Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: MCvdOzlke17WeJK6/1eZ9gz2pxWPpqMaACvuG/mW3ok=
Subject key identifier: C6:31:E5:36:7D:B6:4D:57:54:9E:EF:A8:9D:EF:E2:AD:22:4C:BA:EA
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 0194BC72B2FDD5AC702EE104E78EDA3D8E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 0F1C
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: +xZJ6A8gDH5x0srbqDmb3eLc+F9X8bTQ92GYt6xZL5A=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b2:fd:d5:ac:70:2e:e1:04:e7:8e:da:3d:8e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=c631e5367db64d57549eefa89defe2ad224cbaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:02:7f:ea:8e:e8:67:b4:81:8e:93:76:20:
42:82:a9:bc:5a:d0:28:2a:8c:70:6d:19:41:1e:94:
cc:41:25:5f:ff:17:17:ea:b4:bc:ad:69:7a:67:25:
a6:ea:59:18:6a:a6:b1:72:57:e4:44:3c:b5:83:a2:
a4:77:ee:1e:76:50:fb:1b:df:a3:5d:cd:d9:d2:a3:
8d:03:99:c3:57:bd:19:5b:1e:b2:1d:5c:d1:b0:4d:
62:59:ec:49:7a:8d:fe:76:07:a4:e4:50:ee:7f:18:
c1:a7:4a:2b:75:01:5f:55:7d:c6:8f:6c:e5:ab:d6:
3a:ee:64:19:ef:3f:e6:af:f1:62:47:b8:16:45:a8:
d6:83:18:3d:c9:4e:67:07:71:3c:fe:dd:9a:29:28:
3f:2b:15:ff:43:28:e7:a0:69:8e:75:9c:5e:c5:95:
2d:ef:31:30:95:f6:d4:ca:f4:9f:3d:ca:8a:03:8f:
0f:1f:16:45:06:e1:db:c4:1b:43:1b:2e:9f:48:24:
b6:7c:56:9b:9f:a9:87:ed:60:0a:7b:af:a0:e9:03:
77:d1:d2:19:7a:50:73:6d:0a:34:5c:35:4b:55:a0:
2b:55:20:5d:35:fc:a8:57:3a:38:3f:6d:48:74:a2:
03:6f:b4:a0:c0:aa:1b:5e:be:e8:a5:6c:11:82:9e:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:E5:36:7D:B6:4D:57:54:9E:EF:A8:9D:EF:E2:AD:22:4C:BA:EA
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e0:7b:c9:11:37:06:3e:fe:dc:28:ec:5c:70:74:b6:1b:90:
44:74:fb:b0:bc:27:dc:e5:13:39:a5:97:7a:5e:af:28:d2:97:
50:f2:31:70:70:ca:47:89:9b:fd:14:eb:ce:0c:e1:80:66:7e:
1b:17:12:eb:8b:8a:2e:b6:06:c1:f5:36:87:3d:79:3b:ec:20:
bc:cb:c7:24:bb:c4:0f:7b:52:8a:3f:86:ba:72:8d:20:f3:26:
81:1a:2a:de:55:eb:95:58:b0:45:ab:dc:c0:36:11:0a:c6:15:
ad:79:01:3a:69:c4:fe:7a:0a:b9:87:e6:38:9c:db:3e:5f:ca:
e9:35:aa:12:af:de:e8:b0:72:7a:2c:e7:c1:bb:a9:ef:15:d3:
6f:db:29:0c:03:40:57:3c:7f:7d:b3:7d:3a:9d:bf:80:e4:14:
07:d5:8b:b9:ba:6e:e9:14:57:6f:31:10:e9:1d:92:91:d7:a4:
73:8b:69:af:9d:12:a5:e0:04:15:69:02:00:01:8b:99:69:a3:
70:20:24:67:ac:f3:a4:7d:0a:1d:a2:8d:52:b9:34:2e:ce:1d:
40:db:5d:6a:a7:29:f4:54:3e:3d:1a:24:c0:bd:47:77:9a:3e:
2e:a5:49:21:5f:5f:55:dd:93:c8:f5:64:5e:74:84:3c:f8:40:
07:21:8b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crL91axwLuEE547aPY5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3
OWFhZDAwHhcNMjUwMTMxMTMwMDIxWhcNMjUwMjAxMTMwMDIxWjAzMTEwLwYDVQQD
EyhjNjMxZTUzNjdkYjY0ZDU3NTQ5ZWVmYTg5ZGVmZTJhZDIyNGNiYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6sCf+qO6Ge0gY6TdiBCgqm8WtAo
KoxwbRlBHpTMQSVf/xcX6rS8rWl6ZyWm6lkYaqaxclfkRDy1g6Kkd+4edlD7G9+j
Xc3Z0qONA5nDV70ZWx6yHVzRsE1iWexJeo3+dgek5FDufxjBp0ordQFfVX3Gj2zl
q9Y67mQZ7z/mr/FiR7gWRajWgxg9yU5nB3E8/t2aKSg/KxX/QyjnoGmOdZxexZUt
7zEwlfbUyvSfPcqKA48PHxZFBuHbxBtDGy6fSCS2fFabn6mH7WAKe6+g6QN30dIZ
elBzbQo0XDVLVaArVSBdNfyoVzo4P21IdKIDb7SgwKobXr7opWwRgp5gqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYx5TZ9tk1XVJ7vqJ3v4q0iTLrqMB8GA1UdIwQY
MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt
Y2FjYThiODBjOTFjLzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj
LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOB7yRE3
Bj7+3CjsXHB0thuQRHT7sLwn3OUTOaWXel6vKNKXUPIxcHDKR4mb/RTrzgzhgGZ+
GxcS64uKLrYGwfU2hz15O+wgvMvHJLvED3tSij+GunKNIPMmgRoq3lXrlViwRavc
wDYRCsYVrXkBOmnE/noKuYfmOJzbPl/K6TWqEq/e6LByeiznwbup7xXTb9spDANA
Vzx/fbN9Op2/gOQUB9WLubpu6RRXbzEQ6R2Skdekc4tpr50SpeAEFWkCAAGLmWmj
cCAkZ6zzpH0KHaKNUrk0Ls4dQNtdaqcp9FQ+PRokwL1Hd5o+LqVJIV9fVd2TyPVk
XnSEPPhAByGLAw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:52 2025 by rpki-client