Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: SnG0If7Dd5Idb3M3Ipd2f3y7PLxx/9bt4kkdd42sb4s=
Subject key identifier: EE:F4:A7:16:34:7B:26:9B:E2:04:01:2A:6E:8D:43:E7:F6:3C:B1:38
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 0194BD8571B38CBDAC3B14BBDF1A73AB98A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 08D8
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: Vago0FaGdhjVIieM9OrcHj/ZIDRROTmTBvRniKeDoQM=)
3: qLBwfOuFs3K7TRJtu9mhTqn2oCI.roa (hash: t1+dGuENDhf8xhcNT9hdJi3ibea4hMiZnxDqhvWQ4xE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:71:b3:8c:bd:ac:3b:14:bb:df:1a:73:ab:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=eef4a716347b269be204012a6e8d43e7f63cb138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:10:61:f7:21:f4:55:dc:5c:71:45:6b:49:
0e:8a:c9:e0:cd:e8:df:bf:cd:a5:5e:76:e5:7e:06:
9d:a5:5d:7a:80:b4:01:14:f0:26:d8:0e:65:27:2a:
7f:c3:46:96:dd:fc:82:09:8f:6a:81:5f:45:d0:43:
83:e8:64:91:bd:2b:df:63:7a:29:81:2c:86:91:e3:
e0:c1:de:64:e2:51:2e:ea:40:5c:8b:d2:37:d5:06:
5c:6d:e3:07:dc:03:d9:18:f7:d3:5f:9c:a1:69:28:
f4:73:82:0d:df:31:d9:b3:45:3c:37:71:41:5e:0f:
a9:98:00:57:6a:af:53:db:1a:44:3e:52:12:43:a2:
e8:c9:c9:8f:3d:d9:af:d1:60:45:3a:71:c3:4e:2b:
b6:8b:de:95:f5:84:96:35:48:46:c6:bd:75:df:e6:
7d:31:d2:60:7b:f1:9b:f5:3b:fb:37:a5:ad:94:e3:
81:45:4d:46:35:77:6b:23:a5:f4:9b:a6:3b:94:ac:
bc:46:19:5f:13:bc:20:ae:08:67:80:11:38:75:56:
ef:ed:52:7a:d3:be:4e:67:28:78:59:a2:1d:aa:2f:
34:6e:ad:d1:ba:19:85:5d:1e:67:fc:b8:93:6c:a2:
cc:13:38:96:2f:44:6b:ca:31:79:e0:e6:10:37:27:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:A7:16:34:7B:26:9B:E2:04:01:2A:6E:8D:43:E7:F6:3C:B1:38
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0e:3b:bb:11:aa:89:83:27:03:af:30:1e:f4:79:a3:4a:f2:
c4:38:1a:e1:77:e0:f4:6c:76:26:15:b7:c0:0a:24:a4:31:7a:
ca:2e:85:fd:79:ef:4a:4f:4f:c6:b7:0c:81:b7:83:b3:db:d5:
73:a0:6b:77:f4:f3:e1:50:9d:c5:a9:4b:ad:b6:0f:cb:4c:54:
4f:ee:79:27:f4:a0:a4:d7:71:1b:59:03:ec:09:ea:29:f9:f7:
d1:36:77:a9:1d:8a:89:43:1c:ea:93:5f:38:1e:c4:3e:b0:59:
21:f0:cf:bd:c8:ff:33:7d:04:62:fe:15:6c:67:2c:42:c0:74:
92:6c:df:c8:72:9d:8e:c1:9e:32:9d:24:be:04:b5:72:70:69:
50:63:7d:63:b7:d3:4a:f8:8a:8d:2b:f5:0f:c6:f0:d6:fe:d1:
b1:d9:a7:ae:24:2b:d9:03:96:2c:b6:f2:57:63:bc:9c:a1:01:
c7:74:f2:58:c2:ef:1b:a4:14:2a:9a:13:bd:19:d5:0f:1b:e4:
50:e0:ed:2b:3a:d0:ac:17:d5:2b:8a:cd:96:22:84:90:5b:7d:
0e:3d:12:8b:1a:b2:8a:35:62:f2:15:56:a8:cd:1c:00:1c:2b:
ba:f6:19:02:85:aa:09:c8:a2:55:00:cb:e9:0e:a7:11:a5:89:
da:91:e4:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXGzjL2sOxS73xpzq5igMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz
NzA3MWEwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
EyhlZWY0YTcxNjM0N2IyNjliZTIwNDAxMmE2ZThkNDNlN2Y2M2NiMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsQYfch9FXcXHFFa0kOisngzejf
v82lXnblfgadpV16gLQBFPAm2A5lJyp/w0aW3fyCCY9qgV9F0EOD6GSRvSvfY3op
gSyGkePgwd5k4lEu6kBci9I31QZcbeMH3APZGPfTX5yhaSj0c4IN3zHZs0U8N3FB
Xg+pmABXaq9T2xpEPlISQ6LoycmPPdmv0WBFOnHDTiu2i96V9YSWNUhGxr113+Z9
MdJge/Gb9Tv7N6WtlOOBRU1GNXdrI6X0m6Y7lKy8RhlfE7wgrghngBE4dVbv7VJ6
075OZyh4WaIdqi80bq3RuhmFXR5n/LiTbKLMEziWL0RryjF54OYQNyehAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO70pxY0eyab4gQBKm6NQ+f2PLE4MB8GA1UdIwQY
MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt
NGMwOGZmZTEwMDc2LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2
LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA47uxGq
iYMnA68wHvR5o0ryxDga4Xfg9Gx2JhW3wAokpDF6yi6F/XnvSk9PxrcMgbeDs9vV
c6Brd/Tz4VCdxalLrbYPy0xUT+55J/SgpNdxG1kD7AnqKfn30TZ3qR2KiUMc6pNf
OB7EPrBZIfDPvcj/M30EYv4VbGcsQsB0kmzfyHKdjsGeMp0kvgS1cnBpUGN9Y7fT
SviKjSv1D8bw1v7RsdmnriQr2QOWLLbyV2O8nKEBx3TyWMLvG6QUKpoTvRnVDxvk
UODtKzrQrBfVK4rNliKEkFt9Dj0SixqyijVi8hVWqM0cABwruvYZAoWqCciiVQDL
6Q6nEaWJ2pHkBg==
-----END CERTIFICATE-----
Generated at Thu May 1 12:58:18 2025 by rpki-client