Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: BRTlKqaIDA36dt+4A3wwm9wbr4btoM7ZECHq6DQqY90=
Subject key identifier: 8F:E8:25:DA:ED:7C:BC:7F:67:DC:75:F6:D2:40:24:AC:7A:B9:71:6B
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 0194BD857365DC4B06FC9037B3544F55C890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: R+H9/THG6KmV8/x+gi6MQ0I56gT1VW/fHGXbBnU76Yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:73:65:dc:4b:06:fc:90:37:b3:54:4f:55:c8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=8fe825daed7cbc7f67dc75f6d24024ac7ab9716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:b0:9d:70:99:09:7b:86:9f:dd:2e:76:10:
2b:47:3a:7d:c1:8f:97:ac:c1:03:5f:e8:8c:a3:3c:
b5:49:89:a7:1f:07:93:00:ca:75:cf:83:21:94:25:
7e:32:89:a6:ce:d2:e4:78:94:59:8b:c7:cd:02:8f:
38:3e:99:79:b3:23:ee:74:be:45:cb:28:19:fd:77:
50:16:0d:6e:56:57:33:39:9f:2a:85:f5:b1:28:8b:
f7:02:c7:d2:60:6f:97:a4:62:37:08:aa:bf:0d:70:
3b:28:64:d3:8d:10:4b:6b:9e:1f:2a:70:20:98:d9:
68:e4:b7:8d:7d:37:7b:79:91:2b:b4:d8:89:a8:c4:
f1:02:ea:43:d7:1f:13:48:70:51:9a:4b:c5:04:b5:
2b:23:ef:2e:60:0d:62:2a:ed:47:e2:b6:a9:43:8d:
04:38:58:5e:bd:e6:bc:5b:8a:b6:6d:cb:90:ca:02:
f3:93:ff:13:9b:93:6c:69:4e:93:bf:b5:b7:13:e8:
e5:c0:04:3b:8f:71:62:7e:bb:b3:bf:67:b4:23:cf:
8d:2d:f1:00:24:35:d9:0d:24:1e:2f:52:0f:63:ae:
cd:e5:b5:c4:d9:2c:1b:fb:c8:95:27:50:7c:c6:2b:
d1:0b:81:7f:0d:e8:a7:4d:e1:1c:44:31:fd:25:ed:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E8:25:DA:ED:7C:BC:7F:67:DC:75:F6:D2:40:24:AC:7A:B9:71:6B
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b7:f0:0a:b0:1f:e0:05:f3:01:36:a1:5e:0b:e6:7d:d8:90:
61:1b:44:1f:a2:cb:38:30:da:aa:b3:f8:10:53:14:59:25:90:
0d:57:16:23:00:36:6b:3e:a5:ec:71:cf:82:2a:81:e9:e7:bb:
bc:16:f7:7e:54:39:52:0b:53:57:85:8e:c6:c4:8a:d0:7e:5c:
b8:ef:0e:34:a6:3e:1f:6d:8c:6a:97:d9:83:92:bd:47:37:4b:
ea:fd:b4:b5:a0:84:0f:a5:26:ff:ed:94:0f:53:9a:5f:87:e3:
13:81:d9:7e:8d:d5:13:77:16:f1:f9:15:22:83:b1:75:3f:6f:
e8:0e:51:e1:ee:c7:9f:fd:ad:c1:db:99:2f:55:be:8c:e9:ba:
61:d7:65:b7:5a:e2:26:9d:21:6b:9d:dc:0f:b0:d8:68:f1:c5:
61:ca:17:15:b3:91:b4:9e:3e:b3:b3:10:b5:db:f8:0f:79:1c:
74:b2:09:63:67:c7:bf:2c:e0:66:49:9e:88:76:2a:31:50:25:
9b:9a:25:8f:18:69:f7:2e:8e:e3:8f:8a:3a:0d:02:5c:28:e4:
ae:25:f8:5a:ae:3a:53:80:c3:d0:23:44:0b:0b:f6:c4:42:ce:
7b:25:bd:d8:39:5b:92:ec:9c:6a:89:15:f4:63:05:74:4f:39:
3f:df:8b:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXNl3EsG/JA3s1RPVciQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGQ5YmEyZTM5Njg0MjNiZWZjNWVlZDA1NzE5YjMwMDA1
N2Q3Y2IwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
Eyg4ZmU4MjVkYWVkN2NiYzdmNjdkYzc1ZjZkMjQwMjRhYzdhYjk3MTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ewnXCZCXuGn90udhArRzp9wY+X
rMEDX+iMozy1SYmnHweTAMp1z4MhlCV+MommztLkeJRZi8fNAo84Ppl5syPudL5F
yygZ/XdQFg1uVlczOZ8qhfWxKIv3AsfSYG+XpGI3CKq/DXA7KGTTjRBLa54fKnAg
mNlo5LeNfTd7eZErtNiJqMTxAupD1x8TSHBRmkvFBLUrI+8uYA1iKu1H4rapQ40E
OFhevea8W4q2bcuQygLzk/8Tm5NsaU6Tv7W3E+jlwAQ7j3Fifruzv2e0I8+NLfEA
JDXZDSQeL1IPY67N5bXE2Swb+8iVJ1B8xivRC4F/DeinTeEcRDH9Je30uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/oJdrtfLx/Z9x19tJAJKx6uXFrMB8GA1UdIwQY
MBaAFGeNm6LjloQjvvxe7QVxmzAAV9fLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kMTViN2YtNzA4Zi00MTU1LThkMzEt
YzgwYTcyM2QzNGY3LzEvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kMTViN2YtNzA4Zi00MTU1LThkMzEtYzgwYTcyM2QzNGY3
LzEvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLfwCrAf
4AXzATahXgvmfdiQYRtEH6LLODDaqrP4EFMUWSWQDVcWIwA2az6l7HHPgiqB6ee7
vBb3flQ5UgtTV4WOxsSK0H5cuO8ONKY+H22MapfZg5K9RzdL6v20taCED6Um/+2U
D1OaX4fjE4HZfo3VE3cW8fkVIoOxdT9v6A5R4e7Hn/2twduZL1W+jOm6Yddlt1ri
Jp0ha53cD7DYaPHFYcoXFbORtJ4+s7MQtdv4D3kcdLIJY2fHvyzgZkmeiHYqMVAl
m5oljxhp9y6O44+KOg0CXCjkriX4Wq46U4DD0CNECwv2xELOeyW92DlbkuycaokV
9GMFdE85P9+Lfw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:31 2025 by rpki-client