Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: inJzt5ldwk8zJfNxZhjT+EOEn6YqhPniLblcAQTi2cs=
Subject key identifier: 15:70:96:91:47:F6:AA:EF:E3:1F:8E:12:CF:61:98:48:7C:E0:38:78
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0194BC04FF9707AC0088B693CE6DAE8A292F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 088F
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: OBtSTkcrmIGs1YSNZ+077opdIK8DMItCrOGOtRhVb0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:97:07:ac:00:88:b6:93:ce:6d:ae:8a:29:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=1570969147f6aaefe31f8e12cf6198487ce03878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:14:8d:a0:af:5c:38:f9:67:79:5f:e4:fb:
1c:e4:05:9b:1e:cb:d2:ae:3c:9a:53:fe:11:4a:03:
9a:e3:95:08:03:35:22:25:af:36:aa:36:80:71:d2:
a3:cb:ea:a7:0c:97:fd:e3:52:70:b9:8a:86:3a:1d:
f9:f4:4a:5b:e5:4e:58:db:55:bd:57:8a:fc:c8:84:
2c:1c:4d:da:d0:6c:9d:0c:d8:76:23:fb:8e:e7:9c:
18:c5:61:42:50:cc:90:f5:09:ed:ab:5c:28:a0:d3:
2e:78:65:63:d4:dd:88:05:7f:94:6b:d0:b7:d7:f1:
fc:fc:9e:96:7f:1a:5d:57:f7:4a:b5:cc:18:50:8e:
2f:17:cc:f2:06:de:71:24:4c:af:87:ec:15:43:4d:
44:e6:8e:f0:a1:3a:e6:4b:df:1c:46:21:5c:b4:17:
3e:2d:18:65:31:e0:26:19:9c:4e:6c:7e:24:9d:ef:
d1:c3:d9:0b:48:5d:e0:b7:90:20:93:33:28:b3:c8:
cb:b4:0d:9f:56:07:1f:c8:66:a2:93:9f:d7:2a:6f:
0d:23:cf:ef:80:50:9a:a4:1b:9a:93:b4:17:bb:16:
5d:9e:00:fd:b7:db:d2:3b:0c:7e:db:af:fa:de:6d:
93:29:e0:3b:75:35:21:60:64:cd:ba:b5:3b:12:45:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:96:91:47:F6:AA:EF:E3:1F:8E:12:CF:61:98:48:7C:E0:38:78
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0c:80:48:d6:1c:47:c9:4c:f6:b9:86:48:46:79:b2:41:c8:
32:67:0a:10:f2:40:e8:39:ea:29:40:57:a4:c1:1e:a1:5d:38:
20:65:24:12:58:f2:f7:d4:c5:7c:e6:3f:7b:3c:7c:74:b9:62:
09:57:58:72:43:d6:ed:fb:7a:50:61:1f:36:19:5c:64:df:76:
9c:e2:47:d0:0e:79:c7:51:4b:40:06:0f:e8:34:c7:83:44:c3:
5c:5e:7a:83:9f:b0:62:b7:25:4d:92:9c:4f:ed:68:27:41:76:
fb:e3:ab:39:96:dd:e8:9a:fb:6d:9a:ef:fc:6b:a5:b0:2e:5f:
a4:53:af:66:04:ae:81:19:5b:57:18:9d:a1:91:a8:60:39:e9:
35:be:38:c5:ff:18:a0:46:5c:ee:f1:65:f3:40:04:5c:5d:eb:
53:72:7e:c2:eb:bd:70:98:6b:0c:a0:9e:e4:5f:75:3f:ce:c0:
05:5c:f9:47:83:3c:2e:8c:18:11:85:20:93:91:60:07:1f:fb:
33:67:17:29:69:67:f6:fd:07:25:39:f6:5b:80:5f:6a:b1:8a:
a2:af:e4:c3:01:75:ff:ae:5c:df:32:9d:5c:61:9a:b5:7d:21:
61:e2:47:30:fc:1f:55:af:71:4c:d1:44:f7:58:8e:94:fe:de:
77:18:98:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BP+XB6wAiLaTzm2uiikvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk
ZjRmNjAwHhcNMjUwMTMxMTEwMDMxWhcNMjUwMjAxMTEwMDMxWjAzMTEwLwYDVQQD
EygxNTcwOTY5MTQ3ZjZhYWVmZTMxZjhlMTJjZjYxOTg0ODdjZTAzODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGEUjaCvXDj5Z3lf5Psc5AWbHsvS
rjyaU/4RSgOa45UIAzUiJa82qjaAcdKjy+qnDJf941JwuYqGOh359Epb5U5Y21W9
V4r8yIQsHE3a0GydDNh2I/uO55wYxWFCUMyQ9Qntq1wooNMueGVj1N2IBX+Ua9C3
1/H8/J6WfxpdV/dKtcwYUI4vF8zyBt5xJEyvh+wVQ01E5o7woTrmS98cRiFctBc+
LRhlMeAmGZxObH4kne/Rw9kLSF3gt5AgkzMos8jLtA2fVgcfyGaik5/XKm8NI8/v
gFCapBuak7QXuxZdngD9t9vSOwx+26/63m2TKeA7dTUhYGTNurU7EkX8DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVwlpFH9qrv4x+OEs9hmEh84Dh4MB8GA1UdIwQY
MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt
Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm
LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwyASNYc
R8lM9rmGSEZ5skHIMmcKEPJA6DnqKUBXpMEeoV04IGUkEljy99TFfOY/ezx8dLli
CVdYckPW7ft6UGEfNhlcZN92nOJH0A55x1FLQAYP6DTHg0TDXF56g5+wYrclTZKc
T+1oJ0F2++OrOZbd6Jr7bZrv/GulsC5fpFOvZgSugRlbVxidoZGoYDnpNb44xf8Y
oEZc7vFl80AEXF3rU3J+wuu9cJhrDKCe5F91P87ABVz5R4M8LowYEYUgk5FgBx/7
M2cXKWln9v0HJTn2W4BfarGKoq/kwwF1/65c3zKdXGGatX0hYeJHMPwfVa9xTNFE
91iOlP7edxiYyA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:23 2025 by rpki-client