Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: FVT2vU1o20oWGl1pDIw+UkeVFQMjtb4hTGdxQbX2VFM=
Subject key identifier: 2F:09:BC:E2:FA:DC:BB:1F:54:D0:01:06:A0:67:2C:17:56:6E:D2:9C
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 0194BD176DD630913EFBB51B36400B64249D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: XaEPxVcPJtA10fKNYifTlPEEAu7qUnSTsIXrvuhDhnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:d6:30:91:3e:fb:b5:1b:36:40:0b:64:24:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=2f09bce2fadcbb1f54d00106a0672c17566ed29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:71:96:dd:97:1b:0d:5a:78:46:b9:f8:cc:
67:a2:dc:e2:32:e2:32:13:69:3e:c7:59:eb:8d:cc:
74:86:ac:db:38:f7:09:cd:9d:e8:90:15:ab:eb:d0:
ee:25:32:9f:24:9b:01:52:18:65:8d:76:63:ee:63:
4d:4e:20:9a:6c:9d:a6:85:bb:36:cc:b8:4d:14:84:
2b:02:d4:d4:f7:49:c5:30:e5:99:89:b5:a7:3c:bd:
35:ec:e7:03:64:ba:a8:1c:43:96:07:bb:77:40:a0:
3e:bf:86:f1:b3:4e:0e:9e:e4:2a:a4:8e:45:1a:b9:
87:1f:6d:89:b5:4b:25:99:b2:19:a5:d3:51:fe:ec:
05:51:50:81:2d:e6:e1:eb:c1:bd:0f:df:72:11:eb:
f5:0d:e7:77:f3:a0:05:6f:c3:d9:8b:38:ea:36:f5:
71:2c:ea:4a:ac:db:5f:09:27:68:ad:50:19:6a:31:
85:e6:f8:2c:6a:85:0d:14:93:9b:68:5e:cf:fb:a7:
16:9c:68:52:c7:57:34:cc:b7:b5:d6:27:dc:17:41:
9d:9c:73:21:57:39:9e:ff:84:de:4b:16:d7:66:6d:
b4:f8:89:0e:22:91:2b:83:95:37:8e:28:87:4a:c0:
7b:55:44:07:97:e4:07:4c:f6:a3:17:b9:df:39:62:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:09:BC:E2:FA:DC:BB:1F:54:D0:01:06:A0:67:2C:17:56:6E:D2:9C
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0a:3b:e6:4a:ad:33:cb:c1:12:d5:f5:7c:c3:f4:34:f7:9b:
1d:ba:61:88:45:ca:ee:22:6e:90:bf:4d:3e:1a:4a:92:7b:95:
ce:13:cb:10:ad:83:d0:49:27:da:50:45:5b:e1:1e:a7:51:d3:
ad:a0:12:81:4a:84:ac:31:77:a3:51:3c:22:a8:11:6a:ff:1a:
68:17:1a:fe:42:d2:b3:b6:6b:94:5f:72:65:1c:96:be:46:0f:
f5:45:1a:57:55:1c:4e:8d:82:a6:32:ce:92:a6:3e:36:3a:9f:
ff:9c:1b:18:d0:12:fb:ad:1e:75:2f:e1:31:c3:c5:23:9b:68:
be:e0:75:6d:3c:dc:ff:a8:41:34:4f:76:a8:16:37:60:ff:1a:
60:43:10:16:cd:74:f1:09:ec:0d:f2:38:6f:db:08:27:a6:d6:
dd:1d:87:a4:e3:98:f4:31:04:ec:74:de:d1:01:cc:e3:56:d2:
2f:17:2a:74:d7:9f:59:ae:94:96:73:8e:cf:db:57:05:46:58:
d2:a2:a3:4c:c0:e0:cf:4a:62:39:62:c9:8f:d1:9c:7b:d8:ba:
bc:4e:26:fe:ee:56:8d:30:05:a9:e9:89:81:ae:ab:54:21:d0:
42:5f:74:6d:39:f3:50:40:f1:0c:37:13:76:d0:2b:91:d3:03:
de:85:fc:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F23WMJE++7UbNkALZCSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTg4ZTliN2FiNWUzMjFiMWIzZjk1N2E5YmExOTc2ZGQ0
MjViYzMwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
EygyZjA5YmNlMmZhZGNiYjFmNTRkMDAxMDZhMDY3MmMxNzU2NmVkMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj1xlt2XGw1aeEa5+MxnotziMuIy
E2k+x1nrjcx0hqzbOPcJzZ3okBWr69DuJTKfJJsBUhhljXZj7mNNTiCabJ2mhbs2
zLhNFIQrAtTU90nFMOWZibWnPL017OcDZLqoHEOWB7t3QKA+v4bxs04OnuQqpI5F
GrmHH22JtUslmbIZpdNR/uwFUVCBLebh68G9D99yEev1Ded386AFb8PZizjqNvVx
LOpKrNtfCSdorVAZajGF5vgsaoUNFJObaF7P+6cWnGhSx1c0zLe11ifcF0GdnHMh
Vzme/4TeSxbXZm20+IkOIpErg5U3jiiHSsB7VUQHl+QHTPajF7nfOWICwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8JvOL63LsfVNABBqBnLBdWbtKcMB8GA1UdIwQY
MBaAFM2ojpt6teMhsbP5V6m6GXbdQlvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQt
MWM4NmU3ZDBmNzg0LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQtMWM4NmU3ZDBmNzg0
LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgo75kqt
M8vBEtX1fMP0NPebHbphiEXK7iJukL9NPhpKknuVzhPLEK2D0Ekn2lBFW+Eep1HT
raASgUqErDF3o1E8IqgRav8aaBca/kLSs7ZrlF9yZRyWvkYP9UUaV1UcTo2CpjLO
kqY+Njqf/5wbGNAS+60edS/hMcPFI5tovuB1bTzc/6hBNE92qBY3YP8aYEMQFs10
8QnsDfI4b9sIJ6bW3R2HpOOY9DEE7HTe0QHM41bSLxcqdNefWa6UlnOOz9tXBUZY
0qKjTMDgz0piOWLJj9Gce9i6vE4m/u5WjTAFqemJga6rVCHQQl90bTnzUEDxDDcT
dtArkdMD3oX88g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:51 2025 by rpki-client