Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: ObQzZP13XCxJEgWFZgblFDFIkgN3A8BLGa2CZJ9E8w8=
Subject key identifier: 0D:98:4A:E7:DD:68:D1:94:D7:66:2F:B8:29:43:46:4D:FD:90:49:30
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 0194BD4E58A54B741292AE3F109FE8BB7CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 038C
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: rr4yKRd1fgA/jNZB1QvmQ9FST+unk+zno/uU1DLYklE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:58:a5:4b:74:12:92:ae:3f:10:9f:e8:bb:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=0d984ae7dd68d194d7662fb82943464dfd904930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:93:0f:8a:d2:2a:4b:31:71:26:ab:f1:c6:
cf:76:47:5b:f4:f0:c3:24:55:b9:d0:02:25:a3:0f:
38:c2:ba:52:91:5d:43:82:bb:e0:03:44:ba:3f:0b:
f0:db:e7:f0:bb:47:9b:47:c2:8d:5a:54:8c:1d:e9:
f2:36:59:bb:c2:66:6d:8a:b8:42:5f:57:b2:e4:21:
b4:3c:63:43:a9:95:a5:6b:cf:1a:72:b6:d7:2d:1a:
17:88:f4:7e:a3:29:95:ec:e1:67:5f:fa:81:2c:03:
aa:70:a0:c6:15:29:25:04:82:b5:b1:a6:b9:48:66:
e5:ab:7a:f4:28:74:6b:8f:c2:ce:0d:2c:14:5a:37:
f4:bf:a0:0c:dd:45:0d:97:85:77:64:c4:98:ce:0f:
15:4e:65:ec:ce:46:49:c0:1d:2f:a2:7e:cd:28:9e:
c1:f7:55:13:df:22:dc:61:ba:57:a8:95:dc:46:05:
7d:5a:78:17:b4:52:16:aa:61:60:4a:f5:dc:b8:1b:
ae:2b:1c:63:58:1d:e2:2c:ed:5c:da:5f:c2:69:39:
65:01:03:73:2e:a3:05:02:47:0d:9d:7e:7c:65:a1:
23:0e:ad:70:ca:17:6b:e9:99:96:86:a5:e6:92:05:
db:b6:f4:c0:3a:3a:67:2d:91:78:9d:96:0c:e7:f5:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:98:4A:E7:DD:68:D1:94:D7:66:2F:B8:29:43:46:4D:FD:90:49:30
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:63:42:da:f9:6e:3f:65:ff:7f:cb:35:1b:a8:14:1c:ee:38:
72:ff:62:ae:32:d3:e0:00:b1:d5:0d:11:fa:d6:d7:90:cc:42:
37:a6:ed:6e:24:ee:af:aa:e5:0c:6c:30:23:75:a4:aa:36:fa:
5e:23:d3:82:51:43:78:18:b8:2a:da:3a:4d:5c:f1:bb:91:c4:
5c:83:b5:3a:b2:d5:b6:fb:e1:e8:9c:66:0a:3f:2c:94:e1:8d:
71:2c:fd:d3:12:62:00:0e:ef:10:be:7b:5f:1a:f9:74:de:bc:
8d:a0:71:b1:d7:2d:73:7b:f9:80:d6:cc:ab:5f:a6:a6:98:6e:
d3:0a:84:d5:52:a6:20:44:58:3f:46:3d:4b:8e:21:3c:3d:1a:
3f:4b:28:e6:09:64:d6:38:27:73:c1:aa:2e:ed:a8:a5:72:b5:
ff:ff:a3:c5:91:15:78:9a:71:c0:39:e0:f9:ee:bd:26:70:e4:
c6:a9:ff:d5:81:6e:bd:9c:16:de:8a:28:6d:5c:e2:bf:cf:7d:
75:db:fe:42:ce:37:5a:69:80:fd:60:f6:70:47:62:f8:9e:49:
3e:de:22:d5:dc:02:1c:98:b5:29:cd:5e:ab:31:2b:03:92:97:
37:a6:3b:44:cf:bd:15:96:59:d3:b6:7e:33:68:d2:50:41:8f:
e8:5e:fb:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlilS3QSkq4/EJ/ou3z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx
Zjc2NGUwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
EygwZDk4NGFlN2RkNjhkMTk0ZDc2NjJmYjgyOTQzNDY0ZGZkOTA0OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifeTD4rSKksxcSar8cbPdkdb9PDD
JFW50AIlow84wrpSkV1DgrvgA0S6Pwvw2+fwu0ebR8KNWlSMHenyNlm7wmZtirhC
X1ey5CG0PGNDqZWla88acrbXLRoXiPR+oymV7OFnX/qBLAOqcKDGFSklBIK1saa5
SGblq3r0KHRrj8LODSwUWjf0v6AM3UUNl4V3ZMSYzg8VTmXszkZJwB0von7NKJ7B
91UT3yLcYbpXqJXcRgV9WngXtFIWqmFgSvXcuBuuKxxjWB3iLO1c2l/CaTllAQNz
LqMFAkcNnX58ZaEjDq1wyhdr6ZmWhqXmkgXbtvTAOjpnLZF4nZYM5/UyXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2YSufdaNGU12YvuClDRk39kEkwMB8GA1UdIwQY
MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt
NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4
LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGNC2vlu
P2X/f8s1G6gUHO44cv9irjLT4ACx1Q0R+tbXkMxCN6btbiTur6rlDGwwI3Wkqjb6
XiPTglFDeBi4Kto6TVzxu5HEXIO1OrLVtvvh6JxmCj8slOGNcSz90xJiAA7vEL57
Xxr5dN68jaBxsdctc3v5gNbMq1+mpphu0wqE1VKmIERYP0Y9S44hPD0aP0so5glk
1jgnc8GqLu2opXK1//+jxZEVeJpxwDng+e69JnDkxqn/1YFuvZwW3ooobVziv899
ddv+Qs43WmmA/WD2cEdi+J5JPt4i1dwCHJi1Kc1eqzErA5KXN6Y7RM+9FZZZ07Z+
M2jSUEGP6F77JA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:24 2025 by rpki-client