Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: rung1BMsPAYzmYd8ew6kmolpZD+o7jy3lQCzbBECrRI=
Subject key identifier: FC:CB:92:BF:E4:FB:B8:42:86:8C:41:3E:4E:95:8E:4B:6C:FE:D5:49
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 0194BC3BF2B3DFC31CCCD21672D6BEDE93EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0944
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: xRCPjzuRpDhVhvAeMTU6rfbmd57Fmpw1LbyzpnX0wMw=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f2:b3:df:c3:1c:cc:d2:16:72:d6:be:de:93:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=fccb92bfe4fbb842868c413e4e958e4b6cfed549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8b:9f:54:a8:d4:79:07:fe:05:d2:43:5e:49:
63:90:7a:49:13:e8:76:bb:41:98:d6:d3:4e:bf:ee:
b0:f4:97:be:26:11:91:b7:08:d9:bf:b9:ec:f2:c1:
a6:ae:ce:19:aa:db:87:fa:d8:2b:04:ad:6f:5a:3f:
49:28:b6:75:02:30:e8:d3:06:69:43:86:6a:b2:36:
09:ea:dc:3b:6d:db:97:cc:ba:da:d2:92:53:6d:2a:
82:6b:e2:19:6f:be:ea:39:a3:ac:c8:26:11:b2:99:
65:1e:40:2d:f0:59:ac:85:d1:8a:19:e8:41:df:54:
a3:ba:df:34:df:fd:f8:01:4a:5d:24:81:35:f0:3c:
72:a3:02:ed:ae:78:bd:81:db:08:42:c8:8f:5e:3b:
07:74:70:dd:c6:07:70:d0:0e:d5:25:89:6a:92:20:
7a:d2:b1:94:08:80:fd:5c:8a:83:0f:e0:68:65:39:
da:30:9b:b4:95:e6:61:d2:0b:71:20:d0:41:3b:79:
56:9d:b7:f5:80:d7:50:c1:c8:a4:ea:8e:fe:06:5f:
77:83:de:fd:08:0a:ed:b1:e6:bb:2d:e6:c9:52:fd:
84:95:c2:a1:b6:eb:8d:73:2e:12:f2:33:2d:7e:ed:
1e:a3:22:94:81:04:06:fe:3d:c2:4a:12:9b:6b:bd:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:92:BF:E4:FB:B8:42:86:8C:41:3E:4E:95:8E:4B:6C:FE:D5:49
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a8:a5:4b:14:79:a0:7d:5c:78:08:ba:01:b8:cc:9f:fb:2d:
f3:24:bf:9c:1a:df:aa:46:62:9f:e6:12:4e:c3:3d:93:11:74:
33:42:79:72:c7:75:68:17:56:7f:2a:22:bc:0d:d3:29:82:f1:
1f:26:17:b4:3d:ab:2a:da:6f:fd:40:4b:3c:e8:12:fb:36:ad:
89:0f:44:98:44:68:08:e7:f7:b2:18:e1:63:70:75:3c:8b:ff:
11:d9:20:f8:98:11:14:85:b9:36:9f:7f:3f:8a:6e:61:9f:0e:
65:15:1f:20:22:b7:32:5b:72:cc:e9:2e:6f:b0:f9:77:34:f1:
a6:a5:aa:b3:54:fa:be:1e:4a:0c:49:12:53:6a:da:ef:68:13:
b5:91:1a:60:0a:90:c6:3f:53:e6:f4:23:b2:a7:08:64:11:f7:
99:6a:46:eb:f4:aa:3c:ba:7c:f8:01:53:2e:29:7c:34:5f:49:
69:cb:08:59:f2:13:e6:a1:a3:02:a3:0f:5e:c9:8c:44:e3:1d:
1e:fb:f8:ce:f2:6b:97:f6:35:80:90:cb:f2:06:9e:e7:42:78:
aa:f3:92:53:18:80:06:be:ce:a3:4f:fb:40:15:51:6c:af:9c:
ea:cc:c2:a8:b3:f6:d4:c0:4d:b1:cd:90:ee:65:56:c2:bd:71:
08:fd:8d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/Kz38MczNIWcta+3pPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTAwZTU1OTZjMDgzNzQ5N2YxMTg5NDEwYjFlZDIyYWNk
YjdlMTMwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
EyhmY2NiOTJiZmU0ZmJiODQyODY4YzQxM2U0ZTk1OGU0YjZjZmVkNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YufVKjUeQf+BdJDXkljkHpJE+h2
u0GY1tNOv+6w9Je+JhGRtwjZv7ns8sGmrs4ZqtuH+tgrBK1vWj9JKLZ1AjDo0wZp
Q4ZqsjYJ6tw7bduXzLra0pJTbSqCa+IZb77qOaOsyCYRspllHkAt8FmshdGKGehB
31Sjut803/34AUpdJIE18DxyowLtrni9gdsIQsiPXjsHdHDdxgdw0A7VJYlqkiB6
0rGUCID9XIqDD+BoZTnaMJu0leZh0gtxINBBO3lWnbf1gNdQwcik6o7+Bl93g979
CArtsea7LebJUv2ElcKhtuuNcy4S8jMtfu0eoyKUgQQG/j3CShKba707DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzLkr/k+7hChoxBPk6Vjkts/tVJMB8GA1UdIwQY
MBaAFOGQDlWWwIN0l/EYlBCx7SKs234TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpBT1ZaYkFnM1NYOFJpVUVMSHRJcXpiZmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wNmRiMzgtOTg4Ni00ZDcwLTg5MDQt
MjdjYWIwYTYwMjY0LzEvNFpBT1ZaYkFnM1NYOFJpVUVMSHRJcXpiZmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wNmRiMzgtOTg4Ni00ZDcwLTg5MDQtMjdjYWIwYTYwMjY0
LzEvNFpBT1ZaYkFnM1NYOFJpVUVMSHRJcXpiZmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKilSxR5
oH1ceAi6AbjMn/st8yS/nBrfqkZin+YSTsM9kxF0M0J5csd1aBdWfyoivA3TKYLx
HyYXtD2rKtpv/UBLPOgS+zatiQ9EmERoCOf3shjhY3B1PIv/Edkg+JgRFIW5Np9/
P4puYZ8OZRUfICK3MltyzOkub7D5dzTxpqWqs1T6vh5KDEkSU2ra72gTtZEaYAqQ
xj9T5vQjsqcIZBH3mWpG6/SqPLp8+AFTLil8NF9JacsIWfIT5qGjAqMPXsmMROMd
Hvv4zvJrl/Y1gJDL8gae50J4qvOSUxiABr7Oo0/7QBVRbK+c6szCqLP21MBNsc2Q
7mVWwr1xCP2NNA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:24:33 2025 by rpki-client