Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
File: ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json)
Hash identifier: IZkQMS3xXR59JhF0RISZJeH5hZcmGw6q28dfXnZ8vJA=
Subject key identifier: 27:03:45:2C:AE:BC:73:8A:E6:EA:F7:53:2A:10:01:C1:99:45:74:17
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial: 0194BD17D4EBE04E57D3122E0E23BC0BCAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
Manifest number: 0356
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: Cwy6HrMC1cyc3fRzbwiqlUgl0EqFsSdAzn9Lvdbb37w=)
2: qoEqQd-KonLGkAm_wguz4NaqHfs.roa (hash: E6NKTVGy2K4uHsRTO20RHuS+xHYcScb4tSIex+a8NyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d4:eb:e0:4e:57:d3:12:2e:0e:23:bc:0b:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=2703452caebc738ae6eaf7532a1001c199457417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:c0:5a:2d:52:18:d5:ec:1e:fa:f0:bd:30:
32:a8:0a:58:92:79:cf:f5:94:b7:4c:eb:66:3d:ef:
51:a1:9f:d1:1d:b4:db:67:36:e3:66:44:82:bc:8b:
9e:d1:f9:18:08:d5:dc:ff:fd:c0:7f:d0:4c:65:c4:
71:57:d6:3a:60:7a:f8:2c:59:1e:3b:d9:0d:5e:08:
ac:b5:4f:5e:28:d3:fb:ee:01:6c:07:45:f5:1c:04:
a6:8e:1b:37:0b:e9:e1:a9:d5:39:5e:9e:76:e5:06:
14:35:84:16:dd:45:bd:dd:4e:fd:d3:0e:7a:8c:14:
12:c9:7c:8d:c7:50:84:1e:af:43:d9:a1:c7:d7:89:
df:3d:8f:5f:77:4b:f9:f1:91:36:0c:7e:e2:b6:88:
aa:41:2d:22:c1:7f:dd:b7:81:2c:77:fa:82:44:4a:
4f:01:88:d9:f7:f7:32:a2:d8:1a:76:0d:8e:dd:a0:
f9:4b:f5:b5:c9:95:9a:8a:fb:84:3e:47:f5:ad:f8:
ef:2c:7f:0e:1f:4e:90:65:58:68:3a:18:3f:8e:25:
06:e6:ee:95:2a:00:93:d8:ab:a7:f0:fd:50:05:af:
6f:cd:c1:5f:3f:6c:95:a4:6e:cb:74:21:09:87:4c:
c1:18:c8:69:90:24:96:29:d4:2e:31:3f:e1:f1:ec:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:45:2C:AE:BC:73:8A:E6:EA:F7:53:2A:10:01:C1:99:45:74:17
X509v3 Authority Key Identifier:
keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e5:80:62:ed:c5:32:24:50:4d:49:f2:ed:33:f9:47:fc:5e:
2c:46:b9:fd:d7:54:11:6a:aa:e5:07:11:77:9e:db:17:b6:97:
3a:c0:01:3b:a1:dd:8b:6e:94:7b:2f:d9:66:f3:57:0b:85:1a:
78:fc:c3:be:79:78:f5:d1:8d:5e:93:6d:39:77:a9:a4:c9:e8:
57:71:ac:91:7b:28:4b:52:bf:8c:58:72:70:40:e0:46:5b:28:
07:e1:b6:9c:6b:b5:dc:c3:3c:83:ee:5f:0f:16:59:32:f5:8c:
3a:ad:49:63:23:31:e6:48:af:8a:e9:04:42:36:59:30:2b:e2:
ff:99:30:10:a5:e3:81:52:93:08:d8:04:51:e4:cf:36:da:c8:
40:8a:1e:4c:af:08:6a:7c:a0:61:ff:81:e0:71:87:04:47:4f:
b3:d9:e3:07:89:65:3c:b8:cc:a1:a7:f9:54:fc:1d:3d:33:11:
f5:bd:19:b2:20:5a:13:43:e6:7d:e8:bd:88:f3:29:31:81:02:
66:40:97:8b:2a:4b:ad:f3:6b:a0:17:2c:db:36:8f:90:65:ca:
f1:f0:4c:57:0d:34:e6:49:b9:39:4f:dd:58:b4:25:a0:5c:05:
ac:cc:2f:92:6a:a1:2d:be:a1:8f:66:93:ca:9d:ea:28:a6:d6:
01:6b:6f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9Tr4E5X0xIuDiO8C8q2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Y2ZiYTE4NGZmOTQ0MmE4ZmU3NTE3YjUwM2E5ZTAxN2Zh
OWYyY2IwHhcNMjUwMTMxMTYwMDQzWhcNMjUwMjAxMTYwMDQzWjAzMTEwLwYDVQQD
EygyNzAzNDUyY2FlYmM3MzhhZTZlYWY3NTMyYTEwMDFjMTk5NDU3NDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt7AWi1SGNXsHvrwvTAyqApYknnP
9ZS3TOtmPe9RoZ/RHbTbZzbjZkSCvIue0fkYCNXc//3Af9BMZcRxV9Y6YHr4LFke
O9kNXgistU9eKNP77gFsB0X1HASmjhs3C+nhqdU5Xp525QYUNYQW3UW93U790w56
jBQSyXyNx1CEHq9D2aHH14nfPY9fd0v58ZE2DH7itoiqQS0iwX/dt4Esd/qCREpP
AYjZ9/cyotgadg2O3aD5S/W1yZWaivuEPkf1rfjvLH8OH06QZVhoOhg/jiUG5u6V
KgCT2Kun8P1QBa9vzcFfP2yVpG7LdCEJh0zBGMhpkCSWKdQuMT/h8eyFPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcDRSyuvHOK5ur3UyoQAcGZRXQXMB8GA1UdIwQY
MBaAFGTPuhhP+UQqj+dRe1A6ngF/qfLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYt
ZGVmZjcxMTI0MjMzLzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYtZGVmZjcxMTI0MjMz
LzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOWAYu3F
MiRQTUny7TP5R/xeLEa5/ddUEWqq5QcRd57bF7aXOsABO6Hdi26Uey/ZZvNXC4Ua
ePzDvnl49dGNXpNtOXeppMnoV3GskXsoS1K/jFhycEDgRlsoB+G2nGu13MM8g+5f
DxZZMvWMOq1JYyMx5kiviukEQjZZMCvi/5kwEKXjgVKTCNgEUeTPNtrIQIoeTK8I
anygYf+B4HGHBEdPs9njB4llPLjMoaf5VPwdPTMR9b0ZsiBaE0Pmfei9iPMpMYEC
ZkCXiypLrfNroBcs2zaPkGXK8fBMVw005km5OU/dWLQloFwFrMwvkmqhLb6hj2aT
yp3qKKbWAWtvVQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:27 2025 by rpki-client