Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: axjC0MRt6ln4zGrFSornE/rC4NBgap3g7n3nXo+FbDo=
Subject key identifier: DD:12:A0:D9:AA:4B:2A:9A:18:15:BA:61:C3:19:78:A2:9E:75:6D:5B
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 0194BC3BBCC7191D10564C8DC6D5B035ECB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0BBC
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: qNW5twc6DJqXwIBRWPoRM/g/dPa8tIBU8HZaDvYHUjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bc:c7:19:1d:10:56:4c:8d:c6:d5:b0:35:ec:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=dd12a0d9aa4b2a9a1815ba61c31978a29e756d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7d:1f:b4:24:fb:e6:91:13:41:8f:fd:6a:37:
94:36:eb:1d:cc:c9:93:95:96:23:a6:04:e3:c3:8e:
c5:9f:c0:6d:19:88:80:c7:5e:56:85:fa:29:ff:0d:
ee:e8:09:dc:ae:16:b8:47:2b:41:51:27:d3:04:c0:
54:af:4a:b9:4a:66:d3:a1:e5:57:4a:25:34:68:4d:
4d:a8:e7:de:f7:94:f1:48:45:b3:5b:fe:0f:30:d8:
27:7f:58:d8:e6:7c:d0:3a:bf:a1:bb:33:d6:06:ea:
87:96:d2:b1:59:12:d9:94:61:ae:a4:12:30:07:23:
8e:1c:8b:ba:fb:fd:fb:a7:d1:31:e2:45:6a:ad:de:
44:67:8e:d0:bf:58:20:39:84:a8:63:b6:a6:87:d7:
d1:13:a4:af:13:74:82:35:61:cd:53:7a:73:f5:f7:
79:7d:46:cc:fa:30:c2:1c:33:df:6f:20:df:84:2c:
f9:a8:fc:6d:85:74:1b:f4:44:ed:e7:2e:06:50:6a:
b3:be:88:d4:c0:81:c2:02:93:78:a8:4e:17:c2:13:
ae:08:7f:15:5f:ae:ae:e6:49:6a:e3:64:2b:e0:da:
8f:30:5c:7f:be:22:84:ed:fb:80:67:c6:76:dd:6a:
d0:c5:c7:66:81:0a:aa:1f:7c:8f:0e:86:bd:63:bb:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:A0:D9:AA:4B:2A:9A:18:15:BA:61:C3:19:78:A2:9E:75:6D:5B
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:06:ff:0a:31:9c:c1:a7:b4:79:1e:b3:1b:ce:2c:8b:48:20:
2a:38:78:5d:02:dc:52:43:ad:48:d6:e2:fd:b8:9d:81:08:ce:
1d:70:2e:ce:0a:a5:e8:70:58:d0:ba:be:93:44:46:2b:b1:fb:
65:63:d3:8a:4c:fe:92:0c:a3:f0:ff:0c:25:0f:94:c6:0f:10:
c0:c4:55:94:e6:4e:ff:0e:20:f2:a9:56:cc:f6:2e:4a:85:d0:
1a:07:7c:8d:dc:17:be:a0:b1:92:cc:16:4b:06:05:65:00:97:
2a:ce:a6:65:81:4b:0f:26:68:7c:19:52:3b:14:65:cd:c7:69:
f2:48:ee:8d:54:60:89:a5:83:aa:fc:63:29:01:7f:33:1e:49:
0b:59:9c:0e:3b:ef:3e:5e:5a:b9:1f:93:6e:f9:a9:cf:b1:a0:
75:0c:fe:c5:0e:68:d2:be:c5:cf:e6:21:4d:6a:b0:8c:9b:b5:
22:cd:07:b5:68:d8:33:7c:4b:a0:03:3c:61:9d:94:a8:31:97:
4a:6e:d2:8a:fa:69:90:14:b8:b5:a1:9d:c9:ee:8d:5f:06:6c:
f6:ff:91:aa:ff:da:0d:7a:b7:a7:ca:4f:cc:b0:c2:2f:48:af:
ae:2c:8e:0a:10:fe:18:94:a9:c7:7d:c0:72:d7:42:42:8b:5d:
d7:92:02:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7zHGR0QVkyNxtWwNeyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWMzNzJmN2E5YjgxNzFkY2JmYzExNjBjYWEyMmM4ZmRj
NjhiN2IwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
EyhkZDEyYTBkOWFhNGIyYTlhMTgxNWJhNjFjMzE5NzhhMjllNzU2ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA430ftCT75pETQY/9ajeUNusdzMmT
lZYjpgTjw47Fn8BtGYiAx15Whfop/w3u6Ancrha4RytBUSfTBMBUr0q5SmbToeVX
SiU0aE1NqOfe95TxSEWzW/4PMNgnf1jY5nzQOr+huzPWBuqHltKxWRLZlGGupBIw
ByOOHIu6+/37p9Ex4kVqrd5EZ47Qv1ggOYSoY7amh9fRE6SvE3SCNWHNU3pz9fd5
fUbM+jDCHDPfbyDfhCz5qPxthXQb9ETt5y4GUGqzvojUwIHCApN4qE4XwhOuCH8V
X66u5klq42Qr4NqPMFx/viKE7fuAZ8Z23WrQxcdmgQqqH3yPDoa9Y7uQgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0SoNmqSyqaGBW6YcMZeKKedW1bMB8GA1UdIwQY
MBaAFMysNy96m4Fx3L/BFgyqIsj9xot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQt
YzQ1MDJkYTg2OWJiLzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQtYzQ1MDJkYTg2OWJi
LzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwb/CjGc
wae0eR6zG84si0ggKjh4XQLcUkOtSNbi/bidgQjOHXAuzgql6HBY0Lq+k0RGK7H7
ZWPTikz+kgyj8P8MJQ+Uxg8QwMRVlOZO/w4g8qlWzPYuSoXQGgd8jdwXvqCxkswW
SwYFZQCXKs6mZYFLDyZofBlSOxRlzcdp8kjujVRgiaWDqvxjKQF/Mx5JC1mcDjvv
Pl5auR+Tbvmpz7GgdQz+xQ5o0r7Fz+YhTWqwjJu1Is0HtWjYM3xLoAM8YZ2UqDGX
Sm7SivppkBS4taGdye6NXwZs9v+Rqv/aDXq3p8pPzLDCL0ivriyOChD+GJSpx33A
ctdCQotd15ICpQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:45:38 2025 by rpki-client