Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: wAB6SmzmsAwfLy7nSfnzHo6+yjduB5s+F6fxwOoprQU=
Subject key identifier: 69:77:61:8C:8C:62:4E:25:2C:05:36:C1:D6:75:95:DF:D0:75:67:02
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 0194BD178D2356595C80635071C0BFCEE9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0D27
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: QFhE+EhULUDGuhCP6Ze83oB9jBC8Re7tnGvGd8XbTjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:23:56:59:5c:80:63:50:71:c0:bf:ce:e9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=6977618c8c624e252c0536c1d67595dfd0756702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:12:61:da:dc:8a:43:47:73:2b:1b:71:19:
eb:58:91:4c:8c:c5:77:ba:3a:68:ce:65:83:27:ab:
4a:48:07:4d:e0:7e:a0:1c:c9:f5:db:52:27:e3:1b:
9d:da:3e:6e:94:a1:a5:01:ca:a3:84:54:39:4d:eb:
5c:5d:d0:65:3a:c0:18:29:da:85:1b:90:86:04:64:
45:01:f8:fa:76:b7:d4:97:73:e7:0f:d8:c7:1b:bc:
5b:96:bd:84:25:ca:cd:de:4e:0d:d7:93:bd:e6:7f:
85:44:80:c3:4e:76:e7:56:f2:a8:33:b4:2b:40:1b:
49:35:41:e4:8b:f7:a5:8c:10:c5:c8:68:de:a7:93:
71:36:95:2f:34:2d:1a:2e:8d:66:5c:d8:08:7b:7c:
fc:2f:95:5e:b1:ed:7a:88:eb:8a:b2:a0:ab:6a:24:
88:d9:09:04:5b:7e:4b:d8:43:37:87:5a:5c:4c:35:
dc:96:60:2f:e0:ff:57:1d:00:5a:16:4e:e5:0a:e0:
0a:51:91:40:1c:bc:46:42:a6:c7:ec:e5:32:c8:36:
38:94:8d:23:f7:7c:3e:8a:1a:8a:ee:cf:64:ea:f1:
5d:3a:8b:f5:6c:e2:90:36:00:c2:e4:49:6b:0e:c5:
bf:40:66:4f:32:eb:d4:e6:20:56:77:b9:9e:64:6f:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:61:8C:8C:62:4E:25:2C:05:36:C1:D6:75:95:DF:D0:75:67:02
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:85:4e:f7:ed:eb:a1:7f:20:5e:3e:58:da:ff:52:7f:35:
1f:d9:4b:55:81:66:88:13:0f:40:ca:7e:90:6e:e7:58:ea:45:
b1:97:46:49:a7:0e:0a:79:1b:3f:a5:f8:71:93:0d:a5:0f:71:
a7:9f:c3:67:e8:77:72:0a:0b:cf:dc:ed:aa:60:b3:e7:f1:94:
db:3e:7b:6b:71:a4:59:c7:70:b2:8e:a2:b3:0e:60:f3:83:5e:
45:be:6c:98:28:85:92:bd:8d:04:41:36:45:e3:04:cf:db:e7:
c3:b2:4f:51:a8:eb:0b:23:b6:53:a8:9d:a8:2a:f6:3a:59:67:
4a:6d:ee:5a:99:4a:d4:d4:44:47:d8:e0:85:bc:d8:0d:53:5c:
5b:76:19:67:54:6a:ae:e8:c6:7b:cd:55:f5:7d:99:31:f9:dc:
e0:9a:a4:f4:9f:fd:c6:f8:24:8b:83:c2:44:5c:f3:83:cb:b8:
f4:a4:0e:09:4b:8b:e1:11:a9:87:7e:33:98:9b:8c:68:68:51:
bb:1b:0e:e4:f1:32:1e:81:7a:03:69:26:51:d7:11:1f:96:a4:
24:f8:3f:04:90:6c:c1:5d:12:4d:aa:ed:74:80:bd:57:ee:e7:
18:cd:b0:bc:ef:76:fa:c2:b4:77:ae:73:0d:32:10:df:4a:d4:
4c:e0:00:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F40jVllcgGNQccC/zum3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjUwMTMxMTYwMDI0WhcNMjUwMjAxMTYwMDI0WjAzMTEwLwYDVQQD
Eyg2OTc3NjE4YzhjNjI0ZTI1MmMwNTM2YzFkNjc1OTVkZmQwNzU2NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIESYdrcikNHcysbcRnrWJFMjMV3
ujpozmWDJ6tKSAdN4H6gHMn121In4xud2j5ulKGlAcqjhFQ5TetcXdBlOsAYKdqF
G5CGBGRFAfj6drfUl3PnD9jHG7xblr2EJcrN3k4N15O95n+FRIDDTnbnVvKoM7Qr
QBtJNUHki/eljBDFyGjep5NxNpUvNC0aLo1mXNgIe3z8L5Vese16iOuKsqCraiSI
2QkEW35L2EM3h1pcTDXclmAv4P9XHQBaFk7lCuAKUZFAHLxGQqbH7OUyyDY4lI0j
93w+ihqK7s9k6vFdOov1bOKQNgDC5ElrDsW/QGZPMuvU5iBWd7meZG8kfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl3YYyMYk4lLAU2wdZ1ld/QdWcCMB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKCFTvft
66F/IF4+WNr/Un81H9lLVYFmiBMPQMp+kG7nWOpFsZdGSacOCnkbP6X4cZMNpQ9x
p5/DZ+h3cgoLz9ztqmCz5/GU2z57a3GkWcdwso6isw5g84NeRb5smCiFkr2NBEE2
ReMEz9vnw7JPUajrCyO2U6idqCr2OllnSm3uWplK1NRER9jghbzYDVNcW3YZZ1Rq
rujGe81V9X2ZMfnc4Jqk9J/9xvgki4PCRFzzg8u49KQOCUuL4RGph34zmJuMaGhR
uxsO5PEyHoF6A2kmUdcRH5akJPg/BJBswV0STartdIC9V+7nGM2wvO92+sK0d65z
DTIQ30rUTOAAXA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:15 2025 by rpki-client