Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File: pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier: rg+cyJ8FK9Qtp2MB50TWkb93GNDBoX3G0SKjP4XEUtM=
Subject key identifier: 43:F0:21:FF:4A:C7:F0:3A:42:8E:A2:54:90:AC:A1:C5:D2:E4:85:0D
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 0194BC728A377BBCEAB72F382D466FD61686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number: 0BDF
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: a2u3P/RGRkvKptCd+r984h6Fcl43hm9wjq5S+AlE+OU=)
2: qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa (hash: 6R5f5Psj0EmX1v5BkourUurygRB3rOnwEBUagdishKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8a:37:7b:bc:ea:b7:2f:38:2d:46:6f:d6:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=43f021ff4ac7f03a428ea25490aca1c5d2e4850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:ca:8d:6d:a7:74:3d:77:c3:c2:5e:27:f3:
7e:00:e2:84:cf:26:a9:31:b7:35:90:37:69:08:2b:
2a:fd:7d:59:f8:80:a9:f5:19:7a:35:08:b2:52:ca:
c9:e1:aa:7f:51:cc:3c:41:b1:24:68:7a:19:50:86:
25:69:8f:a4:0b:66:d1:0c:e6:6c:06:24:50:48:d1:
00:a9:00:67:e9:87:e7:78:a6:bb:89:20:23:67:5b:
38:f3:25:b8:e0:c5:f3:40:1d:3f:26:ed:8f:c0:c7:
a2:3c:44:5e:0e:2d:5b:56:47:49:73:f9:29:a6:bd:
11:da:ae:4d:8d:31:9b:3a:8f:0b:e7:f1:a5:63:a7:
da:97:4b:7b:0b:20:8a:38:9e:30:54:b9:fb:35:d7:
b4:70:cb:78:e6:8f:b9:83:a3:84:b5:fd:12:b5:89:
93:bd:59:05:b6:b1:1c:53:78:c5:c7:76:35:97:aa:
57:db:21:f4:88:bc:e6:71:dd:cb:c3:7a:9f:23:83:
81:9e:b4:b3:6d:4c:26:39:3c:90:df:09:bc:d5:e9:
c6:15:9e:0f:9e:3d:d8:ee:3d:c4:16:e4:ae:b6:be:
3e:e7:35:15:75:67:1d:22:a7:2d:fc:e2:83:ee:25:
0d:39:73:48:14:85:8b:bd:08:f4:4e:24:18:90:ad:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:21:FF:4A:C7:F0:3A:42:8E:A2:54:90:AC:A1:C5:D2:E4:85:0D
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bd:bc:76:c2:97:b3:58:f8:12:75:ff:35:cb:06:98:ba:08:
c3:0f:70:80:ea:f7:81:b8:aa:35:14:17:c2:a3:8b:b7:cb:bd:
bb:77:57:aa:91:27:06:e3:b3:ce:b9:66:01:36:e2:7a:07:15:
44:52:9d:0b:b6:28:cb:17:db:4f:c1:7d:ba:e2:c3:7b:ef:fd:
ee:1d:03:c1:bd:31:5e:52:5f:f6:45:7b:91:90:46:2c:40:df:
bd:d6:6d:1e:9a:b6:47:ac:26:20:a5:0e:61:b0:3c:47:5a:e5:
d8:13:59:25:c4:cd:f0:44:b5:ab:10:d8:65:d7:f5:fe:c5:36:
55:89:1f:05:25:e4:a9:b8:08:a6:df:1b:81:cf:6b:9e:73:6a:
7a:d8:94:64:45:31:2a:e8:72:cd:c5:05:5d:63:68:0e:13:0a:
e7:06:4a:17:49:05:25:41:ae:07:26:02:07:a4:5f:0a:08:c4:
29:95:77:a8:c9:01:d7:09:9f:b2:e6:3d:75:b8:5a:3a:09:97:
5e:65:19:15:15:6c:1b:91:6d:fc:43:ef:6c:fa:83:1b:d8:a0:
d6:07:e4:df:de:b6:f8:02:55:52:25:ba:c8:63:8f:f6:ca:d6:
74:04:61:30:b6:f4:f3:6f:78:1f:81:15:a9:be:73:5e:79:86:
a1:36:2a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coo3e7zqty84LUZv1haGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBlZjIzYjQ1NmM5ZGIyMGQzMDc0MjkzMmIwMTdmYzU3
MjRlNTYwHhcNMjUwMTMxMTMwMDEwWhcNMjUwMjAxMTMwMDEwWjAzMTEwLwYDVQQD
Eyg0M2YwMjFmZjRhYzdmMDNhNDI4ZWEyNTQ5MGFjYTFjNWQyZTQ4NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws7KjW2ndD13w8JeJ/N+AOKEzyap
Mbc1kDdpCCsq/X1Z+ICp9Rl6NQiyUsrJ4ap/Ucw8QbEkaHoZUIYlaY+kC2bRDOZs
BiRQSNEAqQBn6YfneKa7iSAjZ1s48yW44MXzQB0/Ju2PwMeiPEReDi1bVkdJc/kp
pr0R2q5NjTGbOo8L5/GlY6fal0t7CyCKOJ4wVLn7Nde0cMt45o+5g6OEtf0StYmT
vVkFtrEcU3jFx3Y1l6pX2yH0iLzmcd3Lw3qfI4OBnrSzbUwmOTyQ3wm81enGFZ4P
nj3Y7j3EFuSutr4+5zUVdWcdIqct/OKD7iUNOXNIFIWLvQj0TiQYkK025wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPwIf9Kx/A6Qo6iVJCsocXS5IUNMB8GA1UdIwQY
MBaAFKWQ7yO0VsnbINMHQpMrAX/Fck5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzct
MTUyZDIwNGViZmEzLzEvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzctMTUyZDIwNGViZmEz
LzEvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO728dsKX
s1j4EnX/NcsGmLoIww9wgOr3gbiqNRQXwqOLt8u9u3dXqpEnBuOzzrlmATbiegcV
RFKdC7YoyxfbT8F9uuLDe+/97h0Dwb0xXlJf9kV7kZBGLEDfvdZtHpq2R6wmIKUO
YbA8R1rl2BNZJcTN8ES1qxDYZdf1/sU2VYkfBSXkqbgIpt8bgc9rnnNqetiUZEUx
KuhyzcUFXWNoDhMK5wZKF0kFJUGuByYCB6RfCgjEKZV3qMkB1wmfsuY9dbhaOgmX
XmUZFRVsG5Ft/EPvbPqDG9ig1gfk3962+AJVUiW6yGOP9srWdARhMLb08294H4EV
qb5zXnmGoTYqKQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:39 2025 by rpki-client