Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: fFGyV2rFBSL+QZ8ICR+nH2PiwgzwfnVApQSyVvPSJcQ=
Subject key identifier: 5F:3D:73:14:B7:2B:DA:BA:59:05:60:B5:FC:61:70:2E:95:47:9E:B7
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 0194BCE08AFB57AA323597B9029C6274B9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: pwink6TPXEmM4E6NpJxzdnTq3XdBB8BG8XJyJCB92XQ=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:fb:57:aa:32:35:97:b9:02:9c:62:74:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=5f3d7314b72bdaba590560b5fc61702e95479eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:bf:de:8e:39:ef:9b:0a:07:d4:58:5d:85:
45:2a:d9:c8:fa:94:e8:8b:f6:c2:37:f1:25:35:26:
00:4e:0e:8a:18:f8:ca:ab:e8:7a:9b:9c:17:b4:ca:
5b:26:11:0b:a2:31:53:e7:62:d0:11:fb:1d:d0:17:
76:8c:31:e8:d7:34:b2:25:4a:10:e1:9d:3c:32:fa:
e0:5d:af:d3:57:40:b9:4e:39:0d:26:2a:92:19:d8:
82:20:c4:28:9b:32:cc:16:6d:a5:91:fe:69:5a:bb:
a6:21:27:9f:91:a2:d6:2c:b7:ac:e5:b8:16:d5:79:
a4:99:f5:17:b4:e3:7b:e2:21:c0:25:5b:3a:e9:b4:
43:cb:92:2d:30:14:64:d2:98:72:2d:de:7a:95:a9:
1f:56:18:9a:b1:49:1b:ce:8d:71:ee:57:dd:59:81:
fd:18:a5:28:35:eb:aa:fc:b1:45:e2:fa:7e:4c:a6:
f0:f9:3b:5f:08:0f:3f:87:a1:09:a4:68:37:63:aa:
79:eb:a0:8d:b4:ef:06:34:0c:6e:85:ae:58:bd:fe:
02:26:78:a1:6a:57:49:b0:56:b1:b6:8f:e1:72:34:
32:ec:b7:f2:7b:b9:b3:79:28:04:16:18:d8:5a:4d:
09:b5:a2:ad:70:72:de:0d:46:00:dd:d4:19:42:4e:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:73:14:B7:2B:DA:BA:59:05:60:B5:FC:61:70:2E:95:47:9E:B7
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:66:e2:0d:20:d8:85:73:95:ef:83:e5:66:3a:31:ed:1a:3a:
e0:f0:61:af:c3:6b:58:73:6f:a8:16:e4:e0:ba:9b:0b:d3:a1:
57:14:e1:7e:b3:c6:7a:46:1c:8d:0f:67:8b:1e:e9:95:82:06:
69:5f:3c:c3:79:04:15:cd:df:3f:77:ac:f7:6a:87:5c:05:06:
2f:ac:ba:ca:d2:14:03:2a:88:1c:26:5c:7d:04:16:d8:e0:5c:
e3:40:48:98:c9:cf:5a:0f:13:c1:24:85:a6:70:15:bf:ba:e9:
50:14:12:e7:23:89:16:8b:0b:e7:7e:65:dc:fb:d0:36:fd:d7:
f9:cb:59:d8:81:b4:64:a9:8f:94:c7:a7:37:51:2d:2f:9e:13:
74:df:0e:3e:1b:97:09:b5:0b:aa:90:2e:74:f3:97:d0:4f:b7:
94:54:80:ed:78:8e:11:3e:e8:af:d3:fa:a2:4d:5e:fb:c9:8d:
7b:6f:ef:d0:32:fe:4d:57:6d:1a:44:71:23:eb:a2:4c:5f:82:
59:ee:d7:9f:41:c6:8c:4d:32:21:ef:4c:e4:5c:06:12:84:e3:
89:c4:d8:46:af:be:2c:85:7e:07:b1:bf:b5:14:c5:d8:48:a8:
48:63:7a:4e:2b:92:c2:0b:47:da:5b:24:08:d5:34:81:a7:29:
49:8f:90:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Ir7V6oyNZe5ApxidLnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1
MTU1NDkwHhcNMjUwMTMxMTUwMDE5WhcNMjUwMjAxMTUwMDE5WjAzMTEwLwYDVQQD
Eyg1ZjNkNzMxNGI3MmJkYWJhNTkwNTYwYjVmYzYxNzAyZTk1NDc5ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwem/3o4575sKB9RYXYVFKtnI+pTo
i/bCN/ElNSYATg6KGPjKq+h6m5wXtMpbJhELojFT52LQEfsd0Bd2jDHo1zSyJUoQ
4Z08MvrgXa/TV0C5TjkNJiqSGdiCIMQomzLMFm2lkf5pWrumISefkaLWLLes5bgW
1XmkmfUXtON74iHAJVs66bRDy5ItMBRk0phyLd56lakfVhiasUkbzo1x7lfdWYH9
GKUoNeuq/LFF4vp+TKbw+TtfCA8/h6EJpGg3Y6p566CNtO8GNAxuha5Yvf4CJnih
aldJsFaxto/hcjQy7Lfye7mzeSgEFhjYWk0JtaKtcHLeDUYA3dQZQk44BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF89cxS3K9q6WQVgtfxhcC6VR563MB8GA1UdIwQY
MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt
YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0
LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2biDSDY
hXOV74PlZjox7Ro64PBhr8NrWHNvqBbk4LqbC9OhVxThfrPGekYcjQ9nix7plYIG
aV88w3kEFc3fP3es92qHXAUGL6y6ytIUAyqIHCZcfQQW2OBc40BImMnPWg8TwSSF
pnAVv7rpUBQS5yOJFosL535l3PvQNv3X+ctZ2IG0ZKmPlMenN1EtL54TdN8OPhuX
CbULqpAudPOX0E+3lFSA7XiOET7or9P6ok1e+8mNe2/v0DL+TVdtGkRxI+uiTF+C
We7Xn0HGjE0yIe9M5FwGEoTjicTYRq++LIV+B7G/tRTF2EioSGN6TiuSwgtH2lsk
CNU0gacpSY+Qwg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:27 2025 by rpki-client