Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: qLu6gZh2GbGKgZpHBKAKz2WUuCQenjCqdfWgkAeHmvU=
Subject key identifier: C8:F2:C5:59:9C:B1:1A:9B:E0:8E:22:99:E3:97:12:0F:15:DC:D6:4E
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 0194BD85B77C17288E3E2F1F87B0ABD6CAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: 6wpVkuQXzxap58MGTbLbq2+4FCRO/6VY50vy7mOZViU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b7:7c:17:28:8e:3e:2f:1f:87:b0:ab:d6:ca:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=c8f2c5599cb11a9be08e2299e397120f15dcd64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:1c:f6:f0:62:74:e7:3e:b1:be:c2:b8:8f:
84:70:2a:88:da:61:0d:c2:d4:85:e4:83:64:32:1c:
8f:b8:60:8d:b3:f0:96:a4:c3:70:76:31:65:57:9d:
64:2a:d2:07:d6:a1:d3:7d:c6:75:50:66:94:87:e5:
79:79:fd:f0:52:88:15:14:8e:58:74:ee:c4:dc:fe:
64:f5:51:aa:46:6b:c6:3d:e2:3f:28:18:8d:b1:ec:
63:7e:4a:f1:ff:d2:51:f4:57:14:6a:de:95:52:b8:
ad:61:e9:2c:4b:e3:fd:5a:3f:f0:72:e9:23:12:08:
9f:d0:90:b5:09:61:6d:38:10:ec:ae:1a:81:5e:04:
a0:76:7b:2a:2b:b2:c4:a9:55:cd:a1:7b:2a:24:8f:
11:6d:c6:df:84:8b:9b:b5:ae:3c:58:ed:6e:07:4d:
05:ef:74:63:cb:b3:f2:57:2d:e3:76:23:23:f8:38:
2f:98:7f:ed:e8:23:de:40:0d:9a:fa:07:af:cc:8c:
8d:03:ea:f8:47:6f:b0:1a:35:ef:02:9a:8e:a6:8e:
4b:af:d4:bb:25:9a:1a:1a:e9:56:73:e1:08:11:3e:
a1:1a:6b:3e:ac:2c:0f:fb:45:f5:ef:4c:52:d2:d1:
e9:d0:a9:9f:ec:a7:4f:d8:4b:1e:81:89:38:56:d4:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:C5:59:9C:B1:1A:9B:E0:8E:22:99:E3:97:12:0F:15:DC:D6:4E
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:ff:bd:0e:82:61:51:55:95:be:b1:d8:17:be:99:d6:39:
df:cc:41:69:5b:9f:7a:77:8a:d3:03:b0:a4:03:79:19:36:d6:
41:1f:c2:d6:5d:52:45:16:db:1f:b0:c5:32:f5:64:83:ad:7c:
cf:1f:79:36:11:40:c4:7b:45:c9:4f:ab:01:4e:dd:18:71:8f:
0f:bf:ab:f4:6a:f2:a7:81:1b:95:31:0f:22:ba:78:2e:74:80:
cd:41:af:b1:64:2b:ee:d2:18:40:cf:f5:6d:d0:6f:79:17:b1:
ef:8e:cc:e8:6c:03:ca:62:3a:e1:51:ff:1d:c9:03:e2:2a:33:
95:9c:26:c8:ed:ea:4f:bc:5e:60:33:f5:f3:3f:80:ba:b5:d6:
cf:ff:2f:16:66:c5:46:09:91:1b:33:0f:dd:e0:f7:65:11:8e:
45:3d:74:22:84:e3:6a:d1:09:ce:99:3f:e5:ff:18:9e:7e:42:
10:ff:b8:8b:fb:76:d3:89:a4:a3:30:60:b7:98:f5:c5:52:ad:
99:a9:0a:0b:7c:f9:08:05:64:d9:14:2d:ec:81:7b:7c:ae:59:
a5:55:20:ca:ce:6d:7b:44:b3:b8:8d:d2:4f:c5:17:92:27:43:
99:bc:ac:fc:ed:d4:1b:18:06:e8:9e:33:6d:d0:a3:f9:db:2a:
08:01:39:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbd8FyiOPi8fh7Cr1sr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYjU5MjkzNjFlMWQwZGUxNjBiODcxZjI5YmRkNWE0MDQw
Y2ExMTEwHhcNMjUwMTMxMTgwMDQ0WhcNMjUwMjAxMTgwMDQ0WjAzMTEwLwYDVQQD
EyhjOGYyYzU1OTljYjExYTliZTA4ZTIyOTllMzk3MTIwZjE1ZGNkNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybcc9vBidOc+sb7CuI+EcCqI2mEN
wtSF5INkMhyPuGCNs/CWpMNwdjFlV51kKtIH1qHTfcZ1UGaUh+V5ef3wUogVFI5Y
dO7E3P5k9VGqRmvGPeI/KBiNsexjfkrx/9JR9FcUat6VUritYeksS+P9Wj/wcukj
Egif0JC1CWFtOBDsrhqBXgSgdnsqK7LEqVXNoXsqJI8RbcbfhIubta48WO1uB00F
73Rjy7PyVy3jdiMj+DgvmH/t6CPeQA2a+gevzIyNA+r4R2+wGjXvApqOpo5Lr9S7
JZoaGulWc+EIET6hGms+rCwP+0X170xS0tHp0Kmf7KdP2EsegYk4VtR/QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjyxVmcsRqb4I4imeOXEg8V3NZOMB8GA1UdIwQY
MBaAFM61kpNh4dDeFguHHym91aQEDKERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNGRkZWQtYzUxMC00NzdjLThmYWQt
ZjYxNmYwMDk0YjE0LzEvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kNGRkZWQtYzUxMC00NzdjLThmYWQtZjYxNmYwMDk0YjE0
LzEvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrn/vQ6C
YVFVlb6x2Be+mdY538xBaVufeneK0wOwpAN5GTbWQR/C1l1SRRbbH7DFMvVkg618
zx95NhFAxHtFyU+rAU7dGHGPD7+r9Gryp4EblTEPIrp4LnSAzUGvsWQr7tIYQM/1
bdBveRex747M6GwDymI64VH/HckD4iozlZwmyO3qT7xeYDP18z+AurXWz/8vFmbF
RgmRGzMP3eD3ZRGORT10IoTjatEJzpk/5f8Ynn5CEP+4i/t204mkozBgt5j1xVKt
makKC3z5CAVk2RQt7IF7fK5ZpVUgys5te0SzuI3ST8UXkidDmbys/O3UGxgG6J4z
bdCj+dsqCAE55w==
-----END CERTIFICATE-----
Generated at Tue May 13 18:26:52 2025 by rpki-client