Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: emroYxPaULWelfPAV3zAIiE0M1CcmLng7hLjZL6Ps4Y=
Subject key identifier: B2:B9:22:5E:4E:A8:35:D9:65:22:43:D5:F3:5A:96:B2:70:F1:CA:A5
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 0194BD17CD020D1BCE02FE3B6BE3A7865244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 0347
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: BdPWH3ktg2lQ2lcVlMl73NMr0SAdK5X+5DShoq1JL6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cd:02:0d:1b:ce:02:fe:3b:6b:e3:a7:86:52:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=b2b9225e4ea835d9652243d5f35a96b270f1caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:08:df:8a:a0:78:70:af:3d:c1:62:79:13:
72:31:9d:ac:0c:e9:50:51:42:5e:f5:e3:77:27:80:
96:ff:61:b1:3e:cb:aa:53:65:a3:b2:30:f9:13:d9:
7a:d5:1e:df:6d:ef:de:4f:9b:6a:f8:d5:84:07:42:
c0:fb:31:fa:65:12:3d:cc:3a:62:e7:50:4b:9e:bc:
a9:5d:56:59:83:5d:84:3d:ee:00:06:ff:00:28:80:
4a:51:6b:43:cf:5a:18:d9:43:d9:7c:36:5d:23:fe:
0f:0b:c2:5b:3b:10:41:9a:ce:ae:9e:13:ce:60:ad:
f7:41:23:e8:67:04:ca:55:34:7b:26:9c:77:f3:c6:
e9:7d:ab:ab:5d:d0:a5:3e:ce:4e:8a:64:12:ea:b3:
02:f9:c2:47:09:12:a5:e0:08:5b:d7:50:8c:bb:74:
14:6b:63:54:db:2e:e5:6d:f8:6a:f8:5e:81:88:fc:
df:02:1b:31:d0:0c:6a:2d:03:6c:46:34:30:4c:06:
ca:cd:d8:bb:72:24:bc:77:1f:b4:b4:e1:d1:33:3d:
9a:9f:ab:5b:5a:a1:03:96:5f:f5:56:47:41:98:a9:
f3:1b:ed:c5:05:d3:a0:65:72:ea:ee:11:41:65:c7:
79:e8:22:32:a5:ea:da:ff:3d:fc:43:54:fe:04:0e:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B9:22:5E:4E:A8:35:D9:65:22:43:D5:F3:5A:96:B2:70:F1:CA:A5
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e9:70:f4:4d:d5:67:1c:d3:82:5f:b1:dc:ab:43:34:f6:c9:
2b:49:56:77:bc:59:b0:13:17:27:5b:10:fb:5f:0b:60:b4:67:
df:b6:fd:b8:f7:fa:fb:c7:53:cf:9a:ac:2c:b3:56:84:4d:c9:
d9:05:84:fd:37:65:b7:3e:53:36:e9:8f:73:0a:36:7f:02:f6:
a6:62:33:5c:72:ca:30:d9:d4:86:22:bb:4f:77:7a:65:65:a4:
ec:9b:41:ae:f2:1d:08:8b:6d:af:44:7b:c3:3e:90:71:53:9f:
6b:6a:36:af:66:68:07:9d:2b:61:d7:23:df:5e:2f:7c:2b:fc:
ca:0c:bb:39:9f:cb:ed:70:a6:42:2f:4e:c4:35:98:a1:df:d3:
46:a1:02:7a:64:2f:83:54:d8:24:d9:f5:ec:eb:52:5f:b0:0b:
d0:4f:d3:9f:2e:86:ed:d2:30:62:13:3a:55:57:cb:9e:d1:ce:
4a:9c:4b:dd:82:a0:19:8f:45:96:93:87:52:c9:ef:3e:d6:af:
07:a3:c6:ce:de:7b:41:e6:13:e5:c9:08:26:ef:15:a1:fc:95:
0e:47:e4:59:2d:a9:ec:36:8e:1b:10:6b:ca:6e:51:d0:10:00:
f4:fa:4b:16:8d:54:7f:1f:2d:cb:2a:85:b5:db:3e:0a:9e:b5:
ca:b1:fd:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F80CDRvOAv47a+OnhlJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmNkOTQ1NWUxZTU1YTVlMWQ2MDFiZDRhODU3NGI1YWZk
NTQwNzUwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
EyhiMmI5MjI1ZTRlYTgzNWQ5NjUyMjQzZDVmMzVhOTZiMjcwZjFjYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfMI34qgeHCvPcFieRNyMZ2sDOlQ
UUJe9eN3J4CW/2GxPsuqU2WjsjD5E9l61R7fbe/eT5tq+NWEB0LA+zH6ZRI9zDpi
51BLnrypXVZZg12EPe4ABv8AKIBKUWtDz1oY2UPZfDZdI/4PC8JbOxBBms6unhPO
YK33QSPoZwTKVTR7Jpx388bpfaurXdClPs5OimQS6rMC+cJHCRKl4Ahb11CMu3QU
a2NU2y7lbfhq+F6BiPzfAhsx0AxqLQNsRjQwTAbKzdi7ciS8dx+0tOHRMz2an6tb
WqEDll/1VkdBmKnzG+3FBdOgZXLq7hFBZcd56CIypera/z38Q1T+BA6AfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK5Il5OqDXZZSJD1fNalrJw8cqlMB8GA1UdIwQY
MBaAFP682UVeHlWl4dYBvUqFdLWv1UB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQt
MTYxMjdjOGE3ZWFjLzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQtMTYxMjdjOGE3ZWFj
LzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADulw9E3V
ZxzTgl+x3KtDNPbJK0lWd7xZsBMXJ1sQ+18LYLRn37b9uPf6+8dTz5qsLLNWhE3J
2QWE/Tdltz5TNumPcwo2fwL2pmIzXHLKMNnUhiK7T3d6ZWWk7JtBrvIdCIttr0R7
wz6QcVOfa2o2r2ZoB50rYdcj314vfCv8ygy7OZ/L7XCmQi9OxDWYod/TRqECemQv
g1TYJNn17OtSX7AL0E/Tny6G7dIwYhM6VVfLntHOSpxL3YKgGY9FlpOHUsnvPtav
B6PGzt57QeYT5ckIJu8VofyVDkfkWS2p7DaOGxBrym5R0BAA9PpLFo1Ufx8tyyqF
tds+Cp61yrH9Ng==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:53 2025 by rpki-client