Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: aikREfaJeGsN3M/vqSMMR22E7CPIqvgvcHkFplFlulc=
Subject key identifier: 54:B1:98:54:33:D7:C3:BE:6B:54:A5:09:ED:E6:C1:9D:AF:69:19:F7
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 0194BCA9DF8365863C4C645E280C761E28BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: XkfTLJpuzHIZvqNYm1YiNqcuFA+D7MPaUMdeRYrZ1z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:df:83:65:86:3c:4c:64:5e:28:0c:76:1e:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=54b1985433d7c3be6b54a509ede6c19daf6919f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:fb:fb:8a:ed:15:b5:27:d8:ae:1a:b3:21:
db:29:bb:8c:cd:29:a3:17:03:44:b2:73:77:a3:7a:
73:a0:3e:00:bd:f6:98:50:08:e8:6b:77:5b:62:1c:
fd:b2:17:9e:48:d9:1a:6f:e5:d0:a5:4e:42:88:e7:
c3:5c:94:43:dd:2c:20:9f:21:16:f3:94:f7:55:68:
c3:94:2f:48:d6:b0:ea:b7:eb:40:fb:b9:dd:f3:f4:
d1:1b:78:f6:b3:66:14:a1:e4:45:68:39:1f:29:7e:
a6:94:91:cb:a8:31:99:97:61:c6:23:bb:dd:fa:65:
5c:1e:b0:c7:29:ee:f1:21:73:66:f9:dc:72:10:0b:
17:9f:b5:75:87:12:bf:ac:e1:8f:66:40:48:c2:30:
c0:03:4c:a8:68:91:d9:62:e4:fe:b5:76:e3:b4:79:
b1:1e:bd:8f:cb:06:cb:b1:3b:04:c6:55:66:cd:0e:
25:3c:3b:34:ad:f0:5f:12:3c:ab:3b:dc:80:27:f5:
97:5d:af:45:99:2a:b2:33:11:1a:11:a9:71:03:58:
e8:a0:77:4e:a7:d2:2d:fb:10:e7:be:e1:47:5a:17:
15:d3:f8:76:83:27:20:f2:3f:70:0d:10:5c:f3:ea:
0a:ee:ba:6c:e0:0f:59:db:db:81:2c:de:f7:e6:7a:
6f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:98:54:33:D7:C3:BE:6B:54:A5:09:ED:E6:C1:9D:AF:69:19:F7
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:40:a6:2a:c5:c9:ea:7e:1a:df:23:c0:d6:48:de:bd:6e:91:
58:85:0b:ae:9b:d5:b7:ce:cf:8f:e0:a0:e3:36:be:eb:9f:cd:
63:82:ba:cf:70:57:e9:ff:4f:d4:4f:d9:b0:ce:13:e3:a9:76:
63:bc:e7:73:17:40:35:34:b6:26:74:68:5e:48:60:f9:8f:cd:
28:30:a1:ec:df:8a:d3:c6:e9:2f:99:c5:5d:4f:d3:4a:29:77:
46:e1:19:12:46:e2:76:b5:ce:d8:f4:d3:a4:ce:19:ac:37:b0:
d7:d4:c9:32:c0:67:e3:9b:c5:52:9f:b0:56:df:71:d5:27:04:
8f:7c:28:7b:67:2e:81:a2:9f:60:4d:38:13:fb:ce:84:6a:d2:
d4:7b:a3:25:17:f4:ca:4a:39:48:e4:cb:a1:93:df:49:00:30:
a8:87:e3:d4:48:1f:6a:f1:25:1e:5c:f9:40:bb:c2:6b:96:9f:
df:d2:0b:31:f5:c9:08:27:f4:5a:76:82:96:15:5c:85:a6:a4:
b3:21:d2:78:e2:a1:c1:25:b8:28:c4:7d:64:87:27:86:d8:54:
4b:3c:4d:88:1a:53:eb:eb:08:21:2a:72:41:93:6f:73:e9:99:
90:64:51:7b:27:76:61:4f:73:ed:84:13:8a:b7:fa:a2:3e:ba:
ac:cf:dc:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qd+DZYY8TGReKAx2Hii6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTc5Y2NmMTBhZmY1Zjc3MzY5NGQ5ZjQzZTVkNWRiNDcy
ZDY0ODUwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
Eyg1NGIxOTg1NDMzZDdjM2JlNmI1NGE1MDllZGU2YzE5ZGFmNjkxOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFj7+4rtFbUn2K4asyHbKbuMzSmj
FwNEsnN3o3pzoD4AvfaYUAjoa3dbYhz9sheeSNkab+XQpU5CiOfDXJRD3SwgnyEW
85T3VWjDlC9I1rDqt+tA+7nd8/TRG3j2s2YUoeRFaDkfKX6mlJHLqDGZl2HGI7vd
+mVcHrDHKe7xIXNm+dxyEAsXn7V1hxK/rOGPZkBIwjDAA0yoaJHZYuT+tXbjtHmx
Hr2PywbLsTsExlVmzQ4lPDs0rfBfEjyrO9yAJ/WXXa9FmSqyMxEaEalxA1jooHdO
p9It+xDnvuFHWhcV0/h2gycg8j9wDRBc8+oK7rps4A9Z29uBLN735npvgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSxmFQz18O+a1SlCe3mwZ2vaRn3MB8GA1UdIwQY
MBaAFM2XnM8Qr/X3c2lNn0Pl1dtHLWSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQt
NzY1NmRhNmVkZTA5LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQtNzY1NmRhNmVkZTA5
LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANECmKsXJ
6n4a3yPA1kjevW6RWIULrpvVt87Pj+Cg4za+65/NY4K6z3BX6f9P1E/ZsM4T46l2
Y7zncxdANTS2JnRoXkhg+Y/NKDCh7N+K08bpL5nFXU/TSil3RuEZEkbidrXO2PTT
pM4ZrDew19TJMsBn45vFUp+wVt9x1ScEj3woe2cugaKfYE04E/vOhGrS1HujJRf0
yko5SOTLoZPfSQAwqIfj1EgfavElHlz5QLvCa5af39ILMfXJCCf0WnaClhVchaak
syHSeOKhwSW4KMR9ZIcnhthUSzxNiBpT6+sIISpyQZNvc+mZkGRReyd2YU9z7YQT
irf6oj66rM/cLw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:19 2025 by rpki-client