Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: KS4ueM+pT0o9XJCJyagyk5LnXoFOUgp+RRVkIFuvBU8=
Subject key identifier: C1:4F:4E:6C:F2:3E:7C:B7:FF:6F:86:A9:5E:C3:CE:98:38:3B:84:CD
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 0194BC3C4A3C5628BC9D3A814369B47487F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 13FE
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: OGNySTRnt5IZFS8nWJoU7ym7+qKzxdbL4hkjirPLbh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:3c:56:28:bc:9d:3a:81:43:69:b4:74:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=c14f4e6cf23e7cb7ff6f86a95ec3ce98383b84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:fe:7b:07:11:44:91:a4:7f:7d:91:06:01:
ed:6b:81:7b:a9:ab:01:ea:f8:db:bc:a3:8d:86:cb:
8e:c0:86:3f:5f:95:e7:05:78:4e:23:8c:99:3c:89:
95:dc:b9:c5:d6:e0:a5:25:a1:cc:d6:ec:d2:f2:1d:
d2:30:40:f7:7a:9b:9a:e4:95:65:67:70:d1:9c:81:
b5:f0:d4:2b:b7:83:a8:94:65:c7:46:c6:5b:ca:70:
35:22:60:03:04:3d:91:e2:0a:4f:23:cc:c4:3f:ad:
36:ef:d3:ca:30:24:40:a1:b2:77:ae:3d:23:17:37:
47:a7:53:07:e2:da:f2:02:7e:cd:0e:d7:f0:0a:cc:
44:5e:e9:1f:34:20:c2:5a:f6:3d:3b:6a:96:0e:66:
42:c1:21:c0:33:a6:2f:9e:cb:d4:d5:ad:7c:d1:c9:
42:01:92:59:1c:36:5f:80:e4:41:fc:e9:9e:58:99:
16:85:e1:cd:92:62:0f:32:65:1c:6f:4c:e4:2b:26:
fa:f5:29:c4:e7:1b:fa:8e:ac:bd:1f:34:29:9e:6e:
58:44:6e:89:7b:f2:cf:2a:f2:f8:60:70:ed:3e:64:
55:f6:53:04:27:7c:c6:a1:7d:c0:8b:62:37:90:65:
44:75:9d:8c:29:ff:01:15:6a:73:3e:b6:4c:dc:de:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:4E:6C:F2:3E:7C:B7:FF:6F:86:A9:5E:C3:CE:98:38:3B:84:CD
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b1:40:82:18:52:35:05:75:3f:01:02:0a:c8:73:8e:b1:a3:
3a:c2:a7:5f:35:ad:5e:99:19:62:52:ac:a5:eb:27:0b:bd:ae:
4e:54:e4:c8:bc:10:15:7b:7e:13:91:90:6f:55:95:a8:f8:7d:
65:26:6f:b1:bd:4a:c3:14:82:f7:a9:c7:60:12:b5:a4:ab:6e:
fc:58:52:73:b3:4f:17:d7:d3:5c:dc:9f:e7:e4:ab:fb:0e:31:
4e:6a:12:4d:17:8c:3d:87:6c:ae:61:c3:66:92:97:2e:9d:7c:
23:7a:cd:0c:0b:57:b9:fd:24:c0:32:2c:84:56:d6:0d:d9:5d:
e9:4f:5c:3e:19:27:c7:b3:ae:f9:0a:07:ee:58:b9:1e:ef:34:
0e:c1:7e:ca:43:f0:08:e0:3d:a1:c8:63:79:9d:61:7a:f3:8c:
47:4b:bd:ee:83:c9:c0:1a:af:82:8e:5d:68:f3:f3:97:44:a7:
1f:63:4d:f9:67:83:f8:cd:d6:b9:14:a3:39:c9:0e:31:89:11:
67:38:74:45:60:5e:98:96:ee:bf:62:c0:1f:14:67:ab:87:21:
ee:66:ae:6d:ff:88:33:0f:5f:90:ef:0e:2d:6b:86:81:30:14:
0f:89:3a:13:1f:a7:bd:6e:de:11:39:24:de:53:f0:89:16:2a:
fd:07:d3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEo8Vii8nTqBQ2m0dIf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OWY1YzhiOWI2M2FlNWUyODc4NmViYTEwYTFmNjU3MmE2
MGUzZmMwHhcNMjUwMTMxMTIwMDU1WhcNMjUwMjAxMTIwMDU1WjAzMTEwLwYDVQQD
EyhjMTRmNGU2Y2YyM2U3Y2I3ZmY2Zjg2YTk1ZWMzY2U5ODM4M2I4NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTj+ewcRRJGkf32RBgHta4F7qasB
6vjbvKONhsuOwIY/X5XnBXhOI4yZPImV3LnF1uClJaHM1uzS8h3SMED3epua5JVl
Z3DRnIG18NQrt4OolGXHRsZbynA1ImADBD2R4gpPI8zEP60279PKMCRAobJ3rj0j
FzdHp1MH4tryAn7NDtfwCsxEXukfNCDCWvY9O2qWDmZCwSHAM6YvnsvU1a180clC
AZJZHDZfgORB/OmeWJkWheHNkmIPMmUcb0zkKyb69SnE5xv6jqy9HzQpnm5YRG6J
e/LPKvL4YHDtPmRV9lMEJ3zGoX3Ai2I3kGVEdZ2MKf8BFWpzPrZM3N5jYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFPTmzyPny3/2+GqV7Dzpg4O4TNMB8GA1UdIwQY
MBaAFGafXIubY65eKHhuuhCh9lcqYOP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGIt
NTVlYjgyMGZkNTk2LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGItNTVlYjgyMGZkNTk2
LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrFAghhS
NQV1PwECCshzjrGjOsKnXzWtXpkZYlKspesnC72uTlTkyLwQFXt+E5GQb1WVqPh9
ZSZvsb1KwxSC96nHYBK1pKtu/FhSc7NPF9fTXNyf5+Sr+w4xTmoSTReMPYdsrmHD
ZpKXLp18I3rNDAtXuf0kwDIshFbWDdld6U9cPhknx7Ou+QoH7li5Hu80DsF+ykPw
COA9ochjeZ1hevOMR0u97oPJwBqvgo5daPPzl0SnH2NN+WeD+M3WuRSjOckOMYkR
Zzh0RWBemJbuv2LAHxRnq4ch7maubf+IMw9fkO8OLWuGgTAUD4k6Ex+nvW7eETkk
3lPwiRYq/QfTog==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:35 2025 by rpki-client