Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
File: z6ExZhMNKdWtimB9gUmNpmAm0DY.mft (raw, json)
Hash identifier: gLokRlKM2FxDxfVYFvjidExFAFC4VfmZRvs0zGFD/58=
Subject key identifier: 60:86:E5:8A:0D:0E:95:43:05:2E:8C:F5:F4:DF:C2:D7:A0:25:F9:98
Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036
Certificate serial: 0194BBCDDC119C4BB86737922616FFE79CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
Manifest number: 0138
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: 8NRIip7PRvYkRKm_8iGpYTYG-fQ.roa (hash: baP/2HoWmnxywqu4ozYPStRBgvEVcCSlNjY9VrvxlOY=)
2: z6ExZhMNKdWtimB9gUmNpmAm0DY.crl (hash: jaRbxo8DPz65+bul5fp/XcexNG7MXZzjU71bimZa4TY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:11:9c:4b:b8:67:37:92:26:16:ff:e7:9c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=6086e58a0d0e9543052e8cf5f4dfc2d7a025f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:cf:75:af:10:69:fa:ea:1f:8c:39:4e:c2:
01:ca:54:b8:9d:e5:f1:29:5d:fe:ce:27:13:03:47:
d6:b8:99:33:33:d5:0e:6b:2d:8c:83:32:62:96:91:
1b:5d:36:7e:52:83:a8:a5:98:3f:4e:1e:b2:f1:11:
8b:2c:6a:49:1d:af:c4:83:fb:98:dd:8b:c7:14:dd:
38:08:26:7e:85:0c:73:9d:a9:d3:1c:c0:5c:c1:82:
08:5c:1f:82:e0:60:77:b1:70:e8:85:11:86:91:86:
e2:2d:54:c3:9a:6e:99:ec:36:90:7e:a4:48:74:fb:
cc:16:33:a6:42:a7:60:84:a1:52:12:9b:45:d6:57:
de:20:dc:5a:5e:77:a0:4c:1c:26:e6:3b:fa:c4:60:
51:ef:30:12:5b:4b:8e:fe:dc:3a:29:53:73:44:fc:
b5:9b:7d:39:0f:c0:89:1c:fe:90:ff:1b:e4:dd:7d:
4e:8e:ee:53:e5:9d:77:e3:b2:17:04:99:9a:f9:95:
50:1e:1a:74:84:ef:bc:d2:b6:37:2f:ce:63:7c:ec:
32:2f:ed:96:d7:49:4e:50:c3:1e:f1:5c:6f:8c:3a:
c9:fa:32:f0:4e:2b:c2:db:fd:2d:e6:d3:3f:4e:29:
a1:31:81:b3:0a:6e:2b:69:d8:02:c0:87:33:f3:67:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:E5:8A:0D:0E:95:43:05:2E:8C:F5:F4:DF:C2:D7:A0:25:F9:98
X509v3 Authority Key Identifier:
keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:b7:b8:2d:34:0c:63:4b:a6:a2:8e:80:4e:f0:d8:c2:56:
31:0c:7f:02:a3:72:7a:2f:e9:4e:41:7f:6f:f1:c4:54:1f:9d:
a1:d6:f6:ca:4f:1f:56:fe:5f:0c:fd:44:09:eb:9e:a3:3b:4b:
23:a6:a1:c9:0c:b1:cc:59:76:79:9d:cc:a8:99:aa:c0:c2:bb:
71:cf:cd:6e:5c:48:fd:9b:63:1f:62:6a:29:5f:a9:3f:33:37:
64:b5:37:8b:2a:eb:06:d7:35:a9:d3:0d:14:d3:98:20:3d:58:
b3:64:58:c0:5f:db:cb:b3:3b:9d:a0:03:97:00:a3:e0:5f:d3:
61:34:20:07:7b:88:f3:41:ba:5e:c5:1c:e3:af:54:d4:d7:95:
ee:63:81:bb:c5:bd:a5:c8:e7:84:6b:8a:be:91:7e:62:df:85:
59:31:d4:ab:b6:74:ea:9d:32:ee:23:34:6b:c4:2f:c2:a4:70:
d2:b6:1b:ac:7d:82:52:f3:51:a1:78:1b:6e:50:c4:6c:6d:a4:
7f:38:a8:07:49:fb:fc:24:70:23:72:d8:21:63:e5:d1:57:7b:
8f:3e:03:a4:e0:69:17:be:9d:5e:7e:62:42:a3:87:4b:6a:f9:
6a:23:ea:18:8e:ca:1f:93:59:3a:05:41:d5:57:60:97:9c:66:
3a:4a:77:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdwRnEu4ZzeSJhb/55z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTEzMTY2MTMwZDI5ZDVhZDhhNjA3ZDgxNDk4ZGE2NjAy
NmQwMzYwHhcNMjUwMTMxMTAwMDE4WhcNMjUwMjAxMTAwMDE4WjAzMTEwLwYDVQQD
Eyg2MDg2ZTU4YTBkMGU5NTQzMDUyZThjZjVmNGRmYzJkN2EwMjVmOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B7Pda8QafrqH4w5TsIBylS4neXx
KV3+zicTA0fWuJkzM9UOay2MgzJilpEbXTZ+UoOopZg/Th6y8RGLLGpJHa/Eg/uY
3YvHFN04CCZ+hQxznanTHMBcwYIIXB+C4GB3sXDohRGGkYbiLVTDmm6Z7DaQfqRI
dPvMFjOmQqdghKFSEptF1lfeINxaXnegTBwm5jv6xGBR7zASW0uO/tw6KVNzRPy1
m305D8CJHP6Q/xvk3X1Oju5T5Z1347IXBJma+ZVQHhp0hO+80rY3L85jfOwyL+2W
10lOUMMe8VxvjDrJ+jLwTivC2/0t5tM/TimhMYGzCm4radgCwIcz82dRAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCG5YoNDpVDBS6M9fTfwtegJfmYMB8GA1UdIwQY
MBaAFM+hMWYTDSnVrYpgfYFJjaZgJtA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUt
MGM2NmJkMzQwMTlhLzEvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUtMGM2NmJkMzQwMTlh
LzEvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabe3uC00
DGNLpqKOgE7w2MJWMQx/AqNyei/pTkF/b/HEVB+dodb2yk8fVv5fDP1ECeueoztL
I6ahyQyxzFl2eZ3MqJmqwMK7cc/NblxI/ZtjH2JqKV+pPzM3ZLU3iyrrBtc1qdMN
FNOYID1Ys2RYwF/by7M7naADlwCj4F/TYTQgB3uI80G6XsUc469U1NeV7mOBu8W9
pcjnhGuKvpF+Yt+FWTHUq7Z06p0y7iM0a8QvwqRw0rYbrH2CUvNRoXgbblDEbG2k
fzioB0n7/CRwI3LYIWPl0Vd7jz4DpOBpF76dXn5iQqOHS2r5aiPqGI7KH5NZOgVB
1Vdgl5xmOkp3nA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:01 2025 by rpki-client