Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: HFiEMBFPyLolRboOwhLYvA1ATW1zJFIS7+k49LNJKkk=
Subject key identifier: 6C:6C:09:DD:E4:D5:58:23:97:35:99:6A:2C:9D:34:E6:84:6B:F1:E4
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0194BC3BD0030426734E25D0F868FA1B6EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 113A
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: g1fnrf1KotYfeJqCwlsL8D5jj12F3veuY7cDD04s+jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:03:04:26:73:4e:25:d0:f8:68:fa:1b:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=6c6c09dde4d558239735996a2c9d34e6846bf1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:dc:d6:48:e6:f1:1f:37:61:19:93:3b:39:
9d:c0:df:35:d8:c3:46:85:cc:76:9c:ff:7b:12:0c:
44:d7:d3:25:75:a3:5c:54:4b:bf:8f:d9:88:91:6b:
81:c0:7c:ff:75:4d:d1:80:4b:c9:5b:a4:89:98:60:
2e:b6:71:a9:e9:f2:11:06:fa:11:de:ec:c3:c4:93:
bb:84:19:a7:f3:f6:a5:c5:02:df:87:1d:fd:72:a8:
40:20:6c:d7:4f:ba:28:cd:21:52:b5:72:24:f7:91:
ac:e2:a4:d2:58:ad:0e:22:97:01:81:57:f5:66:63:
07:cd:21:11:c3:12:9b:d3:04:be:c7:3c:0a:42:d9:
0d:03:63:12:cc:ae:83:3f:ec:d9:ee:1d:2a:3d:2d:
fb:98:af:b3:52:33:96:d9:87:4c:f8:b9:24:1d:f1:
f9:e4:05:f6:22:0d:53:91:25:0c:17:a9:1c:9f:00:
90:9e:7d:7b:40:2a:1c:c9:e8:59:b2:9c:b2:3a:ad:
9e:1b:55:a8:00:17:0e:0d:cf:b1:67:1e:c8:5a:be:
57:04:c8:d6:dc:23:6b:d4:03:00:52:57:09:02:2a:
09:54:9d:41:66:d2:20:0a:26:8f:33:f7:7f:39:27:
8c:5d:9f:40:88:55:82:fd:0c:18:7c:49:a1:33:1c:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6C:09:DD:E4:D5:58:23:97:35:99:6A:2C:9D:34:E6:84:6B:F1:E4
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:19:e2:77:82:bc:aa:2f:8e:8f:63:15:5a:2e:1d:54:7b:
e7:0f:81:28:99:8e:1d:37:64:0f:e7:0c:0a:e0:62:c6:d9:e5:
bc:b2:50:fa:7b:93:cf:76:59:7f:36:5f:01:63:e6:9a:e8:b4:
3d:fc:4b:f4:d6:b9:ae:2b:b9:9b:09:f8:29:fa:8f:7a:43:0a:
19:c5:0c:6d:d1:a7:a1:f6:21:9d:e7:5f:ae:db:ca:b7:97:59:
9c:7c:67:b6:b6:87:37:1c:d6:e8:0e:fa:6f:73:8a:08:22:35:
f0:a2:1a:9b:6c:9d:fe:49:8a:c5:63:c8:a7:70:94:f9:93:03:
dc:f0:cb:72:37:8f:eb:17:43:2f:e5:ab:d6:96:17:1a:62:fe:
ff:54:fa:9e:c2:c6:59:32:75:76:ea:14:6d:c4:b3:6e:34:94:
ad:63:fd:5e:c3:95:e0:b2:a4:57:2d:e7:98:e3:b5:a7:6b:03:
f0:9b:31:e2:c3:25:cb:9f:7b:f6:a3:03:b3:c1:31:ed:56:20:
bd:33:84:f7:b3:82:36:d8:22:78:8c:b6:cf:57:66:3f:26:fe:
31:cd:5c:0b:d8:05:0e:6d:1a:3e:98:f6:c7:04:be:35:8a:f1:
19:a7:86:4d:fb:75:48:d0:33:2d:2f:0f:2e:4f:36:50:80:06:
27:90:a2:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9ADBCZzTiXQ+Gj6G27lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWE0YWRlZTgwYjA2NTE5Y2U0MGRkM2QxM2YyOGJhOWY1
NzU5NTcwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
Eyg2YzZjMDlkZGU0ZDU1ODIzOTczNTk5NmEyYzlkMzRlNjg0NmJmMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J7c1kjm8R83YRmTOzmdwN812MNG
hcx2nP97EgxE19MldaNcVEu/j9mIkWuBwHz/dU3RgEvJW6SJmGAutnGp6fIRBvoR
3uzDxJO7hBmn8/alxQLfhx39cqhAIGzXT7oozSFStXIk95Gs4qTSWK0OIpcBgVf1
ZmMHzSERwxKb0wS+xzwKQtkNA2MSzK6DP+zZ7h0qPS37mK+zUjOW2YdM+LkkHfH5
5AX2Ig1TkSUMF6kcnwCQnn17QCocyehZspyyOq2eG1WoABcODc+xZx7IWr5XBMjW
3CNr1AMAUlcJAioJVJ1BZtIgCiaPM/d/OSeMXZ9AiFWC/QwYfEmhMxwKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxsCd3k1VgjlzWZaiydNOaEa/HkMB8GA1UdIwQY
MBaAFM3qSt7oCwZRnOQN09E/KLqfV1lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUt
MDU2YzdiZjZkN2Q4LzEvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUtMDU2YzdiZjZkN2Q4
LzEvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0gZ4neC
vKovjo9jFVouHVR75w+BKJmOHTdkD+cMCuBixtnlvLJQ+nuTz3ZZfzZfAWPmmui0
PfxL9Na5riu5mwn4KfqPekMKGcUMbdGnofYhnedfrtvKt5dZnHxntraHNxzW6A76
b3OKCCI18KIam2yd/kmKxWPIp3CU+ZMD3PDLcjeP6xdDL+Wr1pYXGmL+/1T6nsLG
WTJ1duoUbcSzbjSUrWP9XsOV4LKkVy3nmOO1p2sD8Jsx4sMly5979qMDs8Ex7VYg
vTOE97OCNtgieIy2z1dmPyb+Mc1cC9gFDm0aPpj2xwS+NYrxGaeGTft1SNAzLS8P
Lk82UIAGJ5CiuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:25 2025 by rpki-client