Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: AMRkXFmxMABjfPGQERtL9W2EGbUSmC++Py362ANhzqs=
Subject key identifier: 10:6E:60:99:62:FC:D3:DC:13:31:6E:6A:9F:54:38:E7:B1:BB:BB:88
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 0194BC04AAF32B67F9DEB00BFE3CB1E82B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 02B8
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: RtwNd0kIIB4fJfHreOuMYKMR7lc.roa (hash: qbEtbkjwEQIcvAZsD7fY24iBMXF9LqUeMZOAB812XzU=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: wn8KN1MB5IlWFgjFkCiRmhlVJ0WuGb9RkpyZ3wSuHZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:aa:f3:2b:67:f9:de:b0:0b:fe:3c:b1:e8:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=106e609962fcd3dc13316e6a9f5438e7b1bbbb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:35:11:3f:c8:a0:7e:ef:c6:a1:78:10:4e:
79:57:96:b0:43:c5:60:ef:75:67:ac:7e:60:fe:d8:
90:a4:3b:8e:6e:88:33:cd:af:e7:51:10:a4:cb:39:
5d:5e:bc:ee:db:52:fd:40:7c:43:07:08:57:5c:6a:
aa:c2:cb:b9:69:89:8e:56:44:ff:51:3b:d3:e7:c2:
73:7c:98:47:8b:6a:77:ca:f6:c1:5b:2f:89:3c:bd:
c8:68:49:85:85:30:80:66:42:dd:49:2b:03:1a:c5:
b1:c8:64:fe:72:4a:85:53:4f:3a:be:47:be:bb:c1:
d9:d1:c8:49:9e:de:33:7b:ad:3b:96:4a:11:cd:7f:
a6:95:5f:54:f7:61:64:ce:75:93:5e:f2:ae:85:44:
21:f4:73:37:80:cc:8b:e0:e1:40:c4:4e:fd:8f:dc:
11:f1:2e:ea:e0:cb:cb:fc:73:97:80:7f:ae:34:b5:
26:0f:0c:2e:ce:65:29:ff:b1:d9:63:e5:03:da:9e:
82:31:cf:f9:6c:d7:4f:3d:a8:1b:6f:ae:07:35:44:
ee:a5:d3:04:80:61:02:1d:a2:50:a8:ec:b9:96:7c:
59:dd:84:6d:15:b8:d6:80:d4:d8:f1:e1:c4:c3:ef:
89:54:31:e8:7a:43:cb:ed:c3:9a:81:d8:bd:9c:ca:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:60:99:62:FC:D3:DC:13:31:6E:6A:9F:54:38:E7:B1:BB:BB:88
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b7:67:9a:15:c6:71:a1:99:e7:f0:a4:45:e1:8c:52:63:02:
a0:17:3c:66:14:68:da:e0:e1:5b:28:5b:be:60:3a:a1:66:3b:
ed:72:fe:36:a1:fd:d7:a4:c4:a6:d2:81:84:90:92:f6:a5:6d:
60:40:d3:12:6d:e3:5b:e8:57:0b:23:90:e7:c2:0a:38:ca:16:
e2:98:f4:9b:2e:77:9c:da:49:fb:6f:c3:4a:24:a1:ba:28:98:
84:93:82:f0:3f:cf:1e:7f:a6:79:0f:95:50:d2:fb:ed:18:b4:
fa:2a:13:57:33:a4:85:c4:f2:c2:7f:36:dd:2e:ac:6e:94:8c:
10:c0:e2:0f:70:3e:17:88:c0:ef:db:30:59:2b:47:6c:95:c9:
c6:04:2e:b2:67:df:26:93:f4:da:8c:b5:52:35:a1:a7:b7:7e:
9f:05:f2:4e:e2:67:55:a1:09:9f:8e:3e:e6:91:2a:45:29:99:
73:4e:80:fb:c5:b4:5b:f4:1b:28:44:10:9d:a7:e2:ac:81:80:
6a:ef:ab:56:1c:32:23:60:ce:8b:7d:4c:1f:92:63:d5:c3:95:
5e:f7:24:d0:a5:34:a0:ee:f1:31:33:a4:50:e0:56:2f:04:b0:
14:9c:49:2d:b3:02:8d:4e:0f:a8:db:8d:3b:d0:64:c6:ff:e5:
ed:33:f9:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKrzK2f53rAL/jyx6CszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTE3M2JjODI4YWI3MWRhMmViY2FmYTdmODk4ZWM2YWEx
ZWVhNzYwHhcNMjUwMTMxMTEwMDA5WhcNMjUwMjAxMTEwMDA5WjAzMTEwLwYDVQQD
EygxMDZlNjA5OTYyZmNkM2RjMTMzMTZlNmE5ZjU0MzhlN2IxYmJiYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKE1ET/IoH7vxqF4EE55V5awQ8Vg
73VnrH5g/tiQpDuObogzza/nURCkyzldXrzu21L9QHxDBwhXXGqqwsu5aYmOVkT/
UTvT58JzfJhHi2p3yvbBWy+JPL3IaEmFhTCAZkLdSSsDGsWxyGT+ckqFU086vke+
u8HZ0chJnt4ze607lkoRzX+mlV9U92FkznWTXvKuhUQh9HM3gMyL4OFAxE79j9wR
8S7q4MvL/HOXgH+uNLUmDwwuzmUp/7HZY+UD2p6CMc/5bNdPPagbb64HNUTupdME
gGECHaJQqOy5lnxZ3YRtFbjWgNTY8eHEw++JVDHoekPL7cOagdi9nMrR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBuYJli/NPcEzFuap9UOOexu7uIMB8GA1UdIwQY
MBaAFM2Rc7yCircdouvK+n+JjsaqHup2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpGenZJS0t0eDJpNjhyNmY0bU94cW9lNm5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81YjhiOWMtOGYxOS00YzZiLWFmZDct
YzY5NDI2MDAxN2IwLzEvelpGenZJS0t0eDJpNjhyNmY0bU94cW9lNm5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS81YjhiOWMtOGYxOS00YzZiLWFmZDctYzY5NDI2MDAxN2Iw
LzEvelpGenZJS0t0eDJpNjhyNmY0bU94cW9lNm5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbdnmhXG
caGZ5/CkReGMUmMCoBc8ZhRo2uDhWyhbvmA6oWY77XL+NqH916TEptKBhJCS9qVt
YEDTEm3jW+hXCyOQ58IKOMoW4pj0my53nNpJ+2/DSiShuiiYhJOC8D/PHn+meQ+V
UNL77Ri0+ioTVzOkhcTywn823S6sbpSMEMDiD3A+F4jA79swWStHbJXJxgQusmff
JpP02oy1UjWhp7d+nwXyTuJnVaEJn44+5pEqRSmZc06A+8W0W/QbKEQQnafirIGA
au+rVhwyI2DOi31MH5Jj1cOVXvck0KU0oO7xMTOkUOBWLwSwFJxJLbMCjU4PqNuN
O9Bkxv/l7TP5bA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:26 2025 by rpki-client