Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: H1u7sJ3D3OiMda67YiwyiyQHBg/Qs3sLQV4QKZLrYdo=
Subject key identifier: 3D:1D:EC:14:9C:D1:64:0D:68:BC:10:04:53:01:01:9A:E8:7B:6E:C4
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 0194BD85719F38EA3CCC0519CF6ADEFCD22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: GOPrWEbWGvNA8Zdmr9qSeX02ECdy4slZ1SD95i7GWEM=)
2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:71:9f:38:ea:3c:cc:05:19:cf:6a:de:fc:d2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=3d1dec149cd1640d68bc10045301019ae87b6ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:78:19:8c:53:62:0d:81:8d:15:8c:87:cf:
48:ac:50:0a:b0:e9:63:7e:9a:fa:3c:6e:53:c5:a7:
46:11:ce:01:3b:52:d4:73:dc:0c:a9:14:54:6d:a0:
2e:64:db:7d:75:92:46:ca:54:21:21:19:84:fb:92:
d9:96:e9:81:07:b9:a6:f6:32:38:14:75:3d:f7:0f:
33:51:74:46:fc:fe:b3:07:48:d0:c0:c0:c9:10:c9:
9f:6d:55:b1:91:a2:c8:4f:16:3d:a6:95:6c:ba:b8:
6e:77:d6:af:7f:5e:91:10:51:93:15:a9:d7:3f:04:
a5:43:87:07:33:c9:1f:25:eb:e1:6c:6b:a7:b3:ad:
5f:7f:d8:73:0c:2f:12:d3:11:97:27:d8:94:99:80:
1d:ad:37:b6:bf:1f:3f:75:3f:62:6e:9d:6f:3e:55:
68:8a:e1:0f:65:62:35:33:a1:ee:dd:37:b7:5c:21:
6b:71:4a:72:ee:b9:ca:eb:00:66:a3:1e:8a:5d:28:
7b:ce:9f:ef:8a:79:18:b1:7b:69:9c:a4:64:04:96:
f9:6b:e3:48:23:d7:b8:11:ae:c3:8d:17:3c:98:74:
ac:f7:5c:42:85:2b:77:ca:44:0f:d1:83:94:8e:63:
96:49:b8:cc:af:32:c1:b2:63:0d:c5:63:a2:c7:cf:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1D:EC:14:9C:D1:64:0D:68:BC:10:04:53:01:01:9A:E8:7B:6E:C4
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:6f:bc:49:b9:29:30:36:24:8a:1b:ae:12:a7:53:ad:7e:
b2:ea:c8:ef:ac:d4:84:b4:15:11:91:e1:74:39:bc:8c:5a:f0:
be:0c:69:f6:11:c4:14:20:5f:33:03:43:91:25:79:44:0d:67:
75:d4:b3:de:c7:34:51:42:77:9e:60:b4:b9:06:04:6b:b6:68:
ea:df:21:eb:91:78:7f:7c:04:cd:23:fd:c7:23:69:01:f2:da:
32:f3:26:55:be:50:aa:5e:3d:51:55:46:9f:84:78:70:9c:fa:
1d:46:3b:86:0a:bf:07:49:02:10:11:ef:35:f9:95:b9:33:96:
08:ae:52:08:68:57:cd:0e:7e:fc:28:82:bd:70:1b:46:f4:b6:
44:5c:fd:ef:4f:ac:e5:62:2d:24:2a:f1:a6:b0:58:a2:9a:9d:
0d:de:9b:08:98:ce:1c:88:81:2b:b2:79:12:58:6f:79:6e:a5:
0a:ca:ae:6d:f6:b8:5a:03:47:50:fe:60:86:67:c7:68:d5:b9:
69:82:59:fc:cc:50:b5:8e:a5:d3:fc:3c:00:67:5e:98:85:54:
7e:c2:9e:e9:61:e3:f0:cd:ca:a9:c9:db:a0:97:19:0b:54:bc:
de:71:90:58:71:f0:34:0b:3f:3b:00:e3:22:78:44:b1:a3:3b:
bf:9c:66:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXGfOOo8zAUZz2re/NIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2Y5OTk2MmY5ODlmN2I3MzNkYTdhYTcwZWFmOWU0MTA1
MmFlMTkwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
EygzZDFkZWMxNDljZDE2NDBkNjhiYzEwMDQ1MzAxMDE5YWU4N2I2ZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48h4GYxTYg2BjRWMh89IrFAKsOlj
fpr6PG5TxadGEc4BO1LUc9wMqRRUbaAuZNt9dZJGylQhIRmE+5LZlumBB7mm9jI4
FHU99w8zUXRG/P6zB0jQwMDJEMmfbVWxkaLITxY9ppVsurhud9avf16REFGTFanX
PwSlQ4cHM8kfJevhbGuns61ff9hzDC8S0xGXJ9iUmYAdrTe2vx8/dT9ibp1vPlVo
iuEPZWI1M6Hu3Te3XCFrcUpy7rnK6wBmox6KXSh7zp/vinkYsXtpnKRkBJb5a+NI
I9e4Ea7DjRc8mHSs91xChSt3ykQP0YOUjmOWSbjMrzLBsmMNxWOix8+1VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0d7BSc0WQNaLwQBFMBAZroe27EMB8GA1UdIwQY
MBaAFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEt
NDA5ZWExMjA4OTI2LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEtNDA5ZWExMjA4OTI2
LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiRvvEm5
KTA2JIobrhKnU61+surI76zUhLQVEZHhdDm8jFrwvgxp9hHEFCBfMwNDkSV5RA1n
ddSz3sc0UUJ3nmC0uQYEa7Zo6t8h65F4f3wEzSP9xyNpAfLaMvMmVb5Qql49UVVG
n4R4cJz6HUY7hgq/B0kCEBHvNfmVuTOWCK5SCGhXzQ5+/CiCvXAbRvS2RFz970+s
5WItJCrxprBYopqdDd6bCJjOHIiBK7J5ElhveW6lCsqubfa4WgNHUP5ghmfHaNW5
aYJZ/MxQtY6l0/w8AGdemIVUfsKe6WHj8M3KqcnboJcZC1S83nGQWHHwNAs/OwDj
InhEsaM7v5xmxg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:19:55 2025 by rpki-client