Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File: ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier: v7jIeEsnkxSUedHJ1l6l7CFdNaZXoRGsWpVdC0FE4UI=
Subject key identifier: D4:87:18:7F:9F:17:EC:AA:2B:77:E5:BD:26:F3:E9:9D:02:A2:74:88
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer: /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial: 0194BD85A7169812A2F8A2125A6B27CD5A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number: 1333
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=)
2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: QsNRwlJxBR5ecciLtkPjCs9vyIpXIq57zQmSxsZWW/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:16:98:12:a2:f8:a2:12:5a:6b:27:cd:5a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=d487187f9f17ecaa2b77e5bd26f3e99d02a27488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:b1:15:1c:91:17:a4:bd:6e:c7:a7:6c:42:
48:dc:db:f0:f9:64:8b:c3:38:23:c5:18:38:2e:64:
ca:68:75:ff:61:3f:b4:e1:4e:04:63:22:4e:27:8e:
08:1b:43:85:0c:bb:55:3f:90:4a:56:ee:81:15:29:
04:70:1c:46:d6:f8:cf:e5:f0:68:55:eb:7a:38:8b:
cf:99:d1:ec:56:a8:86:39:b8:35:e4:94:36:73:ee:
fb:75:c2:fc:4e:9e:dd:f2:0f:20:5b:1a:aa:0f:f2:
05:d1:0f:d4:76:85:e6:e3:ba:9e:b0:d5:4e:ce:f0:
00:b4:21:50:39:cf:fb:f4:64:b8:5a:30:12:55:59:
5f:cc:0c:b9:93:5a:0a:30:f8:56:e2:a1:73:e4:0a:
43:54:1a:ae:7f:d7:d9:01:99:22:2c:4f:c4:95:47:
d7:5f:02:27:7c:4f:32:18:84:a9:d8:d2:87:fc:c0:
b1:32:cb:75:a4:14:6a:d7:fa:03:59:85:60:fc:ec:
85:b1:32:75:7e:e2:9f:d3:6e:ee:77:0f:6e:14:75:
06:81:81:f8:63:33:68:84:8d:1f:a3:51:de:63:52:
a6:18:3c:42:20:69:12:62:61:fb:ce:e5:a9:87:f8:
da:03:0e:f3:dc:50:71:0c:4e:a4:3b:c2:f6:8b:43:
82:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:18:7F:9F:17:EC:AA:2B:77:E5:BD:26:F3:E9:9D:02:A2:74:88
X509v3 Authority Key Identifier:
keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:b7:46:14:ec:68:bf:33:1b:36:29:23:96:9a:ea:e6:c0:
4a:00:a6:36:b7:50:f5:23:0a:19:fb:b5:7a:21:d2:af:c9:d9:
d6:18:67:a2:f4:e6:ed:52:ea:8f:70:33:0b:3c:9c:fc:1a:b6:
31:a3:3b:c5:35:f7:e4:72:43:88:19:79:24:39:f7:5c:80:bd:
87:33:fd:3f:19:e7:a2:6a:35:32:23:dc:f9:c3:7a:96:63:4e:
22:1d:fa:6b:e2:62:b6:30:c1:ab:81:45:d7:4d:39:ba:af:1c:
9d:21:41:f8:1e:de:fd:b1:ff:43:e5:2b:53:1a:db:52:4a:fd:
95:bc:3c:27:d7:44:7f:5c:4c:eb:47:00:a7:d6:e4:b4:a7:e3:
56:a4:df:5d:fc:52:04:1f:bc:76:26:06:a4:a7:3a:60:3c:5e:
d8:00:ba:31:fc:b3:74:02:b8:e1:5f:c6:97:46:4f:f4:b4:21:
50:9f:2d:00:8c:8a:5a:f5:c7:df:0e:1a:2e:ec:a0:65:84:f5:
dd:b9:0e:ea:85:53:30:8b:a2:35:08:23:4e:32:ff:9b:9a:8e:
cd:22:88:c5:7e:8e:3a:74:0a:a2:95:08:5e:b1:dd:2c:22:c0:
78:90:50:0d:71:be:3d:28:a6:28:c2:33:2f:53:a8:fe:3d:0d:
e3:55:20:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hacWmBKi+KISWmsnzVqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzUzMGI0ZmE4ODk5YTMwYmIyZTY1YjkzZjAxMTlmZGE5
YmMwNWQwHhcNMjUwMTMxMTgwMDQwWhcNMjUwMjAxMTgwMDQwWjAzMTEwLwYDVQQD
EyhkNDg3MTg3ZjlmMTdlY2FhMmI3N2U1YmQyNmYzZTk5ZDAyYTI3NDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPyxFRyRF6S9bsenbEJI3Nvw+WSL
wzgjxRg4LmTKaHX/YT+04U4EYyJOJ44IG0OFDLtVP5BKVu6BFSkEcBxG1vjP5fBo
Vet6OIvPmdHsVqiGObg15JQ2c+77dcL8Tp7d8g8gWxqqD/IF0Q/UdoXm47qesNVO
zvAAtCFQOc/79GS4WjASVVlfzAy5k1oKMPhW4qFz5ApDVBquf9fZAZkiLE/ElUfX
XwInfE8yGISp2NKH/MCxMst1pBRq1/oDWYVg/OyFsTJ1fuKf027udw9uFHUGgYH4
YzNohI0fo1HeY1KmGDxCIGkSYmH7zuWph/jaAw7z3FBxDE6kO8L2i0OC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSHGH+fF+yqK3flvSbz6Z0ConSIMB8GA1UdIwQY
MBaAFGR1MLT6iJmjC7LmW5PwEZ/am8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEt
MGU3Y2JiY2M2MmQwLzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEtMGU3Y2JiY2M2MmQw
LzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQua3RhTs
aL8zGzYpI5aa6ubASgCmNrdQ9SMKGfu1eiHSr8nZ1hhnovTm7VLqj3AzCzyc/Bq2
MaM7xTX35HJDiBl5JDn3XIC9hzP9Pxnnomo1MiPc+cN6lmNOIh36a+JitjDBq4FF
1005uq8cnSFB+B7e/bH/Q+UrUxrbUkr9lbw8J9dEf1xM60cAp9bktKfjVqTfXfxS
BB+8diYGpKc6YDxe2AC6MfyzdAK44V/Gl0ZP9LQhUJ8tAIyKWvXH3w4aLuygZYT1
3bkO6oVTMIuiNQgjTjL/m5qOzSKIxX6OOnQKopUIXrHdLCLAeJBQDXG+PSimKMIz
L1Oo/j0N41Ug5w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:27 2025 by rpki-client