Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier: nCglI3QrJIVjJy9dnpjPfEftHpW/YidOd232/JujtwY=
Subject key identifier: 00:DE:5B:B9:0A:6F:E0:81:B4:4C:34:DD:EF:F7:C0:82:35:65:E6:43
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 0194BCA9C90FDEFDE95A9985CBC8B7547AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: XOxS5/uGzFoyTo+7tIw27R9BhLfYIQqCA/oL0DsDzSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:0f:de:fd:e9:5a:99:85:cb:c8:b7:54:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=00de5bb90a6fe081b44c34ddeff7c0823565e643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:bf:ef:ad:79:dd:70:07:35:86:61:77:47:
30:29:eb:85:1b:ac:6a:8a:37:22:fc:98:f2:93:99:
60:bb:95:08:be:55:15:6f:97:2d:eb:40:03:cc:5a:
b8:06:4b:b6:0b:6a:69:dc:bf:ec:e3:2e:40:4d:32:
de:38:11:a9:1d:25:9c:e9:5b:63:21:ac:f7:d5:73:
f0:9b:7f:d8:0f:43:34:c9:61:94:11:5e:c8:d3:a7:
80:d5:12:32:b0:b3:5c:8e:a6:73:5e:48:3e:8e:cb:
78:30:4e:b7:09:32:0d:66:0e:40:4c:9b:25:6f:6a:
bb:cb:06:99:fa:e3:0f:e9:81:c9:bc:ba:b3:48:0d:
07:47:4d:0a:bf:6a:e4:a9:c9:18:77:02:90:2c:28:
9b:3d:ea:6f:36:7d:e3:5d:fd:3b:3b:97:36:71:a6:
2a:b7:fc:17:6f:0d:64:64:43:55:a5:f1:a8:4d:db:
9c:a0:a8:88:b3:00:de:03:8a:cb:9a:08:84:b6:f4:
93:29:e4:0e:bf:1e:1d:20:a0:47:53:fd:1d:e2:54:
3d:86:78:4d:23:c5:b6:c2:f9:f0:22:96:de:9e:d0:
2c:28:e1:b1:43:2a:94:91:e2:18:87:9a:7d:b6:9b:
1c:74:7f:b4:3d:73:89:21:f8:62:96:15:c3:79:bd:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:5B:B9:0A:6F:E0:81:B4:4C:34:DD:EF:F7:C0:82:35:65:E6:43
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:9f:69:7a:5d:85:92:e1:27:2b:8a:2b:3c:f9:eb:39:81:
f3:83:b6:2a:0e:6f:05:c0:12:fa:49:fe:b8:9c:ff:02:70:42:
e1:d1:7e:d5:65:35:80:48:78:76:2f:9c:ef:b2:89:c3:f6:a5:
c9:a2:ef:80:62:db:b3:d6:80:c8:e3:78:e6:f9:01:bf:a5:2a:
54:b9:70:7e:a7:33:20:2e:38:45:c4:e4:13:60:6a:0e:bd:3c:
6f:cd:20:75:db:43:1d:5e:b7:76:66:53:91:e2:0e:ac:bf:ea:
b4:91:67:24:27:0a:14:16:f0:c3:ca:6d:eb:79:c9:6f:47:59:
f4:6f:db:b5:64:89:0a:47:de:d9:21:e9:62:52:97:a5:2c:b2:
0a:96:6a:28:ef:e7:74:d2:f6:81:bf:21:db:f2:35:66:93:65:
b6:ac:93:23:5c:24:2a:9b:69:60:43:28:78:02:03:bd:e2:c8:
c2:1b:e7:3b:db:e0:6b:d4:a8:ea:d4:cc:47:61:1c:86:1e:ed:
7a:30:ff:3e:47:e5:51:72:42:8e:96:95:62:67:b3:f7:7a:9c:
fd:9f:40:0e:22:3f:bf:d7:b9:57:91:da:ee:e6:08:28:cc:fd:
fa:6f:a3:69:a9:47:e5:f3:5a:7e:25:46:5d:14:a4:70:c6:b0:
e0:e7:16:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qckP3v3pWpmFy8i3VHrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz
MjA3ZmMwHhcNMjUwMTMxMTQwMDMxWhcNMjUwMjAxMTQwMDMxWjAzMTEwLwYDVQQD
EygwMGRlNWJiOTBhNmZlMDgxYjQ0YzM0ZGRlZmY3YzA4MjM1NjVlNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B2/76153XAHNYZhd0cwKeuFG6xq
ijci/Jjyk5lgu5UIvlUVb5ct60ADzFq4Bku2C2pp3L/s4y5ATTLeOBGpHSWc6Vtj
Iaz31XPwm3/YD0M0yWGUEV7I06eA1RIysLNcjqZzXkg+jst4ME63CTINZg5ATJsl
b2q7ywaZ+uMP6YHJvLqzSA0HR00Kv2rkqckYdwKQLCibPepvNn3jXf07O5c2caYq
t/wXbw1kZENVpfGoTducoKiIswDeA4rLmgiEtvSTKeQOvx4dIKBHU/0d4lQ9hnhN
I8W2wvnwIpbentAsKOGxQyqUkeIYh5p9tpscdH+0PXOJIfhilhXDeb3tFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADeW7kKb+CBtEw03e/3wII1ZeZDMB8GA1UdIwQY
MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt
MDJhYWM4YjU5NmRjLzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj
LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/+faXpd
hZLhJyuKKzz56zmB84O2Kg5vBcAS+kn+uJz/AnBC4dF+1WU1gEh4di+c77KJw/al
yaLvgGLbs9aAyON45vkBv6UqVLlwfqczIC44RcTkE2BqDr08b80gddtDHV63dmZT
keIOrL/qtJFnJCcKFBbww8pt63nJb0dZ9G/btWSJCkfe2SHpYlKXpSyyCpZqKO/n
dNL2gb8h2/I1ZpNltqyTI1wkKptpYEMoeAIDveLIwhvnO9vga9So6tTMR2Echh7t
ejD/PkflUXJCjpaVYmez93qc/Z9ADiI/v9e5V5Ha7uYIKMz9+m+jaalH5fNafiVG
XRSkcMaw4OcW6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:15 2025 by rpki-client