
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: PbsxRGPUEKPwOAHQlpeo5S462rZZM0UUckjL8KGZL8U=
Subject key identifier: 19:35:9C:71:3E:F6:EF:C1:00:89:79:73:E7:B6:AA:AD:4E:7B:8F:42
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 0194BCE092E39BF50BA830510DC58EE80384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0A84
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: z/7s7zlFMT9q9x/buI3l3/7wYu+zDj2Bl0wRu+u7xjY=)
2: kHEeKE6TgxrOJerD-_ZXw-D5vjg.roa (hash: RWbQV5MQo5FT3Cm1pl/JMVADI60RB0vYV0kYhmIAzNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:92:e3:9b:f5:0b:a8:30:51:0d:c5:8e:e8:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=19359c713ef6efc100897973e7b6aaad4e7b8f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3a:01:de:da:6f:ff:ac:e6:77:bb:13:87:28:
e0:9b:f3:c0:b3:ec:26:71:a1:2f:07:6f:38:8b:21:
9a:36:f2:06:ed:75:92:53:45:67:6e:7a:ed:66:da:
15:32:d0:6d:78:33:de:02:c2:0e:28:45:af:ff:12:
7f:12:52:64:49:16:b0:45:aa:2c:95:7a:97:8e:88:
d8:fa:47:43:5c:41:4c:8d:9d:94:b3:d1:eb:f8:68:
5d:ce:b5:06:35:41:92:a0:ab:3e:b5:2d:82:b8:3b:
62:bd:54:b0:59:8b:22:a2:7d:6a:2c:ef:e6:ff:e0:
04:03:cd:86:85:0b:ee:e8:08:35:94:24:09:0f:01:
65:19:70:b0:66:1c:ec:81:d9:00:b9:46:71:20:15:
27:81:ba:21:15:0a:7f:0c:8b:9b:95:e7:1c:a4:cd:
66:6f:13:f7:2a:08:fd:d8:7c:af:67:f9:ec:5d:db:
b3:4e:42:0e:28:48:e8:47:3d:a6:bf:21:cf:cc:bf:
7d:2b:10:c6:36:fc:68:04:92:d1:75:ce:48:71:60:
8a:53:88:ca:f2:5c:f6:9e:12:fc:5a:75:65:e2:81:
bd:f3:fa:36:db:36:25:07:b7:b6:1f:07:2e:3f:c2:
cc:30:5a:9b:6f:98:77:ac:e6:f7:e0:03:98:24:a1:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:9C:71:3E:F6:EF:C1:00:89:79:73:E7:B6:AA:AD:4E:7B:8F:42
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:75:bb:56:d4:9a:c3:6c:0c:1f:42:f9:d7:1c:b4:06:37:
7a:58:41:76:a9:ec:ef:75:b6:26:b6:f2:75:7d:15:99:d9:fa:
3b:72:86:99:4e:db:46:89:04:86:b8:46:d0:eb:82:8b:5d:44:
55:d4:9e:16:9d:37:c9:77:74:2c:a5:0e:c5:fc:f3:c3:fd:b5:
f9:e4:62:6e:83:d8:ea:31:63:fe:72:5e:99:16:79:9c:97:69:
dd:de:1e:30:a5:93:04:bf:3f:58:ee:ff:37:5c:39:ce:0d:e6:
d6:ad:56:c5:40:a3:bd:ae:64:b7:ad:f4:d2:da:cc:a3:23:b1:
cb:93:04:da:49:0d:2e:97:98:a9:b9:a5:a2:1e:af:ed:6d:0f:
13:5a:6d:c5:67:47:f6:21:27:50:c6:f8:47:08:ab:2b:29:30:
f7:2b:ef:68:53:10:cf:20:d1:b8:4c:d2:a1:92:58:78:39:0f:
66:ee:38:77:bc:bf:21:0e:60:66:5b:78:cd:a7:54:fd:f8:48:
1a:21:52:b3:26:82:26:b3:52:77:45:2a:30:79:77:8f:39:a2:
68:28:23:82:de:6b:6a:3a:97:be:fe:ce:28:84:23:d1:83:14:
05:a6:93:4c:60:ce:a3:b4:fc:58:08:5a:a1:1b:70:b0:14:aa:
04:24:a0:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JLjm/ULqDBRDcWO6AOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MDFhZGVkYmM5YzhmMWM2Y2YyMzg5ZmM3Zjc0MWVkZjRm
MTlmMmMwHhcNMjUwMTMxMTUwMDIxWhcNMjUwMjAxMTUwMDIxWjAzMTEwLwYDVQQD
EygxOTM1OWM3MTNlZjZlZmMxMDA4OTc5NzNlN2I2YWFhZDRlN2I4ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zoB3tpv/6zmd7sThyjgm/PAs+wm
caEvB284iyGaNvIG7XWSU0VnbnrtZtoVMtBteDPeAsIOKEWv/xJ/ElJkSRawRaos
lXqXjojY+kdDXEFMjZ2Us9Hr+GhdzrUGNUGSoKs+tS2CuDtivVSwWYsion1qLO/m
/+AEA82GhQvu6Ag1lCQJDwFlGXCwZhzsgdkAuUZxIBUngbohFQp/DIubleccpM1m
bxP3Kgj92HyvZ/nsXduzTkIOKEjoRz2mvyHPzL99KxDGNvxoBJLRdc5IcWCKU4jK
8lz2nhL8WnVl4oG98/o22zYlB7e2HwcuP8LMMFqbb5h3rOb34AOYJKH+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk1nHE+9u/BAIl5c+e2qq1Oe49CMB8GA1UdIwQY
MBaAFGQBre28nI8cbPI4n8f3Qe308Z8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEt
MzU2YzA5NmJjNmY5LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5
LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnF1u1bU
msNsDB9C+dcctAY3elhBdqns73W2JrbydX0Vmdn6O3KGmU7bRokEhrhG0OuCi11E
VdSeFp03yXd0LKUOxfzzw/21+eRiboPY6jFj/nJemRZ5nJdp3d4eMKWTBL8/WO7/
N1w5zg3m1q1WxUCjva5kt6300trMoyOxy5ME2kkNLpeYqbmloh6v7W0PE1ptxWdH
9iEnUMb4RwirKykw9yvvaFMQzyDRuEzSoZJYeDkPZu44d7y/IQ5gZlt4zadU/fhI
GiFSsyaCJrNSd0UqMHl3jzmiaCgjgt5rajqXvv7OKIQj0YMUBaaTTGDOo7T8WAha
oRtwsBSqBCSg2g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:30 2025 by rpki-client