Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier: WeXkYxYWS2/xdv5gryB8deEouR1uE4ytlHOuEIqIjDI=
Subject key identifier: 34:8B:50:AA:37:83:5F:1F:B2:B3:16:00:76:D9:98:E1:98:80:B1:24
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial: 0194BD4E892344509C949E4C738F191330BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number: 0FB7
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: qZaaoAshzDvgo3xpTSaIBubPaVN6J2z8pkaxkNZvN/o=)
2: uoOTDO3I8Ju9HNeb_RrUnxiXqMM.roa (hash: uWLf97UT0+0lxJvC3noTnvF0IVTFV5k9XbA2AIDmE6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:23:44:50:9c:94:9e:4c:73:8f:19:13:30:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=348b50aa37835f1fb2b3160076d998e19880b124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:83:c7:cc:07:99:67:59:35:d3:9b:af:1b:
96:11:0b:eb:3a:e0:fa:00:24:96:72:39:e9:24:8d:
9a:65:88:98:8c:25:29:1a:a7:37:1e:48:39:a1:16:
75:9d:ae:ab:b5:72:87:5f:a1:55:6e:a8:d5:73:ef:
a9:32:a9:3d:3f:72:5f:d4:32:6a:c5:b7:70:92:c0:
68:fe:34:e4:8a:8c:0b:64:fe:28:64:51:ec:04:ef:
0f:7c:3e:4a:56:10:06:b4:42:a5:bc:3b:a0:69:da:
02:db:04:07:33:70:a9:ee:38:56:a4:4e:7f:30:4c:
a6:de:e0:a8:02:23:a1:4c:12:b8:83:ee:e6:19:97:
89:c8:e2:da:66:e1:7f:ad:f7:86:0e:03:2a:6c:22:
0c:dd:ea:6d:54:73:e3:88:95:9a:20:8b:30:da:36:
ce:ab:b9:d9:0d:52:ea:47:94:4d:07:a7:eb:0c:e0:
a7:57:c1:b3:15:cf:8d:71:52:10:dc:70:3d:35:d7:
a7:b4:04:0e:62:64:54:2c:f2:3e:25:ff:27:f3:a7:
4d:32:fd:81:ba:da:fb:75:d8:dd:07:e0:f7:da:d5:
53:49:b5:54:c2:bd:35:a6:3b:89:d9:1f:bf:2f:00:
3c:c6:2d:a8:8d:5d:2d:d4:bb:46:f7:a6:f3:c0:ea:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:50:AA:37:83:5F:1F:B2:B3:16:00:76:D9:98:E1:98:80:B1:24
X509v3 Authority Key Identifier:
keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:79:b4:03:d2:78:1b:36:c9:d5:e0:84:01:f7:0e:46:10:e4:
42:13:b7:e1:c7:cf:fb:33:ff:5c:c4:03:d4:7b:b0:23:2f:8b:
1c:ea:9c:79:cd:80:9d:a1:37:ae:fe:20:f9:23:11:41:2d:64:
06:f2:10:23:5f:75:25:fc:6b:1b:84:42:39:20:71:59:5c:6f:
b5:33:b8:b5:52:a2:e2:09:61:bb:c6:4b:e7:86:34:6e:27:bf:
31:af:73:ab:fc:e4:ba:dd:f1:33:93:9f:7e:f5:6a:04:0f:48:
95:c2:a6:e4:66:e3:9a:a0:56:18:43:67:e9:8c:ca:ca:11:27:
ab:90:83:c2:57:19:58:20:99:34:76:35:92:c6:c6:f8:0c:65:
7c:60:a0:db:dd:34:ec:c2:ce:5f:28:2b:34:3a:ff:81:69:46:
0e:91:c5:89:4a:0a:fa:73:ce:72:ee:0c:0e:29:61:3e:d1:54:
ee:23:f9:16:76:ba:7e:0a:5f:0b:e4:e0:85:5c:a6:88:e2:01:
a5:92:d1:78:8d:e5:aa:87:c7:19:6b:fa:ee:fe:e6:0f:0e:e2:
0c:16:1e:e8:19:94:b7:1b:cc:72:68:f8:65:37:d3:d4:d1:e7:
02:42:2f:e8:68:45:39:8e:14:68:29:19:e9:f3:4f:29:85:2a:
96:77:04:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TokjRFCclJ5Mc48ZEzC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDVlNWNkN2QwMzc1ZGUyNTI3NDA1NDY0MTJiODhiYTVi
Y2ZhN2EwHhcNMjUwMTMxMTcwMDI4WhcNMjUwMjAxMTcwMDI4WjAzMTEwLwYDVQQD
EygzNDhiNTBhYTM3ODM1ZjFmYjJiMzE2MDA3NmQ5OThlMTk4ODBiMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk+Dx8wHmWdZNdObrxuWEQvrOuD6
ACSWcjnpJI2aZYiYjCUpGqc3Hkg5oRZ1na6rtXKHX6FVbqjVc++pMqk9P3Jf1DJq
xbdwksBo/jTkiowLZP4oZFHsBO8PfD5KVhAGtEKlvDugadoC2wQHM3Cp7jhWpE5/
MEym3uCoAiOhTBK4g+7mGZeJyOLaZuF/rfeGDgMqbCIM3eptVHPjiJWaIIsw2jbO
q7nZDVLqR5RNB6frDOCnV8GzFc+NcVIQ3HA9NdentAQOYmRULPI+Jf8n86dNMv2B
utr7ddjdB+D32tVTSbVUwr01pjuJ2R+/LwA8xi2ojV0t1LtG96bzwOoBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSLUKo3g18fsrMWAHbZmOGYgLEkMB8GA1UdIwQY
MBaAFGbV5c19A3XeJSdAVGQSuIulvPp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDkt
ODZiOTBmMTk3ZWRlLzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDktODZiOTBmMTk3ZWRl
LzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXm0A9J4
GzbJ1eCEAfcORhDkQhO34cfP+zP/XMQD1HuwIy+LHOqcec2AnaE3rv4g+SMRQS1k
BvIQI191JfxrG4RCOSBxWVxvtTO4tVKi4glhu8ZL54Y0bie/Ma9zq/zkut3xM5Of
fvVqBA9IlcKm5GbjmqBWGENn6YzKyhEnq5CDwlcZWCCZNHY1ksbG+AxlfGCg2900
7MLOXygrNDr/gWlGDpHFiUoK+nPOcu4MDilhPtFU7iP5Fna6fgpfC+TghVymiOIB
pZLReI3lqofHGWv67v7mDw7iDBYe6BmUtxvMcmj4ZTfT1NHnAkIv6GhFOY4UaCkZ
6fNPKYUqlncELw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:32 2025 by rpki-client