Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: 3g/DoTMSMb/Nyh02nuMfjCVd6qpEkY5CYGRGcxPyFnc=
Subject key identifier: D9:26:D9:09:CC:D7:7E:59:48:6C:B6:D2:0D:74:46:18:86:8F:75:37
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 0194BCA9744376C00274504007718794AA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 066B
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: f2bcgaIR2INDbCdF0PiYB6eH0jTdzNjz+QjMZE/sAe8=)
2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:74:43:76:c0:02:74:50:40:07:71:87:94:aa:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=d926d909ccd77e59486cb6d20d744618868f7537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:45:e1:6e:ba:ec:99:5b:c2:90:e3:02:17:
8d:61:cb:01:45:0e:f1:9e:70:eb:1d:ae:d2:65:b6:
f9:96:de:45:9a:09:56:60:06:af:03:29:e2:26:59:
82:b9:0f:14:22:9b:13:e0:a4:44:a3:80:d1:17:dd:
b6:7d:fe:22:4c:55:1b:4c:6f:64:24:12:a4:77:51:
93:b2:79:e8:fd:96:ff:b7:fb:c1:69:b7:d5:3f:58:
62:d4:1b:7e:77:d4:b7:3e:25:48:84:ba:4b:0c:2f:
53:44:f9:93:55:82:58:3c:f5:df:b1:5c:48:63:59:
38:0f:b5:96:dc:a5:8f:df:ba:45:69:04:af:ef:33:
17:2d:ee:fd:55:0d:0d:bc:98:85:8a:2d:ef:43:75:
c4:71:ea:8f:23:81:9f:e1:d4:c1:2a:f6:b1:ee:33:
b0:ad:ef:da:77:1b:20:1b:ca:64:30:6a:2a:7c:2c:
fd:82:53:c0:5a:e7:31:a7:a6:a4:ab:a1:51:0e:f1:
97:59:7f:26:06:3b:0a:db:c3:72:23:fd:6c:72:26:
65:a7:10:83:83:5c:43:71:07:bb:72:08:3d:21:94:
24:f6:4a:92:ad:6c:92:8c:ab:b5:ef:8c:af:37:d9:
e5:08:d5:99:8d:93:eb:b9:ff:84:19:8f:2e:1c:e6:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:D9:09:CC:D7:7E:59:48:6C:B6:D2:0D:74:46:18:86:8F:75:37
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:ce:91:39:ad:3d:d8:7a:9a:da:71:f9:5f:46:f0:7b:9e:
e1:26:e1:ba:f7:55:0c:70:12:82:ac:6c:c9:ea:76:bc:53:c4:
c1:0f:25:67:7d:d0:5f:7e:a8:97:9b:8f:ab:8a:a8:57:c8:4f:
5e:96:ba:99:79:01:36:b2:a8:42:47:1f:c5:2d:62:e4:a3:d7:
fc:2d:f1:3a:52:4a:fb:c7:ef:e8:0b:48:ef:fd:48:bd:b1:6e:
98:a4:43:9d:f6:54:8f:af:94:8c:ad:46:e8:89:cd:f6:18:2b:
ad:b7:54:55:77:7c:57:0b:f0:40:79:9c:8d:05:a2:5c:bc:8b:
1d:82:22:d2:a7:bc:b1:66:c2:3a:b9:9a:08:76:8d:de:f3:4c:
4e:ff:b3:94:b6:45:8a:a8:6a:4a:63:ef:0e:d6:f9:d7:15:60:
d8:7e:b5:b5:74:fa:5f:04:4f:3b:9b:b2:1c:21:93:3b:88:88:
ff:12:8a:84:66:ce:e8:7d:33:f5:e5:76:f7:83:e6:8b:64:f5:
49:f0:0f:46:51:97:02:2f:54:1f:a4:c4:d4:47:c6:62:09:09:
0d:29:93:89:5e:6b:36:25:04:de:d7:45:21:a8:f0:ba:90:7e:
28:01:12:14:28:18:c3:c9:53:03:8c:e4:10:54:a8:4a:d6:da:
f6:89:1f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXRDdsACdFBAB3GHlKp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTUzMzYxZmY2YzAwODNmZDkzZDUyODY1MDMzMzE5ODYz
ZmJjNDYwHhcNMjUwMTMxMTQwMDA5WhcNMjUwMjAxMTQwMDA5WjAzMTEwLwYDVQQD
EyhkOTI2ZDkwOWNjZDc3ZTU5NDg2Y2I2ZDIwZDc0NDYxODg2OGY3NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLBF4W667JlbwpDjAheNYcsBRQ7x
nnDrHa7SZbb5lt5FmglWYAavAyniJlmCuQ8UIpsT4KREo4DRF922ff4iTFUbTG9k
JBKkd1GTsnno/Zb/t/vBabfVP1hi1Bt+d9S3PiVIhLpLDC9TRPmTVYJYPPXfsVxI
Y1k4D7WW3KWP37pFaQSv7zMXLe79VQ0NvJiFii3vQ3XEceqPI4Gf4dTBKvax7jOw
re/adxsgG8pkMGoqfCz9glPAWucxp6akq6FRDvGXWX8mBjsK28NyI/1sciZlpxCD
g1xDcQe7cgg9IZQk9kqSrWySjKu174yvN9nlCNWZjZPruf+EGY8uHOZWPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkm2QnM135ZSGy20g10RhiGj3U3MB8GA1UdIwQY
MBaAFGaVM2H/bACD/ZPVKGUDMxmGP7xGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQt
ZmJiN2QzMGRjZTM4LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQtZmJiN2QzMGRjZTM4
LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDbOkTmt
Pdh6mtpx+V9G8Hue4SbhuvdVDHASgqxsyep2vFPEwQ8lZ33QX36ol5uPq4qoV8hP
Xpa6mXkBNrKoQkcfxS1i5KPX/C3xOlJK+8fv6AtI7/1IvbFumKRDnfZUj6+UjK1G
6InN9hgrrbdUVXd8VwvwQHmcjQWiXLyLHYIi0qe8sWbCOrmaCHaN3vNMTv+zlLZF
iqhqSmPvDtb51xVg2H61tXT6XwRPO5uyHCGTO4iI/xKKhGbO6H0z9eV294Pmi2T1
SfAPRlGXAi9UH6TE1EfGYgkJDSmTiV5rNiUE3tdFIajwupB+KAESFCgYw8lTA4zk
EFSoStba9okfNQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:27 2025 by rpki-client