Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File: Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier: RlumuTldxEsjoiHFQKXaAfq3ZTZzyANxpccTB6X7O5M=
Subject key identifier: F6:0B:B2:CE:00:CA:CD:D9:10:63:63:C5:0B:50:C4:30:44:DE:EA:01
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial: 0194BC72BFE0DEFE8C667B0795C99E4D374C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number: 02A3
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: /JLh/6pT3FOoRzI/SMpmsb24qJKaAeb0la0Y70mN/dI=)
2: Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (hash: 5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bf:e0:de:fe:8c:66:7b:07:95:c9:9e:4d:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=f60bb2ce00cacdd9106363c50b50c43044deea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:3d:fc:7f:88:07:a5:95:3d:a7:b2:ac:61:
88:e1:36:bb:b7:23:ae:31:12:d5:ba:21:55:1c:57:
4a:48:b3:8f:6d:ea:b8:ae:5f:78:6f:7a:59:d0:9b:
b6:b3:b1:7d:8f:bb:65:a9:c2:b5:ca:2a:70:da:9f:
a8:f3:70:68:b8:68:16:45:96:f6:67:66:a5:61:81:
76:e9:f8:4f:14:05:b7:ee:d1:55:4b:82:c0:4e:18:
88:26:4b:73:f5:18:d1:a1:d0:f6:5c:93:5f:1e:be:
5b:85:3f:54:f5:50:32:29:a5:32:84:08:6d:13:8d:
c1:be:88:81:bc:e6:03:ee:27:6f:09:6f:df:06:6c:
c9:9a:de:04:ae:78:23:fa:26:94:6c:52:62:80:dc:
b2:03:89:42:08:17:25:bf:e4:1b:3f:84:c6:ed:8b:
84:49:ce:56:6f:05:77:1d:89:f6:cd:d1:6f:9e:01:
4b:d0:44:2c:37:39:ec:1c:3f:e8:7f:99:9a:88:80:
75:35:4b:65:c5:71:cf:1b:0b:88:67:1f:8b:f4:e0:
57:13:df:17:ea:9c:fb:94:94:31:32:ee:64:1e:e6:
8c:26:d8:bc:29:86:b4:9d:73:ee:e7:c2:4f:2c:37:
18:69:f3:48:3d:52:fd:3b:49:bb:e6:d5:67:00:3c:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0B:B2:CE:00:CA:CD:D9:10:63:63:C5:0B:50:C4:30:44:DE:EA:01
X509v3 Authority Key Identifier:
keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4b:05:73:d9:b5:d3:ce:06:09:75:79:67:87:be:be:a9:c6:
53:ce:2d:c8:35:cd:18:92:f4:1d:22:dd:bc:2e:ef:8c:55:1d:
59:1f:a0:66:20:d4:83:c4:d9:88:66:f5:e6:f2:1c:bb:89:87:
4d:c7:1e:61:ea:54:24:0a:e5:87:bd:85:f0:5f:23:55:be:f0:
44:a4:df:7d:81:c8:1a:e5:81:4d:0d:fc:df:54:d3:60:51:61:
6f:87:69:0e:5f:29:7f:95:a5:23:0b:a6:eb:5b:6a:c1:83:7c:
41:b8:41:e7:14:f2:97:b5:98:c2:1a:df:65:4d:75:ab:6f:b5:
2f:cf:9b:1e:70:f4:fc:d7:cc:81:8f:29:aa:48:6f:8f:11:ac:
8b:ce:37:ec:d7:62:27:55:a3:a5:ec:ac:b6:75:9e:f5:c8:bf:
c7:2b:bc:0f:15:36:d1:f8:8e:e9:ac:9b:e9:43:e3:54:cd:48:
54:b3:d2:12:46:09:ae:d7:76:22:b5:8f:f4:f7:05:2d:ac:71:
d2:f8:1d:2e:e4:37:8b:61:fe:e3:42:bc:2f:ea:c6:c3:c6:8a:
f8:80:92:7a:55:c4:4d:cf:38:76:99:7e:63:01:bc:74:62:01:
2e:2d:b2:bf:52:ff:ae:a7:e9:d8:43:b2:c3:00:5d:2a:68:76:
32:e3:8c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cr/g3v6MZnsHlcmeTTdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTc0MTJlYzRiMGI4ZmIyZGU5ZDJkZjE3YTZhYzcyODNl
ZGVkYjUwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
EyhmNjBiYjJjZTAwY2FjZGQ5MTA2MzYzYzUwYjUwYzQzMDQ0ZGVlYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTw9/H+IB6WVPaeyrGGI4Ta7tyOu
MRLVuiFVHFdKSLOPbeq4rl94b3pZ0Ju2s7F9j7tlqcK1yipw2p+o83BouGgWRZb2
Z2alYYF26fhPFAW37tFVS4LAThiIJktz9RjRodD2XJNfHr5bhT9U9VAyKaUyhAht
E43BvoiBvOYD7idvCW/fBmzJmt4Erngj+iaUbFJigNyyA4lCCBclv+QbP4TG7YuE
Sc5WbwV3HYn2zdFvngFL0EQsNznsHD/of5maiIB1NUtlxXHPGwuIZx+L9OBXE98X
6pz7lJQxMu5kHuaMJti8KYa0nXPu58JPLDcYafNIPVL9O0m75tVnADzAjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYLss4Ays3ZEGNjxQtQxDBE3uoBMB8GA1UdIwQY
MBaAFGeXQS7EsLj7LenS3xemrHKD7e21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5Mzct
NTNhODYxOWI0MmY1LzEvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5MzctNTNhODYxOWI0MmY1
LzEvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfksFc9m1
084GCXV5Z4e+vqnGU84tyDXNGJL0HSLdvC7vjFUdWR+gZiDUg8TZiGb15vIcu4mH
TcceYepUJArlh72F8F8jVb7wRKTffYHIGuWBTQ3831TTYFFhb4dpDl8pf5WlIwum
61tqwYN8QbhB5xTyl7WYwhrfZU11q2+1L8+bHnD0/NfMgY8pqkhvjxGsi8437Ndi
J1WjpeystnWe9ci/xyu8DxU20fiO6ayb6UPjVM1IVLPSEkYJrtd2IrWP9PcFLaxx
0vgdLuQ3i2H+40K8L+rGw8aK+ICSelXETc84dpl+YwG8dGIBLi2yv1L/rqfp2EOy
wwBdKmh2MuOMDA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:43 2025 by rpki-client