Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier: QuFBASBrUqWUCU5CsvhZ3zu1wE6Y0bX7UUz6NbEOC8U=
Subject key identifier: D1:32:B6:52:1B:85:B7:6D:5A:05:E6:5F:02:14:62:78:3F:00:40:76
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 0194BD85B938C36464790E9759F8A3B06B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number: 107E
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: A3mU2eTOFOUTMBepCDlQAL2s8h0f7pv8ME6OPVBcHHs=)
2: ZNva-8ABsvjJ6HrNFF7Xd55KW-w.roa (hash: nx2aCY2Bfbi+2/xFJXRwWrGYEeyRAMv/De92goZyeZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:38:c3:64:64:79:0e:97:59:f8:a3:b0:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=d132b6521b85b76d5a05e65f021462783f004076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:d0:63:cb:b8:91:4c:79:ad:bf:a1:12:69:
9f:09:b8:23:52:31:b3:46:d0:0b:a7:86:eb:ed:bf:
39:35:33:42:5e:d1:c2:b1:d6:07:a3:c9:83:b9:7a:
9d:8e:2b:e1:cb:4b:77:8c:49:eb:b3:b2:a5:a4:b5:
d4:af:ac:e5:89:f7:e6:71:a6:32:84:eb:7d:f6:33:
62:d6:b6:63:14:0c:21:8b:36:af:94:c3:3f:7c:f5:
32:64:77:eb:03:b4:0b:1a:aa:a5:54:12:85:54:89:
d0:26:d7:5e:9a:0d:d2:10:8d:c7:5b:73:76:f2:3f:
c1:28:90:93:4e:b7:36:93:85:e7:c2:10:31:f6:37:
67:54:0e:c8:8d:4f:24:e5:4c:ee:9f:9d:20:93:01:
cb:0e:91:97:6f:e3:6d:6e:40:7b:aa:ae:0f:bd:db:
95:5a:5a:49:9f:65:d8:75:22:27:00:2f:41:93:04:
d8:a7:94:b0:fa:c4:b1:d2:6b:03:39:db:6f:f5:70:
dd:43:91:3d:57:93:07:5c:48:99:fa:8f:fc:b1:cf:
b6:c4:af:9c:ee:9d:9a:2e:8d:13:69:ec:3c:48:3f:
3c:bc:ef:f3:34:3c:9a:b5:9d:ab:e1:72:81:95:36:
49:0b:26:d6:d3:35:7e:13:47:90:84:4b:92:32:9c:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:B6:52:1B:85:B7:6D:5A:05:E6:5F:02:14:62:78:3F:00:40:76
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:58:13:bc:e8:31:88:20:12:20:dc:d0:2c:40:b5:05:5e:7c:
a5:2c:a1:de:ce:05:2e:1b:34:71:c4:96:ba:80:c4:03:74:8c:
cf:1b:b9:45:16:7a:a5:16:8a:47:25:b4:20:ae:7d:f7:a5:ae:
47:44:00:85:b6:cc:70:3f:a6:a9:0b:26:f5:de:10:a9:93:48:
b0:ed:c5:9f:56:f3:eb:18:80:21:33:06:2c:a4:47:88:93:a6:
1a:8c:59:5f:5e:e3:27:2d:10:22:ab:4a:b3:ef:0e:fa:da:72:
56:e6:6e:1c:5c:ac:d1:48:b4:a4:f5:2a:fa:6b:0e:b8:97:3d:
5d:df:0f:75:b4:7b:23:fd:e0:88:ec:49:43:08:ae:08:65:d8:
d3:53:5c:b6:20:96:1e:23:f9:7d:5b:0e:99:5a:b4:eb:eb:d2:
64:dd:0d:cd:30:a1:e5:ec:45:83:c8:4a:9c:b7:63:39:d9:3a:
d4:78:08:a2:1b:b1:f1:38:db:1b:a9:f4:ba:ec:b6:dc:7c:dd:
61:98:b4:a9:ef:f6:42:42:2b:40:a9:89:3b:ea:0f:63:b9:c9:
c6:45:64:b1:a8:5a:2b:bd:52:79:05:85:d5:d6:18:44:8e:26:
70:d0:91:ba:18:c1:48:ad:2d:f5:73:63:3f:33:2c:e2:ce:98:
2e:c9:ed:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbk4w2RkeQ6XWfijsGuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzFlOTYwY2QwNjEwMzliM2IyN2ZkMjVkNDE2MDc3MWM0
OThiYWIwHhcNMjUwMTMxMTgwMDQ0WhcNMjUwMjAxMTgwMDQ0WjAzMTEwLwYDVQQD
EyhkMTMyYjY1MjFiODViNzZkNWEwNWU2NWYwMjE0NjI3ODNmMDA0MDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3zQY8u4kUx5rb+hEmmfCbgjUjGz
RtALp4br7b85NTNCXtHCsdYHo8mDuXqdjivhy0t3jEnrs7KlpLXUr6zliffmcaYy
hOt99jNi1rZjFAwhizavlMM/fPUyZHfrA7QLGqqlVBKFVInQJtdemg3SEI3HW3N2
8j/BKJCTTrc2k4XnwhAx9jdnVA7IjU8k5Uzun50gkwHLDpGXb+NtbkB7qq4PvduV
WlpJn2XYdSInAC9BkwTYp5Sw+sSx0msDOdtv9XDdQ5E9V5MHXEiZ+o/8sc+2xK+c
7p2aLo0Taew8SD88vO/zNDyatZ2r4XKBlTZJCybW0zV+E0eQhEuSMpxBUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEytlIbhbdtWgXmXwIUYng/AEB2MB8GA1UdIwQY
MBaAFGQx6WDNBhA5s7J/0l1BYHccSYurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTct
ZTlkYWY3OWViNzVlLzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTctZTlkYWY3OWViNzVl
LzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVgTvOgx
iCASINzQLEC1BV58pSyh3s4FLhs0ccSWuoDEA3SMzxu5RRZ6pRaKRyW0IK5996Wu
R0QAhbbMcD+mqQsm9d4QqZNIsO3Fn1bz6xiAITMGLKRHiJOmGoxZX17jJy0QIqtK
s+8O+tpyVuZuHFys0Ui0pPUq+msOuJc9Xd8PdbR7I/3giOxJQwiuCGXY01NctiCW
HiP5fVsOmVq06+vSZN0NzTCh5exFg8hKnLdjOdk61HgIohux8TjbG6n0uuy23Hzd
YZi0qe/2QkIrQKmJO+oPY7nJxkVksahaK71SeQWF1dYYRI4mcNCRuhjBSK0t9XNj
PzMs4s6YLsnttw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:40 2025 by rpki-client