a0dc8b0f1435e3e69f732f15a466db1025edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:01:b3:e0:40:8b:6c:eb:18:b3:64:88:13:
e3:c9:15:0a:05:37:02:69:c5:7b:21:b7:a6:f0:2d:
ff:97:27:6f:11:cd:81:63:87:16:9a:4b:39:1f:c3:
83:0a:55:50:5f:56:b0:3f:70:d9:fe:00:78:5b:00:
4c:b4:31:71:df:29:b7:34:c3:11:26:7a:7d:7f:25:
d5:9c:c5:fb:5e:0f:51:77:2f:9e:f9:26:6a:f2:a1:
4a:8a:ed:68:90:08:64:1b:33:c3:91:5a:15:6c:8a:
e5:bc:93:81:4c:0d:cf:91:83:d0:4e:a9:26:e9:65:
eb:a8:5e:3d:8b:cb:13:5b:82:f6:a5:f4:34:7b:6f:
7b:a3:66:99:af:e4:2c:d5:e3:0f:9b:43:56:48:94:
51:44:4d:67:ec:82:c2:70:02:19:30:3c:29:79:68:
c0:2b:67:aa:84:20:1e:62:22:61:b1:6a:a0:8e:cc:
7a:83:f4:1b:9b:06:3c:69:57:be:18:63:71:2b:21:
79:d6:e0:76:a7:54:a7:e8:e1:c6:32:75:03:63:4d:
23:3e:ad:9d:80:cd:5a:7c:e3:34:b5:0a:0b:af:b5:
cb:e0:8e:74:19:0a:c4:7e:25:63:98:81:88:ad:ad:
b6:99:03:96:c6:c0:46:d6:1a:7c:fb:82:fd:01:d2:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5A:0D:C8:B0:F1:43:5E:3E:69:F7:32:F1:5A:46:6D:B1:02:5E:DB
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:b3:50:57:e5:88:15:9c:7e:1d:8b:62:a7:99:8c:f9:91:
b2:f8:33:ee:51:33:48:60:5a:72:f9:1f:56:8f:fb:50:e0:4f:
d6:b2:17:ee:18:09:cf:33:94:68:ec:84:ac:c0:df:e3:50:74:
72:83:78:44:62:cf:14:9e:9b:0e:8b:d7:4f:44:49:76:9c:ae:
1a:b2:22:12:b8:63:78:e8:74:ea:79:a1:68:a1:a1:66:01:00:
dc:78:f2:13:1e:f0:af:44:18:15:f7:a2:98:a1:56:68:4e:16:
e2:b9:62:d3:30:f5:4a:bc:b1:a6:1c:e0:3c:bf:9e:da:e1:5a:
63:88:84:b3:3a:d5:30:78:e3:54:19:26:73:2b:67:25:60:b9:
81:94:4d:94:23:f7:36:3a:a6:11:4b:c4:a4:d2:20:51:49:5c:
d8:84:53:2a:64:5e:44:93:7e:9f:0a:0a:c5:f5:a1:fd:8f:59:
13:1f:5d:95:8c:f7:5e:16:26:b6:ec:1d:e6:aa:cd:12:af:3d:
d0:d1:8e:6e:1e:1f:ab:da:7d:63:16:76:2f:40:74:8e:73:60:
b7:98:a8:67:dc:82:ac:9e:05:88:d7:c0:c3:87:35:21:6a:40:
d9:ff:ad:99:fa:53:47:8b:10:bd:ec:d0:8f:92:93:c5:f9:5c:
74:6c:1f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/ZMLL5RYa3971/C04zwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjMxZGNkNmJiNTMwODAyOWM0MjczMjMwNTE0ZjcyNmIx
Yjg2YmEwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
EygyYzVhMGRjOGIwZjE0MzVlM2U2OWY3MzJmMTVhNDY2ZGIxMDI1ZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJABs+BAi2zrGLNkiBPjyRUKBTcC
acV7Ibem8C3/lydvEc2BY4cWmks5H8ODClVQX1awP3DZ/gB4WwBMtDFx3ym3NMMR
Jnp9fyXVnMX7Xg9Rdy+e+SZq8qFKiu1okAhkGzPDkVoVbIrlvJOBTA3PkYPQTqkm
6WXrqF49i8sTW4L2pfQ0e297o2aZr+Qs1eMPm0NWSJRRRE1n7ILCcAIZMDwpeWjA
K2eqhCAeYiJhsWqgjsx6g/QbmwY8aVe+GGNxKyF51uB2p1Sn6OHGMnUDY00jPq2d
gM1afOM0tQoLr7XL4I50GQrEfiVjmIGIra22mQOWxsBG1hp8+4L9AdIwBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxaDciw8UNePmn3MvFaRm2xAl7bMB8GA1UdIwQY
MBaAFGSzHc1rtTCAKcQnMjBRT3JrG4a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQt
NDRhYjY4OWUxZDRkLzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQtNDRhYjY4OWUxZDRk
LzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQmzUFfl
iBWcfh2LYqeZjPmRsvgz7lEzSGBacvkfVo/7UOBP1rIX7hgJzzOUaOyErMDf41B0
coN4RGLPFJ6bDovXT0RJdpyuGrIiErhjeOh06nmhaKGhZgEA3HjyEx7wr0QYFfei
mKFWaE4W4rli0zD1SryxphzgPL+e2uFaY4iEszrVMHjjVBkmcytnJWC5gZRNlCP3
NjqmEUvEpNIgUUlc2IRTKmReRJN+nwoKxfWh/Y9ZEx9dlYz3XhYmtuwd5qrNEq89
0NGObh4fq9p9YxZ2L0B0jnNgt5ioZ9yCrJ4FiNfAw4c1IWpA2f+tmfpTR4sQvezQ
j5KTxflcdGwfUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:39 2025 by rpki-client