Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft
File: zTu8GVzaflgkWmHLMLlv5XL9eBE.mft (raw, json)
Hash identifier: CTgG26iDXpLlvdo5VbJm4ai7dLzTe/FAvaOvQp82FQA=
Subject key identifier: EB:55:8E:C3:29:26:EC:E0:68:D8:FC:8D:1D:1B:99:D9:1C:AE:40:41
Authority key identifier: CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11
Certificate issuer: /CN=cd3bbc195cda7e58245a61cb30b96fe572fd7811
Certificate serial: 0194BC3BEF6B3E6BCBE35C4B540BFDF4A4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTu8GVzaflgkWmHLMLlv5XL9eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft
Manifest number: 0D7D
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: clDd21QzHwOlwdLoUbCFlA9N4Bc.roa (hash: b4fVPg9ViPXbDXBeIAFrk3g5qdFMK0V6puBPZsjXHfs=)
2: zTu8GVzaflgkWmHLMLlv5XL9eBE.crl (hash: /tvhrOxYWKc9E65304E2P3rk3AsG3+HXIJTR9gC4BOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ef:6b:3e:6b:cb:e3:5c:4b:54:0b:fd:f4:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3bbc195cda7e58245a61cb30b96fe572fd7811
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=eb558ec32926ece068d8fc8d1d1b99d91cae4041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:c2:c2:84:1a:c4:8b:3b:a5:4e:58:00:03:
b4:96:ae:31:ce:5b:2a:87:77:26:ca:b3:9f:e3:ab:
b1:19:3e:4c:2a:4a:10:2f:83:7d:f3:63:ee:be:87:
0e:a4:f8:9f:d3:18:50:ab:51:d2:6f:63:61:28:fc:
78:17:36:1c:5e:6b:0b:78:2e:52:7f:6c:c1:e8:64:
e6:87:3d:6e:b0:a6:8a:6b:80:0c:e2:2d:85:af:e9:
71:f2:87:35:b0:b9:33:ae:32:1d:ce:c3:ff:3f:c9:
82:46:60:f3:f3:b9:b8:1f:90:7e:86:f8:68:39:a0:
f2:f0:b8:62:c2:dd:63:02:41:a2:28:88:fe:4f:b3:
7c:08:e3:0a:60:58:d0:8e:13:4e:e9:c4:2c:b0:17:
9b:98:b6:e3:50:fd:ae:49:c0:3a:64:fa:18:0b:90:
f9:73:69:c5:75:0f:cd:a8:62:51:7f:e8:a5:5b:e7:
77:f8:7d:88:a8:02:fc:c2:dc:20:18:38:21:30:3c:
20:76:0d:98:9b:83:39:fe:3c:02:bd:02:29:c0:69:
39:69:94:04:fa:28:b7:ca:5b:87:62:29:36:d6:43:
80:35:72:e2:20:df:64:66:d9:1b:e0:a2:71:8a:7f:
61:06:4f:79:54:49:d5:1c:f7:33:7b:cd:cc:77:5d:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:8E:C3:29:26:EC:E0:68:D8:FC:8D:1D:1B:99:D9:1C:AE:40:41
X509v3 Authority Key Identifier:
keyid:CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTu8GVzaflgkWmHLMLlv5XL9eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b1:f3:49:94:a2:e6:69:7f:49:11:2f:a6:3d:77:aa:be:11:
92:4a:f8:c1:18:4b:17:13:7d:08:9b:16:bb:b6:a3:59:bc:52:
e3:ef:0f:8c:71:df:f7:1b:ee:c2:bb:9b:e7:eb:be:a8:75:d2:
23:14:37:68:bc:97:ba:52:42:80:37:64:46:ae:00:48:3a:36:
e8:1f:31:db:6a:ba:1f:c6:cf:70:42:93:97:ae:3a:01:f6:a3:
27:43:52:e8:54:69:91:99:7c:d5:92:ec:d2:41:18:04:62:47:
8d:a3:50:a5:e3:d8:61:f1:a4:e2:4e:ff:01:20:dc:cc:27:56:
3c:6f:34:5b:ae:f7:e5:1e:51:bf:e3:80:83:28:ba:e3:9e:6e:
0d:52:c3:75:be:99:67:bf:66:c6:50:0e:52:e7:51:55:04:41:
a8:01:c9:be:2a:06:f2:84:c1:e7:9c:e9:96:8d:b7:a2:10:2a:
60:f0:6a:6c:7e:bf:8b:5b:e3:fb:01:55:89:ed:bc:33:a4:5c:
1f:2a:57:41:68:e3:da:47:83:5d:e5:37:d7:21:b5:fe:01:7b:
84:9c:6c:e6:bf:64:18:bb:2e:2c:a1:93:c5:20:0e:37:5e:67:
49:36:04:b0:46:ab:f1:5f:df:55:0e:4f:09:18:a6:97:0b:b4:
cb:e9:47:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+9rPmvL41xLVAv99KTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2JiYzE5NWNkYTdlNTgyNDVhNjFjYjMwYjk2ZmU1NzJm
ZDc4MTEwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
EyhlYjU1OGVjMzI5MjZlY2UwNjhkOGZjOGQxZDFiOTlkOTFjYWU0MDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI7CwoQaxIs7pU5YAAO0lq4xzlsq
h3cmyrOf46uxGT5MKkoQL4N982PuvocOpPif0xhQq1HSb2NhKPx4FzYcXmsLeC5S
f2zB6GTmhz1usKaKa4AM4i2Fr+lx8oc1sLkzrjIdzsP/P8mCRmDz87m4H5B+hvho
OaDy8Lhiwt1jAkGiKIj+T7N8COMKYFjQjhNO6cQssBebmLbjUP2uScA6ZPoYC5D5
c2nFdQ/NqGJRf+ilW+d3+H2IqAL8wtwgGDghMDwgdg2Ym4M5/jwCvQIpwGk5aZQE
+ii3yluHYik21kOANXLiIN9kZtkb4KJxin9hBk95VEnVHPcze83Md11wzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtVjsMpJuzgaNj8jR0bmdkcrkBBMB8GA1UdIwQY
MBaAFM07vBlc2n5YJFphyzC5b+Vy/XgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelR1OEdWemFmbGdrV21ITE1MbHY1WEw5ZUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWY3YTUtYjY3Yy00NTlhLTk4OTMt
YzZmYWRlYjI4NWJhLzEvelR1OEdWemFmbGdrV21ITE1MbHY1WEw5ZUJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81YWY3YTUtYjY3Yy00NTlhLTk4OTMtYzZmYWRlYjI4NWJh
LzEvelR1OEdWemFmbGdrV21ITE1MbHY1WEw5ZUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLHzSZSi
5ml/SREvpj13qr4Rkkr4wRhLFxN9CJsWu7ajWbxS4+8PjHHf9xvuwrub5+u+qHXS
IxQ3aLyXulJCgDdkRq4ASDo26B8x22q6H8bPcEKTl646AfajJ0NS6FRpkZl81ZLs
0kEYBGJHjaNQpePYYfGk4k7/ASDczCdWPG80W6735R5Rv+OAgyi6455uDVLDdb6Z
Z79mxlAOUudRVQRBqAHJvioG8oTB55zplo23ohAqYPBqbH6/i1vj+wFVie28M6Rc
HypXQWjj2keDXeU31yG1/gF7hJxs5r9kGLsuLKGTxSAON15nSTYEsEar8V/fVQ5P
CRimlwu0y+lHIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:58 2025 by rpki-client