Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
File: zCdbIX3x3piMohkqg64R3fQjpE8.mft (raw, json)
Hash identifier: alw/WjdD1O0S6twpC31m1mX6QiRbo28XVOHyqDUKvRs=
Subject key identifier: 50:AC:E5:9C:63:92:DE:F9:FA:D1:3B:8C:B3:0B:A1:88:0B:68:0E:1B
Authority key identifier: CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F
Certificate issuer: /CN=cc275b217df1de988ca2192a83ae11ddf423a44f
Certificate serial: 0194BD4E97CC1FE8F5AFD3307C3F4965293D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
Manifest number: 08E2
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: Nr1R18FVhyzjXhL2YKl54Kz1CcM.roa (hash: Ka3gajN2kG5bn7od03MC2i4kFc5aTTook8osIu09I1U=)
2: zCdbIX3x3piMohkqg64R3fQjpE8.crl (hash: eabBihzIdnx+PxGsxudj1f7TnpkljxKOgQDgfM+s7+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:97:cc:1f:e8:f5:af:d3:30:7c:3f:49:65:29:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc275b217df1de988ca2192a83ae11ddf423a44f
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=50ace59c6392def9fad13b8cb30ba1880b680e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:53:57:ed:12:4a:68:fd:7f:50:4f:91:3b:
fb:96:8f:bb:fd:cc:de:e1:fd:56:6d:c2:4b:98:9f:
e0:4b:7d:40:08:24:dc:71:aa:7d:16:8b:27:4c:22:
26:16:5b:6d:d1:0b:86:72:2d:64:34:1a:35:ef:f2:
e4:8d:34:16:ed:23:e8:bc:77:7c:99:54:44:bc:29:
34:4f:a2:65:00:63:ac:36:73:10:4b:3f:d2:48:93:
5c:81:46:71:b6:7d:fb:c5:b9:52:ee:7a:84:5c:7f:
ae:82:78:53:37:c8:a1:84:57:55:2d:24:5e:2a:33:
8d:a9:dd:c7:80:42:22:d7:6a:48:17:37:f3:9a:65:
49:0e:2b:72:1a:e4:4d:53:af:e6:f4:d3:3c:9e:7d:
ed:9c:07:fc:7d:75:0e:32:72:36:e8:be:7b:f8:31:
5c:db:06:3c:71:43:95:a9:51:bc:8e:a2:ee:8c:b5:
74:36:c5:d6:5b:95:06:2d:59:b7:59:74:af:b8:eb:
49:b7:bd:a1:7f:a6:a1:0f:94:d1:3b:46:5b:61:10:
7e:30:ff:88:fd:bb:d3:6a:9d:e6:22:20:b9:e4:df:
68:3f:61:30:31:cf:72:28:7a:3c:a8:e0:78:d7:c3:
80:d8:86:eb:b9:de:9b:fa:38:e9:0c:68:6c:08:6e:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AC:E5:9C:63:92:DE:F9:FA:D1:3B:8C:B3:0B:A1:88:0B:68:0E:1B
X509v3 Authority Key Identifier:
keyid:CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:93:7f:92:17:0d:77:ce:67:0d:07:74:76:b2:55:24:0d:
f2:b3:61:00:69:7e:e9:a8:e3:63:6d:d0:d3:2c:db:e7:d3:5d:
c9:19:a9:56:e7:8a:85:bb:12:52:e3:5b:8b:d5:d0:60:4e:1e:
4e:9d:af:af:5d:78:ac:a3:c4:45:b1:cd:c5:9d:85:5e:b5:01:
00:9f:dd:f1:19:66:f3:c4:e8:1e:03:b8:cf:2c:f9:bd:c2:04:
27:8d:11:17:ba:1e:90:ad:5c:5b:d6:17:27:44:24:f7:6e:2b:
36:41:d0:2a:cb:f7:8e:8a:83:ed:62:19:c5:42:0e:e5:47:27:
f3:fd:7e:2d:60:a4:7a:2a:6b:97:e9:ae:de:b8:1f:bc:fb:f5:
3b:4c:8d:5e:26:b9:e9:f6:5b:49:e7:74:2f:d3:36:f7:da:29:
5b:5f:13:40:e6:59:db:47:fb:25:c9:fc:f4:1b:56:54:ae:54:
c6:9f:12:25:6b:99:f7:9a:fa:84:da:16:69:43:a1:27:96:f5:
df:39:60:f3:b0:1a:20:66:12:ae:3c:cf:3a:46:34:51:79:c8:
df:68:cd:fd:a7:25:45:03:dc:88:8d:be:5f:a9:d9:99:1c:b4:
58:36:f3:bd:ec:a4:c3:d1:71:40:e5:43:82:00:fb:ad:3a:df:
2b:ac:b5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpfMH+j1r9MwfD9JZSk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMjc1YjIxN2RmMWRlOTg4Y2EyMTkyYTgzYWUxMWRkZjQy
M2E0NGYwHhcNMjUwMTMxMTcwMDMxWhcNMjUwMjAxMTcwMDMxWjAzMTEwLwYDVQQD
Eyg1MGFjZTU5YzYzOTJkZWY5ZmFkMTNiOGNiMzBiYTE4ODBiNjgwZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWhTV+0SSmj9f1BPkTv7lo+7/cze
4f1WbcJLmJ/gS31ACCTccap9FosnTCImFltt0QuGci1kNBo17/LkjTQW7SPovHd8
mVREvCk0T6JlAGOsNnMQSz/SSJNcgUZxtn37xblS7nqEXH+ugnhTN8ihhFdVLSRe
KjONqd3HgEIi12pIFzfzmmVJDityGuRNU6/m9NM8nn3tnAf8fXUOMnI26L57+DFc
2wY8cUOVqVG8jqLujLV0NsXWW5UGLVm3WXSvuOtJt72hf6ahD5TRO0ZbYRB+MP+I
/bvTap3mIiC55N9oP2EwMc9yKHo8qOB418OA2Ibrud6b+jjpDGhsCG4QEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCs5Zxjkt75+tE7jLMLoYgLaA4bMB8GA1UdIwQY
MBaAFMwnWyF98d6YjKIZKoOuEd30I6RPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekNkYklYM3gzcGlNb2hrcWc2NFIzZlFqcEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MTI0ZDAtMmIzZi00ZGFiLTg1N2Qt
MmU2MzlmY2E0NjQwLzEvekNkYklYM3gzcGlNb2hrcWc2NFIzZlFqcEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81MTI0ZDAtMmIzZi00ZGFiLTg1N2QtMmU2MzlmY2E0NjQw
LzEvekNkYklYM3gzcGlNb2hrcWc2NFIzZlFqcEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXiTf5IX
DXfOZw0HdHayVSQN8rNhAGl+6ajjY23Q0yzb59NdyRmpVueKhbsSUuNbi9XQYE4e
Tp2vr114rKPERbHNxZ2FXrUBAJ/d8Rlm88ToHgO4zyz5vcIEJ40RF7oekK1cW9YX
J0Qk924rNkHQKsv3joqD7WIZxUIO5Ucn8/1+LWCkeiprl+mu3rgfvPv1O0yNXia5
6fZbSed0L9M299opW18TQOZZ20f7Jcn89BtWVK5Uxp8SJWuZ95r6hNoWaUOhJ5b1
3zlg87AaIGYSrjzPOkY0UXnI32jN/aclRQPciI2+X6nZmRy0WDbzveykw9FxQOVD
ggD7rTrfK6y1Yg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:08 2025 by rpki-client