Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: ifzVPpGoPswtyBYZeBXSLvrYDJQUz7kuUqPvGTxE9VM=
Subject key identifier: 2F:59:26:C8:4B:49:5D:AA:31:1D:FC:B6:07:20:51:C0:3B:C7:31:EC
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 0194BD17EC8B0FBC5FCC03E8A9D0A2CF2F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: rEInOd2bOexHku3lM6kHl/cTlnKXgfIQOybubwVIyjs=)
2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ec:8b:0f:bc:5f:cc:03:e8:a9:d0:a2:cf:2f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=2f5926c84b495daa311dfcb6072051c03bc731ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:4c:f5:96:4d:94:5d:bd:7e:4e:fb:d1:c2:
71:33:4e:6d:d5:a9:c6:9e:fd:46:9c:28:ba:39:13:
ca:d6:47:aa:cf:9c:e7:d7:0e:27:10:6c:d1:46:12:
b0:f1:50:65:97:00:cd:3d:aa:9c:ee:5a:8d:6f:49:
bd:28:eb:0e:29:3d:7f:23:49:74:d2:f4:d3:07:84:
01:ef:22:4e:94:46:85:6f:51:48:80:71:28:d6:52:
98:89:0f:84:e9:3f:54:6a:7e:83:6d:13:64:74:cb:
c9:ce:2e:00:a7:4d:4c:cc:9e:aa:ad:b9:57:16:2f:
22:84:f7:03:1b:e1:9a:b8:98:4d:72:bc:7b:bd:99:
03:7b:28:bf:3b:a3:e7:f1:35:94:9d:e3:00:37:ec:
b3:93:51:2e:9d:90:50:db:3a:ba:1a:a4:26:d2:11:
43:82:9b:10:1c:00:7b:16:3e:7c:ce:e4:53:5d:2a:
28:07:7a:16:78:e5:d6:cc:00:85:df:46:55:f5:d6:
63:e0:83:d9:b7:fb:11:3b:3a:d9:f9:e7:99:05:6a:
7c:16:8b:fb:51:94:00:c0:2f:f6:c3:ed:d1:77:17:
a2:d0:08:90:13:7c:92:42:bd:e4:25:05:79:5c:79:
67:fa:a1:c6:1d:e3:a8:72:3d:91:cb:67:f2:aa:df:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:59:26:C8:4B:49:5D:AA:31:1D:FC:B6:07:20:51:C0:3B:C7:31:EC
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:1e:5e:3e:61:23:cf:2c:5a:10:4b:56:93:0c:96:18:59:
8b:c9:9e:9b:a5:f5:df:89:0a:b2:80:75:4d:9c:90:d5:20:7e:
12:b6:79:6d:e9:21:56:a0:df:35:04:88:f2:9c:4d:b8:98:27:
24:5d:fd:39:06:1c:1a:33:cf:c6:ff:ba:7d:8a:c5:32:80:3c:
b5:a7:f4:f5:1c:a9:6c:80:08:cc:0c:53:1a:e4:65:52:2b:78:
22:91:f5:21:c7:e2:ed:f9:c4:15:6c:e3:f0:97:b4:c9:17:cb:
fb:45:c9:18:bd:9b:a4:00:60:7c:29:dd:e8:d3:ed:5b:ef:5d:
75:11:51:97:98:eb:22:43:02:ba:33:a1:b6:96:f1:a2:7c:b8:
b3:99:c2:ae:30:f5:bd:21:52:c3:a1:11:c7:e7:e3:00:85:83:
5a:b0:f7:95:04:eb:07:ff:60:f9:4d:68:94:3d:71:51:9a:b6:
e5:2f:97:f0:d4:33:f2:ee:a9:0f:86:19:cf:c9:4c:97:43:6c:
b5:75:f5:75:6f:dd:fe:04:e0:b0:44:7c:e5:11:fd:4a:01:48:
38:bd:8e:1c:5f:fe:2c:ee:a8:30:86:fc:78:ce:e1:fb:8d:9e:
02:65:94:b3:79:08:e6:e1:5e:ad:ab:45:a3:9e:8c:84:55:cb:
13:bc:af:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+yLD7xfzAPoqdCizy9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx
OTNlNjgwHhcNMjUwMTMxMTYwMDQ5WhcNMjUwMjAxMTYwMDQ5WjAzMTEwLwYDVQQD
EygyZjU5MjZjODRiNDk1ZGFhMzExZGZjYjYwNzIwNTFjMDNiYzczMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMhM9ZZNlF29fk770cJxM05t1anG
nv1GnCi6ORPK1keqz5zn1w4nEGzRRhKw8VBllwDNPaqc7lqNb0m9KOsOKT1/I0l0
0vTTB4QB7yJOlEaFb1FIgHEo1lKYiQ+E6T9Uan6DbRNkdMvJzi4Ap01MzJ6qrblX
Fi8ihPcDG+GauJhNcrx7vZkDeyi/O6Pn8TWUneMAN+yzk1EunZBQ2zq6GqQm0hFD
gpsQHAB7Fj58zuRTXSooB3oWeOXWzACF30ZV9dZj4IPZt/sROzrZ+eeZBWp8Fov7
UZQAwC/2w+3Rdxei0AiQE3ySQr3kJQV5XHln+qHGHeOocj2Ry2fyqt/ntwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9ZJshLSV2qMR38tgcgUcA7xzHsMB8GA1UdIwQY
MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt
ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5
LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDYeXj5h
I88sWhBLVpMMlhhZi8mem6X134kKsoB1TZyQ1SB+ErZ5bekhVqDfNQSI8pxNuJgn
JF39OQYcGjPPxv+6fYrFMoA8taf09RypbIAIzAxTGuRlUit4IpH1Icfi7fnEFWzj
8Je0yRfL+0XJGL2bpABgfCnd6NPtW+9ddRFRl5jrIkMCujOhtpbxony4s5nCrjD1
vSFSw6ERx+fjAIWDWrD3lQTrB/9g+U1olD1xUZq25S+X8NQz8u6pD4YZz8lMl0Ns
tXX1dW/d/gTgsER85RH9SgFIOL2OHF/+LO6oMIb8eM7h+42eAmWUs3kI5uFeratF
o56MhFXLE7yv9A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:54 2025 by rpki-client