Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: q0zcAG99VS6x0FQliItjZx8jrCUfUWN5YKnnxOkYb9Q=
Subject key identifier: 11:9E:6A:7E:D8:FB:00:0C:52:BB:27:54:89:7F:55:44:17:17:5D:67
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 0194BBCE6590C066064FAAAF969B49276F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: 0uGmb8/hJ9ax3l2DjTbvRYOaeorXOcViQVamg8PdwSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:65:90:c0:66:06:4f:aa:af:96:9b:49:27:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=119e6a7ed8fb000c52bb2754897f554417175d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:65:2e:81:81:e3:e2:dd:ab:7e:b8:78:e6:c1:
42:b0:72:46:91:99:da:e8:be:5e:a2:14:3b:82:d9:
d3:34:2f:a7:7c:ff:70:81:7f:8f:a3:0d:76:4a:02:
ed:47:35:d5:22:2a:2b:d3:c4:be:74:d8:a4:37:b9:
37:b6:17:96:c9:8c:33:db:82:a4:1e:f8:f1:3d:26:
17:30:d0:a7:eb:60:9e:d4:38:12:4a:b5:03:82:91:
6f:2a:d0:d9:c8:cf:ab:4b:10:33:87:39:2b:b4:29:
06:ad:11:02:f1:72:86:4b:12:28:49:a5:c9:9f:2c:
f8:1e:86:6e:44:b9:e8:9e:7a:99:79:9d:2e:e9:29:
bd:45:47:03:c0:4a:dd:7a:59:65:67:b7:c0:44:b2:
aa:58:78:ea:cd:17:3f:5c:41:4e:0e:ad:d7:f7:6b:
e2:f8:89:6c:5a:6f:f3:93:32:85:b1:a8:67:47:7e:
d6:85:b9:c0:90:5f:a6:a3:eb:64:fe:02:3c:dd:e5:
64:fa:af:c3:2c:8d:08:78:04:e6:19:4c:44:81:3f:
7a:ad:9a:2f:ab:da:6a:28:df:dc:d9:bd:f0:3a:77:
8f:8f:20:63:63:78:f5:12:5c:cc:06:62:3e:d6:f7:
d3:e9:d2:21:7e:cd:ed:dd:1c:a4:ab:3f:6f:93:6a:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:6A:7E:D8:FB:00:0C:52:BB:27:54:89:7F:55:44:17:17:5D:67
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a5:82:2c:44:cb:0d:97:21:2d:ec:29:2a:da:81:f7:19:63:
8d:83:5c:fc:cc:62:27:6a:ad:4f:7e:a8:d5:7c:16:e7:af:91:
7e:06:1c:e6:32:89:ae:df:ce:09:86:70:58:62:5f:25:b3:a0:
20:15:d9:3e:53:ff:24:f5:8d:62:8b:7c:12:e0:98:d5:e4:df:
2a:5b:38:a4:98:f2:3b:d0:4e:eb:fc:29:c3:65:93:03:a4:a4:
ee:34:db:64:7b:b3:21:17:5f:fd:c7:f0:f2:70:ea:46:5f:2e:
7a:e1:b6:5e:d7:63:06:79:7f:97:dd:4f:de:44:c1:5e:4b:21:
9c:70:b8:ed:ac:39:df:c2:f3:a0:e4:c8:5d:bd:f2:9a:04:5c:
9a:f6:ad:6a:f5:0f:c7:d3:f6:62:72:56:6b:ea:ec:67:7e:86:
fe:34:2f:9e:b6:34:e4:15:32:8a:17:77:cf:51:4b:8c:66:ff:
75:dc:8b:6b:52:f0:e0:be:fb:0f:0b:6c:dc:5e:c2:6c:51:bd:
32:77:00:87:47:39:b7:71:bc:4e:ea:9e:e3:6a:83:c7:ea:d0:
78:62:2a:38:f9:88:8d:26:e1:2f:be:dd:e6:50:f6:78:86:f2:
60:87:27:6c:b7:c4:35:ab:a7:64:b6:60:48:72:9d:68:8a:76:
5c:99:1e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmWQwGYGT6qvlptJJ29AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk
YzA4OWMwHhcNMjUwMTMxMTAwMDUzWhcNMjUwMjAxMTAwMDUzWjAzMTEwLwYDVQQD
EygxMTllNmE3ZWQ4ZmIwMDBjNTJiYjI3NTQ4OTdmNTU0NDE3MTc1ZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GUugYHj4t2rfrh45sFCsHJGkZna
6L5eohQ7gtnTNC+nfP9wgX+Pow12SgLtRzXVIior08S+dNikN7k3theWyYwz24Kk
HvjxPSYXMNCn62Ce1DgSSrUDgpFvKtDZyM+rSxAzhzkrtCkGrREC8XKGSxIoSaXJ
nyz4HoZuRLnonnqZeZ0u6Sm9RUcDwErdelllZ7fARLKqWHjqzRc/XEFODq3X92vi
+IlsWm/zkzKFsahnR37WhbnAkF+mo+tk/gI83eVk+q/DLI0IeATmGUxEgT96rZov
q9pqKN/c2b3wOnePjyBjY3j1ElzMBmI+1vfT6dIhfs3t3Rykqz9vk2rr9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGean7Y+wAMUrsnVIl/VUQXF11nMB8GA1UdIwQY
MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt
MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz
LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqWCLETL
DZchLewpKtqB9xljjYNc/MxiJ2qtT36o1XwW56+RfgYc5jKJrt/OCYZwWGJfJbOg
IBXZPlP/JPWNYot8EuCY1eTfKls4pJjyO9BO6/wpw2WTA6Sk7jTbZHuzIRdf/cfw
8nDqRl8ueuG2XtdjBnl/l91P3kTBXkshnHC47aw538LzoOTIXb3ymgRcmvatavUP
x9P2YnJWa+rsZ36G/jQvnrY05BUyihd3z1FLjGb/ddyLa1Lw4L77Dwts3F7CbFG9
MncAh0c5t3G8Tuqe42qDx+rQeGIqOPmIjSbhL77d5lD2eIbyYIcnbLfENaunZLZg
SHKdaIp2XJke4A==
-----END CERTIFICATE-----
Generated at Thu May 1 13:33:04 2025 by rpki-client