Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier: X6CWGho3IymzyEh00BtBmshjvNAOU6dtRASsEBqXOJg=
Subject key identifier: BE:A4:17:4A:36:A5:41:AD:38:DD:BC:0A:62:4C:86:C8:06:6D:5D:02
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 0194BCE08F7DAE7014677BA203AB1BEF9351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: /HhCk6L/foJ9/g5MV1+bRRmbAfEY4JplCN7nLDBWtGw=)
2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=)
3: mP0KR8qjiNVVziS_navTGUPwqiA.roa (hash: xZa0pPgGKaK3igZY01F/k1ukXOLEVZhp0AOMi/bszSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8f:7d:ae:70:14:67:7b:a2:03:ab:1b:ef:93:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=bea4174a36a541ad38ddbc0a624c86c8066d5d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:14:14:8d:e4:c3:d7:4d:06:ad:60:1f:b4:
0f:ce:03:c3:3e:d1:a5:75:cd:02:26:57:1b:e3:4b:
4d:25:fb:e3:a9:2d:8e:ab:a6:77:52:32:00:6e:14:
73:e6:17:d5:7c:93:41:1a:d6:2f:3e:19:07:98:c2:
88:6f:77:02:6b:ea:c8:b8:d8:5f:53:46:1e:c2:1d:
47:9f:38:9a:6d:cc:4f:09:62:3f:ef:f1:6a:09:28:
39:ab:55:3b:55:57:9e:ba:da:0d:21:35:a2:53:8e:
13:b7:a8:e6:8a:25:1a:0d:b4:00:36:cd:ff:aa:f0:
7b:bf:ca:74:27:fb:8f:28:29:6e:90:b9:64:bb:79:
cc:7c:2f:16:21:f2:e0:0b:32:0f:ed:2a:e3:5f:21:
c6:c4:06:bb:44:0e:64:d4:06:37:57:06:19:b6:23:
24:f5:aa:74:ce:32:39:a2:b2:ea:5f:23:37:65:bf:
2f:bb:e5:9f:33:07:d2:1a:a7:9b:33:ad:3d:39:f3:
c3:53:a6:45:86:80:52:02:13:a5:84:c2:c0:e4:b4:
fd:43:99:a2:7d:5a:1a:9c:d2:3c:f3:3c:8c:d5:58:
92:34:72:a7:65:21:0f:53:55:18:65:9d:65:ed:a2:
7c:b7:a8:db:73:7d:fb:d6:97:23:57:e1:e2:6e:40:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:17:4A:36:A5:41:AD:38:DD:BC:0A:62:4C:86:C8:06:6D:5D:02
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9f:da:3a:f3:18:45:32:91:40:b1:27:14:8d:90:d4:f7:41:
44:fa:8a:ac:99:6a:cf:92:e4:3e:22:ee:b2:3c:78:dd:62:dd:
3d:c3:6b:48:a4:05:80:2e:71:a5:07:56:56:ad:8e:3d:a9:2f:
1d:08:72:33:c7:6a:77:ad:a7:03:e3:2f:41:0e:0d:b4:8f:57:
fd:d5:82:f0:20:7b:af:d0:b5:b6:f8:c3:a1:69:b1:18:77:80:
a7:77:c0:71:14:ce:6a:2a:f7:13:be:16:01:bf:ec:88:67:bc:
37:57:d3:d4:25:fe:52:b9:26:06:22:fc:11:f0:66:ce:e9:61:
81:e6:be:b2:38:31:2f:47:99:2b:b8:65:e6:51:53:4a:5d:73:
b4:1a:4d:8d:f2:cf:7c:b6:63:88:07:46:bb:22:8f:88:6d:f0:
d4:b1:56:1a:ce:96:98:8c:d4:4a:02:6d:ba:b7:56:12:9a:67:
33:2b:d4:54:a6:6f:c1:dd:a0:42:dd:1a:7a:31:7e:8a:91:ca:
48:f6:95:2d:db:bc:e6:c1:cb:3f:89:a6:01:f6:98:2b:cc:92:
80:f0:3e:64:06:d9:58:27:1b:96:c5:b1:cf:1e:42:4b:c0:a1:
fb:e8:be:d5:0f:d9:8c:b2:7b:a8:10:5d:aa:75:a6:85:1c:35:
c0:07:13:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84I99rnAUZ3uiA6sb75NRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjI2ZWU1ZWEwNDA2NTkyZGY5NzVjNmY0Yzg0ZjEwZjE0
ZDE1Y2IwHhcNMjUwMTMxMTUwMDIwWhcNMjUwMjAxMTUwMDIwWjAzMTEwLwYDVQQD
EyhiZWE0MTc0YTM2YTU0MWFkMzhkZGJjMGE2MjRjODZjODA2NmQ1ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq0UFI3kw9dNBq1gH7QPzgPDPtGl
dc0CJlcb40tNJfvjqS2Oq6Z3UjIAbhRz5hfVfJNBGtYvPhkHmMKIb3cCa+rIuNhf
U0Yewh1HnziabcxPCWI/7/FqCSg5q1U7VVeeutoNITWiU44Tt6jmiiUaDbQANs3/
qvB7v8p0J/uPKClukLlku3nMfC8WIfLgCzIP7SrjXyHGxAa7RA5k1AY3VwYZtiMk
9ap0zjI5orLqXyM3Zb8vu+WfMwfSGqebM609OfPDU6ZFhoBSAhOlhMLA5LT9Q5mi
fVoanNI88zyM1ViSNHKnZSEPU1UYZZ1l7aJ8t6jbc3371pcjV+HibkAhoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6kF0o2pUGtON28CmJMhsgGbV0CMB8GA1UdIwQY
MBaAFGUibuXqBAZZLfl1xvTITxDxTRXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEt
ZGVjMDI0ODhjMzdjLzEvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEtZGVjMDI0ODhjMzdj
LzEvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYp/aOvMY
RTKRQLEnFI2Q1PdBRPqKrJlqz5LkPiLusjx43WLdPcNrSKQFgC5xpQdWVq2OPakv
HQhyM8dqd62nA+MvQQ4NtI9X/dWC8CB7r9C1tvjDoWmxGHeAp3fAcRTOair3E74W
Ab/siGe8N1fT1CX+UrkmBiL8EfBmzulhgea+sjgxL0eZK7hl5lFTSl1ztBpNjfLP
fLZjiAdGuyKPiG3w1LFWGs6WmIzUSgJturdWEppnMyvUVKZvwd2gQt0aejF+ipHK
SPaVLdu85sHLP4mmAfaYK8ySgPA+ZAbZWCcblsWxzx5CS8Ch++i+1Q/ZjLJ7qBBd
qnWmhRw1wAcTJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:01 2025 by rpki-client