Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: EZvEwaQEKk5Rv3u1vF0cDwalYMU2x24iWCQZ8G29daI=
Subject key identifier: DD:61:B0:64:92:04:36:77:EC:8C:FF:65:CA:EE:68:A0:F8:A8:44:68
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0194BD4E8DE5F2362F862881B15520884110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 076D
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: huhodwFdtKRaIeNf5DuhQ7b/oyGsGSmJDR+hHQwTxeU=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:e5:f2:36:2f:86:28:81:b1:55:20:88:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=dd61b06492043677ec8cff65caee68a0f8a84468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:f9:de:2e:7c:dc:62:37:31:c4:9e:3c:96:
b3:2a:b5:db:19:2e:f8:c0:60:3c:49:25:6a:fb:a2:
d8:2e:5b:10:aa:28:a9:be:0f:9a:8f:84:bf:93:24:
cf:9d:80:57:bd:ee:09:a9:1a:e5:dd:e0:28:a6:19:
e7:0c:30:9e:31:ce:f2:4a:9a:7a:fb:37:f6:ba:8d:
61:73:1f:3b:7d:85:20:fd:62:31:65:6a:24:4b:75:
6b:59:44:cb:99:3d:5a:9c:c3:16:6f:6d:53:25:25:
ae:5d:f3:46:d0:a8:66:cc:e6:bc:9d:c5:c4:b4:4f:
01:f8:62:c3:d2:2f:45:23:5b:76:47:c3:43:1f:b3:
29:db:63:cc:c0:29:ac:f3:bf:df:0b:6f:00:aa:fb:
3a:e0:9b:fc:b3:a7:1a:b3:c3:e8:2c:79:cd:fc:15:
8c:75:2c:d2:6d:b2:61:d7:c5:58:d5:4a:89:0e:71:
de:5b:ec:fc:b0:30:06:43:09:9c:95:e8:53:03:07:
b4:35:a1:52:5e:71:17:4d:f3:c0:07:3f:60:22:b8:
4a:c8:3f:ca:1b:b9:58:f0:24:96:7c:1d:a6:70:64:
86:9a:75:71:3d:49:da:61:d6:36:68:8f:51:66:45:
77:db:5e:d8:99:5b:9d:cf:ed:12:fd:73:36:07:4e:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:B0:64:92:04:36:77:EC:8C:FF:65:CA:EE:68:A0:F8:A8:44:68
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d0:d0:b4:89:28:00:70:e8:f1:b5:47:20:4d:d3:35:d7:a5:
8e:2e:06:64:3b:01:f2:d8:20:9b:d2:67:53:d7:00:4e:dc:2e:
2a:87:b5:a0:ed:9b:89:5c:b8:9a:78:79:a5:b4:45:ce:3b:d7:
fa:1b:c3:21:89:74:7a:e0:04:8c:dc:12:50:3f:8b:50:fa:2e:
9f:44:80:aa:b0:a8:4e:fe:ab:90:80:6b:72:bb:87:64:5f:c4:
01:6b:08:d2:35:fd:34:46:15:6c:a6:5c:a8:92:72:97:ea:2f:
d2:d9:57:66:bb:e7:0f:80:ec:37:65:a0:ae:a6:19:22:9d:2f:
39:48:08:6b:2e:8b:77:31:0f:29:51:f8:b7:3a:24:8b:c0:be:
d8:b7:fd:fa:9b:f2:92:24:12:f5:c9:40:44:bc:eb:f9:24:d9:
f7:d6:7c:b9:33:e0:5d:1b:aa:97:99:a7:8d:78:fc:3e:65:8d:
2a:f0:e5:d5:25:23:f8:b6:e4:36:d8:c2:07:d8:e2:aa:53:23:
3a:64:10:a9:74:fc:f7:96:48:78:c4:6b:6a:4d:f0:7b:f0:2d:
b0:c0:89:50:d3:88:ee:7c:bc:78:03:5f:af:c7:fd:72:3b:24:
a4:53:9d:b8:ae:0a:0e:24:f4:68:0e:ab:6e:72:19:e9:ca:79:
3a:68:9d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9To3l8jYvhiiBsVUgiEEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2
MWRlNTQwHhcNMjUwMTMxMTcwMDI5WhcNMjUwMjAxMTcwMDI5WjAzMTEwLwYDVQQD
EyhkZDYxYjA2NDkyMDQzNjc3ZWM4Y2ZmNjVjYWVlNjhhMGY4YTg0NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF353i583GI3McSePJazKrXbGS74
wGA8SSVq+6LYLlsQqiipvg+aj4S/kyTPnYBXve4JqRrl3eAophnnDDCeMc7ySpp6
+zf2uo1hcx87fYUg/WIxZWokS3VrWUTLmT1anMMWb21TJSWuXfNG0KhmzOa8ncXE
tE8B+GLD0i9FI1t2R8NDH7Mp22PMwCms87/fC28Aqvs64Jv8s6cas8PoLHnN/BWM
dSzSbbJh18VY1UqJDnHeW+z8sDAGQwmclehTAwe0NaFSXnEXTfPABz9gIrhKyD/K
G7lY8CSWfB2mcGSGmnVxPUnaYdY2aI9RZkV3217YmVudz+0S/XM2B05muwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1hsGSSBDZ37Iz/ZcruaKD4qERoMB8GA1UdIwQY
MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt
NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw
LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNDQtIko
AHDo8bVHIE3TNdelji4GZDsB8tggm9JnU9cATtwuKoe1oO2biVy4mnh5pbRFzjvX
+hvDIYl0euAEjNwSUD+LUPoun0SAqrCoTv6rkIBrcruHZF/EAWsI0jX9NEYVbKZc
qJJyl+ov0tlXZrvnD4DsN2WgrqYZIp0vOUgIay6LdzEPKVH4tzoki8C+2Lf9+pvy
kiQS9clARLzr+STZ99Z8uTPgXRuql5mnjXj8PmWNKvDl1SUj+LbkNtjCB9jiqlMj
OmQQqXT895ZIeMRrak3we/AtsMCJUNOI7ny8eANfr8f9cjskpFOduK4KDiT0aA6r
bnIZ6cp5OmidLg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:17 2025 by rpki-client