Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier: iryOOLnsooiB20Xlr9z9RAXJoaKOWOc29wqn36soI7I=
Subject key identifier: 77:3D:34:3C:9D:99:AB:84:9A:F0:BD:DB:E7:DC:09:DE:5F:E3:B3:B1
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 0194BC0505AC31F4C67DE9C7CB26B4560BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number: 0449
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=)
2: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=)
3: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=)
4: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=)
5: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: dA3LVU1bHQxw2oqJovO68qKToAOf8SpRIhqbf2tCNkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:ac:31:f4:c6:7d:e9:c7:cb:26:b4:56:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=773d343c9d99ab849af0bddbe7dc09de5fe3b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:a1:08:04:46:65:ee:b5:6d:1a:64:16:e4:
d7:91:a1:3b:49:ce:9b:85:17:a3:3f:50:aa:0f:5a:
be:12:c5:63:f2:15:76:d9:4e:3e:cf:1b:09:26:ef:
07:eb:4c:b8:28:75:6c:72:d8:e5:d9:aa:61:fa:f8:
d2:7b:2e:ba:47:58:6f:05:66:35:c5:af:b6:ff:9d:
bc:4a:8a:d0:d0:93:f9:98:70:0a:3d:4c:6e:83:f9:
f8:2b:46:31:c5:e7:21:da:c5:ac:b0:85:14:11:54:
68:f9:76:60:19:3a:54:5a:26:17:2c:34:87:c0:72:
72:17:38:b0:c0:92:87:a6:48:bc:23:ea:b1:04:3e:
41:f0:d7:6c:5d:ae:90:18:e1:1e:ee:8c:79:8c:93:
2e:6d:e3:f9:50:7e:c5:f2:76:b1:cf:24:30:45:88:
89:52:9f:8a:a1:62:45:b9:8b:8c:58:78:3a:8b:9f:
b1:ce:a0:3a:85:8d:81:05:7b:80:eb:49:ce:3b:d8:
68:d1:44:f3:e9:cc:80:2b:d1:c9:39:5c:3d:53:8b:
e6:57:7d:03:dd:42:2e:4b:92:e7:1f:99:95:a3:7a:
a6:1a:59:77:ac:2d:bc:7f:94:1a:bd:d0:51:c3:5f:
31:cc:ff:ea:41:11:2f:48:6d:2b:32:16:4b:5f:78:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:34:3C:9D:99:AB:84:9A:F0:BD:DB:E7:DC:09:DE:5F:E3:B3:B1
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9a:5f:aa:83:78:ee:5e:8e:7a:71:af:0e:10:90:b8:6d:18:
c2:2a:17:f3:e6:c9:57:0e:b2:ab:72:61:f6:78:65:cb:3d:16:
c6:fb:b3:a9:43:f6:34:0d:b8:0f:8d:85:3d:5a:6d:46:30:03:
f0:9d:66:8f:f2:d6:77:b2:99:93:6b:29:86:d2:4a:35:a5:65:
1e:b1:a7:d5:9c:6b:c3:e7:53:1f:1e:d7:32:28:e2:45:13:1d:
51:f9:2e:6c:84:87:89:5c:92:b6:cb:45:00:e7:5c:d0:02:10:
d7:93:bf:2d:e4:f1:2a:77:b8:96:dc:07:b8:54:c7:ee:cb:5d:
36:51:6a:be:ed:4c:20:86:4c:12:be:62:32:2c:f0:95:46:cd:
21:5a:83:8c:28:6d:92:9b:45:e2:89:2d:8f:03:43:13:ea:48:
ad:e5:4f:f0:ee:07:bf:56:94:cc:80:33:e6:da:15:25:73:3c:
0d:ff:1c:75:e4:92:a7:e9:17:68:8a:79:08:65:fb:39:dc:4f:
4f:6a:38:d1:d8:ae:dc:83:49:31:cf:27:56:aa:70:26:d0:28:
aa:78:a1:ed:02:e7:d0:03:7d:2b:fa:7b:86:03:51:3e:3c:84:
08:d7:be:11:4b:bb:b2:1b:c7:f4:29:67:ec:81:c2:69:27:9a:
8a:61:08:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQWsMfTGfenHyya0VgvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk
NDBkYzYwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
Eyg3NzNkMzQzYzlkOTlhYjg0OWFmMGJkZGJlN2RjMDlkZTVmZTNiM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EmhCARGZe61bRpkFuTXkaE7Sc6b
hRejP1CqD1q+EsVj8hV22U4+zxsJJu8H60y4KHVsctjl2aph+vjSey66R1hvBWY1
xa+2/528SorQ0JP5mHAKPUxug/n4K0Yxxech2sWssIUUEVRo+XZgGTpUWiYXLDSH
wHJyFziwwJKHpki8I+qxBD5B8NdsXa6QGOEe7ox5jJMubeP5UH7F8naxzyQwRYiJ
Up+KoWJFuYuMWHg6i5+xzqA6hY2BBXuA60nOO9ho0UTz6cyAK9HJOVw9U4vmV30D
3UIuS5LnH5mVo3qmGll3rC28f5QavdBRw18xzP/qQREvSG0rMhZLX3gxVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc9NDydmauEmvC92+fcCd5f47OxMB8GA1UdIwQY
MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt
ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy
LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJpfqoN4
7l6OenGvDhCQuG0YwioX8+bJVw6yq3Jh9nhlyz0WxvuzqUP2NA24D42FPVptRjAD
8J1mj/LWd7KZk2sphtJKNaVlHrGn1Zxrw+dTHx7XMijiRRMdUfkubISHiVyStstF
AOdc0AIQ15O/LeTxKne4ltwHuFTH7stdNlFqvu1MIIZMEr5iMizwlUbNIVqDjCht
kptF4oktjwNDE+pIreVP8O4Hv1aUzIAz5toVJXM8Df8cdeSSp+kXaIp5CGX7OdxP
T2o40diu3INJMc8nVqpwJtAoqnih7QLn0AN9K/p7hgNRPjyECNe+EUu7shvH9Cln
7IHCaSeaimEI8A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:11 2025 by rpki-client