Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: hTScV1II47tG37G/hKxWzx9tC9F/9tsIbc3i/HlbXMM=
Subject key identifier: C7:4E:42:D6:8D:F4:51:04:D0:BB:60:14:F5:34:94:49:9C:B6:D3:3B
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 0194BBCDE87F96B76DD209E256ACBF647970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 0D3B
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: uHLPWPYFWc70WcI916BBylBaUtNIydFpMuF1ibsVRB0=)
2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:7f:96:b7:6d:d2:09:e2:56:ac:bf:64:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=c74e42d68df45104d0bb6014f53494499cb6d33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:dc:f0:63:c0:98:7e:7e:e8:2c:58:86:87:
cd:00:6e:f4:3d:b4:1f:ee:9c:07:19:28:f2:5d:24:
ee:5a:af:95:76:d6:f3:12:70:fd:ef:4c:13:38:a5:
c9:dd:49:04:06:a6:ee:44:ef:35:d9:41:a7:7a:3e:
15:f4:ae:ed:a9:14:38:15:b7:13:4b:8e:6c:0d:51:
26:87:04:d2:7a:b0:92:6e:ce:f4:dd:4e:c2:5f:a5:
23:27:c8:ac:8b:01:65:a2:ad:02:11:5a:66:b0:9d:
a8:cb:c3:c4:36:ce:b0:47:71:ff:c4:5b:f6:be:bc:
22:30:f0:9f:ca:4a:0d:fc:79:5c:11:fc:fe:19:63:
fd:e0:5e:5a:91:2b:27:31:51:4e:77:9e:c5:2c:b5:
e1:11:56:e8:b5:2a:07:d4:d3:00:22:81:e9:92:d2:
15:8f:d8:00:54:d0:96:cf:04:e2:30:44:c9:4b:06:
8b:7c:f3:5c:ef:8b:0b:43:13:a6:b3:35:b9:e9:f2:
86:31:9b:08:ee:32:65:69:98:8d:3a:59:66:6b:ad:
ee:40:17:ad:c5:21:90:5b:2e:98:0c:ff:20:b1:0d:
60:8a:36:6f:ac:46:eb:2c:83:ee:58:e6:69:99:5c:
10:44:a5:c3:96:d2:f3:12:77:98:75:a8:60:0e:3f:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:42:D6:8D:F4:51:04:D0:BB:60:14:F5:34:94:49:9C:B6:D3:3B
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:c0:21:ff:99:f6:0b:07:4c:ed:4a:cf:d0:c4:31:3d:c6:
bd:5b:52:51:42:17:12:70:ea:6a:3c:85:a1:e5:a0:7e:34:79:
04:f7:14:a6:66:5e:c5:de:78:10:73:66:b4:05:b6:81:cc:4d:
92:db:ef:08:d7:16:bb:62:4e:21:9c:c2:4d:9c:0b:e0:42:8c:
90:7a:4b:70:c9:0e:ca:3b:f1:11:97:c7:87:ff:40:78:50:2c:
40:09:e5:30:ea:02:63:fb:e7:7c:de:07:5f:ca:7d:11:19:7d:
e4:40:d7:4a:85:45:f1:e0:23:32:d4:06:50:35:69:da:2f:bd:
df:2e:51:3b:c6:78:ff:be:ed:5d:c6:c2:a1:7d:1d:2b:de:55:
cf:8c:fc:d0:75:cb:25:de:f9:92:eb:e1:f2:c9:66:6d:48:12:
38:74:67:ce:cb:7a:96:fa:37:62:2c:97:15:f9:32:82:59:45:
09:37:51:d8:e2:e0:52:4e:60:65:f7:df:6a:ac:76:ee:61:ef:
6b:69:49:16:df:db:ca:ac:14:28:67:36:79:94:e6:8e:9c:39:
b0:d6:f0:27:2f:6e:3a:dd:57:2c:91:c5:99:21:4b:20:b3:bf:
56:4c:9b:cc:83:9b:68:b4:11:04:0c:88:7f:02:74:35:9f:32:
e7:6c:13:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeh/lrdt0gniVqy/ZHlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzVlODA3ZDM0OWQzMTU2NGY5ZmQ1NDYxMzhlMzU5OGUy
MDA3Y2UwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
EyhjNzRlNDJkNjhkZjQ1MTA0ZDBiYjYwMTRmNTM0OTQ0OTljYjZkMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNfc8GPAmH5+6CxYhofNAG70PbQf
7pwHGSjyXSTuWq+VdtbzEnD970wTOKXJ3UkEBqbuRO812UGnej4V9K7tqRQ4FbcT
S45sDVEmhwTSerCSbs703U7CX6UjJ8isiwFloq0CEVpmsJ2oy8PENs6wR3H/xFv2
vrwiMPCfykoN/HlcEfz+GWP94F5akSsnMVFOd57FLLXhEVbotSoH1NMAIoHpktIV
j9gAVNCWzwTiMETJSwaLfPNc74sLQxOmszW56fKGMZsI7jJlaZiNOllma63uQBet
xSGQWy6YDP8gsQ1gijZvrEbrLIPuWOZpmVwQRKXDltLzEneYdahgDj8zOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdOQtaN9FEE0LtgFPU0lEmcttM7MB8GA1UdIwQY
MBaAFEc16AfTSdMVZPn9VGE441mOIAfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUt
NWIxYjVkOTk0MGMxLzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUtNWIxYjVkOTk0MGMx
LzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKfAIf+Z
9gsHTO1Kz9DEMT3GvVtSUUIXEnDqajyFoeWgfjR5BPcUpmZexd54EHNmtAW2gcxN
ktvvCNcWu2JOIZzCTZwL4EKMkHpLcMkOyjvxEZfHh/9AeFAsQAnlMOoCY/vnfN4H
X8p9ERl95EDXSoVF8eAjMtQGUDVp2i+93y5RO8Z4/77tXcbCoX0dK95Vz4z80HXL
Jd75kuvh8slmbUgSOHRnzst6lvo3YiyXFfkygllFCTdR2OLgUk5gZfffaqx27mHv
a2lJFt/byqwUKGc2eZTmjpw5sNbwJy9uOt1XLJHFmSFLILO/VkybzIObaLQRBAyI
fwJ0NZ8y52wTSA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:39 2025 by rpki-client