Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: CvDI5PE22ToCTCHaLeOrFYTeVyFlsVkoSe7YEb5fnSU=
Subject key identifier: EC:8B:B7:C6:C5:D5:AF:98:88:9A:85:5E:BF:60:E3:DF:46:E9:02:6D
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 0194BD857FDE3B5B1333ED035206EB6D2F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 014C
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: bXYvGLVjjW/X8giidqWtyAmfmTEO+1uT3hoijmPQJ5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7f:de:3b:5b:13:33:ed:03:52:06:eb:6d:2f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=ec8bb7c6c5d5af98889a855ebf60e3df46e9026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:05:58:3a:e9:74:09:82:e7:6e:0b:ee:ba:
87:4e:ad:f4:ef:13:98:a3:95:f4:15:8e:19:81:e8:
e3:e7:25:57:70:f8:53:79:cd:53:1f:99:f3:3e:47:
88:51:ef:32:a8:2d:2e:e4:78:7a:0a:ea:46:d4:99:
cd:d6:bb:75:69:59:39:5e:05:95:c3:bb:3f:c2:f8:
68:a0:fe:df:77:8f:1c:df:28:03:d2:5c:8e:ea:83:
51:a3:f0:51:13:a6:91:32:3c:8a:fc:59:d6:de:f0:
6b:e1:d1:19:91:c3:4a:ea:d1:ac:eb:66:a2:a3:87:
6d:09:d3:35:5a:7f:84:f0:81:38:9b:7d:36:6f:2f:
a2:fb:8c:2d:94:24:0d:00:6a:cd:e9:e1:0e:69:fe:
f2:4c:94:ac:15:5d:ee:51:99:08:54:8f:50:d0:5b:
33:5b:65:b9:dc:08:58:90:e6:80:9d:38:47:be:db:
c1:26:ba:a1:ba:de:a0:09:a9:a8:44:64:9f:5e:a0:
6f:d3:0d:8a:51:6e:51:4c:88:47:0e:ae:81:3c:f4:
ff:94:80:6b:80:97:94:07:be:33:3f:a8:0f:4d:40:
14:82:9d:93:3c:08:37:cc:ab:fc:67:0b:d6:87:d5:
0f:52:73:95:b8:e8:fc:bd:ee:e5:c4:99:2d:d8:7a:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:B7:C6:C5:D5:AF:98:88:9A:85:5E:BF:60:E3:DF:46:E9:02:6D
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b9:79:a9:61:b3:fc:99:9d:72:17:a9:45:22:fa:2a:c1:aa:
b6:ee:35:5d:ba:50:1e:9f:ed:14:cd:03:c5:e8:fe:91:63:1f:
b9:6a:f7:0b:46:e5:3e:c6:ad:a7:3a:7d:00:46:6b:a6:44:95:
d1:d8:e6:2f:78:11:af:01:6f:97:0e:c7:f0:29:cc:b9:f0:36:
68:89:08:9c:79:b1:ec:05:09:98:df:a4:be:8f:3b:5d:17:23:
21:f5:e8:31:2d:12:fb:87:66:1e:c6:a9:7b:6d:05:be:ce:b0:
8e:9d:7a:52:bf:88:0d:34:2a:75:3e:88:4e:2d:cd:3d:d1:27:
cb:1e:3b:53:f4:ea:2a:6d:c2:bc:53:d6:88:5f:de:96:8a:96:
52:d0:af:88:13:f8:c6:22:1e:c4:d2:7b:a5:06:94:b6:05:79:
4d:b3:d9:ec:9f:d9:3a:57:1c:c1:7b:61:a1:be:d6:1c:ec:07:
3d:eb:7b:f2:53:ad:2e:5f:c0:89:cb:37:c5:eb:3f:e1:78:87:
17:f9:be:87:91:3f:57:b4:82:c9:f0:20:49:45:b4:77:f7:53:
41:a1:59:22:70:89:35:aa:1e:b0:27:9c:8b:52:bd:d3:7f:bc:
5a:9b:a1:09:91:5d:c3:85:56:89:87:98:ad:90:36:34:05:98:
94:6d:b4:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hX/eO1sTM+0DUgbrbS9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkY2RmNDhmNWVhNzZjNTBhNzE3ZTEwNTgwNDhjYmFmNjdm
YjI0OTIwHhcNMjUwMTMxMTgwMDMwWhcNMjUwMjAxMTgwMDMwWjAzMTEwLwYDVQQD
EyhlYzhiYjdjNmM1ZDVhZjk4ODg5YTg1NWViZjYwZTNkZjQ2ZTkwMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QIFWDrpdAmC524L7rqHTq307xOY
o5X0FY4Zgejj5yVXcPhTec1TH5nzPkeIUe8yqC0u5Hh6CupG1JnN1rt1aVk5XgWV
w7s/wvhooP7fd48c3ygD0lyO6oNRo/BRE6aRMjyK/FnW3vBr4dEZkcNK6tGs62ai
o4dtCdM1Wn+E8IE4m302by+i+4wtlCQNAGrN6eEOaf7yTJSsFV3uUZkIVI9Q0Fsz
W2W53AhYkOaAnThHvtvBJrqhut6gCamoRGSfXqBv0w2KUW5RTIhHDq6BPPT/lIBr
gJeUB74zP6gPTUAUgp2TPAg3zKv8ZwvWh9UPUnOVuOj8ve7lxJkt2Hrj9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyLt8bF1a+YiJqFXr9g499G6QJtMB8GA1UdIwQY
MBaAFM3N9I9ep2xQpxfhBYBIy69n+ySSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWIt
MjVhMWFiNWQxODkzLzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWItMjVhMWFiNWQxODkz
LzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbl5qWGz
/JmdchepRSL6KsGqtu41XbpQHp/tFM0Dxej+kWMfuWr3C0blPsatpzp9AEZrpkSV
0djmL3gRrwFvlw7H8CnMufA2aIkInHmx7AUJmN+kvo87XRcjIfXoMS0S+4dmHsap
e20Fvs6wjp16Ur+IDTQqdT6ITi3NPdEnyx47U/TqKm3CvFPWiF/eloqWUtCviBP4
xiIexNJ7pQaUtgV5TbPZ7J/ZOlccwXthob7WHOwHPet78lOtLl/Aics3xes/4XiH
F/m+h5E/V7SCyfAgSUW0d/dTQaFZInCJNaoesCeci1K903+8WpuhCZFdw4VWiYeY
rZA2NAWYlG201Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:09 2025 by rpki-client