Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier: D5yg1CnKMSI0JNbTf/Dd9gv6FcVT4X1XW/bYNU2dgyY=
Subject key identifier: D2:5C:19:C4:CD:E6:78:36:1F:07:AD:6E:04:95:D1:DF:D4:41:B4:C1
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial: 0194BBCE66EF1225085ED0F170EBB3D3B498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number: 0DCB
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: bFdoV70vOJasSkcMVgKfueTZDFBqXgKO1+FpZ7MyGw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:66:ef:12:25:08:5e:d0:f1:70:eb:b3:d3:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=d25c19c4cde678361f07ad6e0495d1dfd441b4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:f5:04:bf:b1:c6:4f:fe:14:61:ec:ed:89:
54:e0:4f:a1:1f:49:f6:dd:98:93:0f:8f:c5:35:bb:
83:2f:3b:1f:40:71:2b:d8:5a:92:94:c4:00:81:88:
f3:89:8e:f6:57:a0:76:74:78:c5:dd:4d:2b:d0:08:
8d:e3:1b:4c:8a:8a:90:92:95:16:50:eb:b8:df:c7:
91:36:d3:e7:bd:d5:55:74:ee:a9:ea:4a:6f:b0:25:
b2:a1:b9:83:7e:1d:be:7c:f5:cd:34:4c:c0:87:79:
e8:8c:8d:e5:68:15:71:8c:8f:93:69:44:01:45:38:
b2:c6:b1:31:38:e4:33:19:40:ad:c4:58:37:dc:94:
c1:69:8f:35:6a:27:89:5a:41:04:52:d7:06:14:3c:
7b:35:6b:6b:a9:08:7e:f7:77:e9:f0:94:ca:2a:46:
4c:2f:9a:ec:40:81:07:47:8f:6a:c8:47:e0:a6:24:
01:25:57:38:b3:74:02:26:a0:6c:c3:ef:c3:4c:ee:
1d:8e:a0:3b:46:f0:22:e0:08:47:90:a5:e7:57:30:
b0:10:5d:7a:c9:6b:3c:e1:8a:b9:74:22:96:a1:7c:
4e:5e:7d:a4:c2:9d:a6:6c:a7:b3:29:e5:ad:b0:58:
88:c0:39:b6:b4:a8:f2:d7:e0:a6:3a:5a:19:f8:94:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:19:C4:CD:E6:78:36:1F:07:AD:6E:04:95:D1:DF:D4:41:B4:C1
X509v3 Authority Key Identifier:
keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:fb:5f:ff:28:1f:5f:1c:82:14:c9:44:35:4d:49:74:11:
f7:88:e4:c7:1a:f7:fe:e8:d2:bb:7f:a7:e0:01:92:72:54:5e:
28:4e:77:81:5e:d2:16:b9:2c:94:ef:28:cd:40:b4:e1:9c:74:
27:0f:b9:78:5c:f4:74:fa:8a:f5:9e:13:77:fa:0d:08:6c:a0:
b6:d5:21:e1:58:e0:90:87:8b:67:78:36:d9:1c:ad:9f:f6:e3:
84:25:7d:a3:6a:8e:d7:53:ca:15:6e:e6:f9:e3:2a:5d:a7:04:
89:f7:06:e4:50:83:71:66:48:5b:c0:19:d5:d7:c2:a4:be:f2:
2c:8e:73:57:78:a1:4a:cb:38:ad:68:d5:f7:aa:8a:1e:79:0e:
c2:4c:e4:1f:24:18:11:99:36:f0:45:12:50:82:ca:14:68:8a:
63:e0:7a:c2:78:a8:72:a8:28:70:e0:00:aa:40:e9:61:49:16:
b2:78:f3:f6:52:35:2d:c0:c7:49:9f:60:14:d0:b9:65:9b:79:
40:d5:b1:a5:ad:d3:b9:9a:8e:27:1c:0a:1b:4b:78:3d:30:f9:
e2:70:3b:4a:56:f7:3b:f7:cc:68:d8:b4:cd:b5:d5:e9:a4:51:
4a:df:9f:f1:8e:90:10:47:95:d2:01:03:84:5f:14:2a:15:67:
3f:e0:37:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmbvEiUIXtDxcOuz07SYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjBlODI0YzYyYTU5MjhhNjUwMjE0ZWYzM2U4Yzc3ZTdj
MWZmOGQwHhcNMjUwMTMxMTAwMDUzWhcNMjUwMjAxMTAwMDUzWjAzMTEwLwYDVQQD
EyhkMjVjMTljNGNkZTY3ODM2MWYwN2FkNmUwNDk1ZDFkZmQ0NDFiNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ/1BL+xxk/+FGHs7YlU4E+hH0n2
3ZiTD4/FNbuDLzsfQHEr2FqSlMQAgYjziY72V6B2dHjF3U0r0AiN4xtMioqQkpUW
UOu438eRNtPnvdVVdO6p6kpvsCWyobmDfh2+fPXNNEzAh3nojI3laBVxjI+TaUQB
RTiyxrExOOQzGUCtxFg33JTBaY81aieJWkEEUtcGFDx7NWtrqQh+93fp8JTKKkZM
L5rsQIEHR49qyEfgpiQBJVc4s3QCJqBsw+/DTO4djqA7RvAi4AhHkKXnVzCwEF16
yWs84Yq5dCKWoXxOXn2kwp2mbKezKeWtsFiIwDm2tKjy1+CmOloZ+JSgVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJcGcTN5ng2HwetbgSV0d/UQbTBMB8GA1UdIwQY
MBaAFM3w6CTGKlkoplAhTvM+jHfnwf+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8yMjQ5NjctY2QxYi00NmY5LWE0NmUt
MjU4M2FmMjM3ZTJjLzEvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8yMjQ5NjctY2QxYi00NmY5LWE0NmUtMjU4M2FmMjM3ZTJj
LzEvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmT7X/8o
H18cghTJRDVNSXQR94jkxxr3/ujSu3+n4AGSclReKE53gV7SFrkslO8ozUC04Zx0
Jw+5eFz0dPqK9Z4Td/oNCGygttUh4VjgkIeLZ3g22Rytn/bjhCV9o2qO11PKFW7m
+eMqXacEifcG5FCDcWZIW8AZ1dfCpL7yLI5zV3ihSss4rWjV96qKHnkOwkzkHyQY
EZk28EUSUILKFGiKY+B6wniocqgocOAAqkDpYUkWsnjz9lI1LcDHSZ9gFNC5ZZt5
QNWxpa3TuZqOJxwKG0t4PTD54nA7Slb3O/fMaNi0zbXV6aRRSt+f8Y6QEEeV0gED
hF8UKhVnP+A3vA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:53 2025 by rpki-client