Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
File: Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft (raw, json)
Hash identifier: 447WCjE91mqdyLiRqz1DvJfAcwUOStweJ/EHQ6OebHo=
Subject key identifier: F6:2C:3E:22:E3:94:58:25:A8:DC:3F:1E:51:D3:5F:DA:97:66:32:9B
Authority key identifier: 66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
Certificate issuer: /CN=6676dff61a8305675977e86f52eee6745d6428f4
Certificate serial: 0194BC04E2023DF07320807C3BCF761D3126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: Znbf9hqDBWdZd-hvUu7mdF1kKPQ.crl (hash: CbwkkhlWBQ/Vc+GQZoUFXkjHoTrutASW22nI4V/XIGg=)
2: w4RtskuHRknczZMIgEOayAnx-bw.roa (hash: Gao/WvW+wIEEG5my4KsRa6yF/N6hpufS64G6NkhyzQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e2:02:3d:f0:73:20:80:7c:3b:cf:76:1d:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6676dff61a8305675977e86f52eee6745d6428f4
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=f62c3e22e3945825a8dc3f1e51d35fda9766329b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:d9:94:7e:4a:a6:04:cf:2a:22:ce:67:48:
a1:07:b2:a9:0c:09:fe:12:68:e5:99:ac:eb:0b:80:
58:a4:77:22:38:2e:a4:86:5b:77:0f:e5:64:a6:d3:
92:48:41:6c:e2:ad:76:23:5e:78:fd:57:9b:cc:23:
d5:7b:c0:a4:ba:45:f6:14:97:84:c4:d8:db:f6:d1:
a8:21:48:fd:9e:55:55:d2:2a:ed:b4:1f:34:53:ff:
31:d9:b4:85:b9:c5:4e:59:95:a7:1d:ac:0e:6d:8d:
44:ff:3a:c3:cf:47:9e:5b:99:b5:20:e8:69:6e:bf:
f5:0b:f5:f0:80:69:17:3e:cc:f2:49:be:57:0d:31:
39:1b:37:9b:60:cc:8b:38:3f:3b:6b:66:ec:86:0b:
30:84:5d:39:89:39:3e:6a:92:77:70:77:10:f4:25:
c9:65:fb:ff:a3:82:77:c6:ef:f5:4c:90:8d:53:c8:
89:16:58:67:bd:5a:46:0d:00:d8:97:34:0e:31:30:
5f:70:57:0c:2c:88:d7:5f:91:b1:b0:46:03:15:3e:
83:a2:54:5c:34:4b:aa:c0:63:04:63:8b:25:8e:ee:
1d:75:9d:88:8c:27:96:d9:3c:a9:03:5a:5b:c2:09:
a7:05:4f:e3:44:75:60:98:9b:7d:ca:b8:73:9a:13:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2C:3E:22:E3:94:58:25:A8:DC:3F:1E:51:D3:5F:DA:97:66:32:9B
X509v3 Authority Key Identifier:
keyid:66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:f5:ad:f6:4e:55:04:f2:02:c1:94:33:44:4f:fe:c4:5e:
61:c9:b1:2b:fa:0a:4f:a1:c9:f9:6f:ae:91:e4:07:87:00:08:
30:20:c4:3e:5e:8d:31:33:3d:0e:8f:f4:d9:60:14:98:9c:cf:
94:7f:5a:9b:48:3d:07:1b:0f:41:4f:71:f5:c9:ab:4d:2b:b4:
30:ae:c2:76:a0:90:1c:20:4c:14:ac:a4:b5:9c:48:af:ad:30:
a2:96:82:a2:9d:73:c6:25:b5:22:be:e4:70:30:cf:b4:b9:31:
32:0d:c5:20:ba:48:dd:ef:9e:41:4f:56:8f:4a:47:c7:bc:52:
ef:a0:ab:99:fd:ca:56:98:1a:df:89:ba:bb:9d:88:b4:79:35:
62:88:99:c9:ee:31:b8:d7:e3:62:4b:5d:6d:25:fd:0d:e5:75:
2d:db:5c:9c:4b:a2:b0:a7:92:45:65:18:8a:e0:71:4b:2a:a0:
29:0e:83:8a:4f:21:54:60:3e:90:b9:09:3d:a8:9f:17:49:38:
16:27:ff:4e:72:52:ac:1a:3d:28:b1:19:ba:c2:d1:78:c9:b0:
89:c2:cd:14:de:f0:47:61:f5:97:89:3c:8d:11:a5:f6:8f:43:
d4:e8:ff:13:c2:5f:13:d0:01:10:c7:88:da:b3:fa:2b:73:d5:
67:16:8a:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOICPfBzIIB8O892HTEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzZkZmY2MWE4MzA1Njc1OTc3ZTg2ZjUyZWVlNjc0NWQ2
NDI4ZjQwHhcNMjUwMTMxMTEwMDI0WhcNMjUwMjAxMTEwMDI0WjAzMTEwLwYDVQQD
EyhmNjJjM2UyMmUzOTQ1ODI1YThkYzNmMWU1MWQzNWZkYTk3NjYzMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVTZlH5KpgTPKiLOZ0ihB7KpDAn+
EmjlmazrC4BYpHciOC6khlt3D+VkptOSSEFs4q12I154/VebzCPVe8CkukX2FJeE
xNjb9tGoIUj9nlVV0irttB80U/8x2bSFucVOWZWnHawObY1E/zrDz0eeW5m1IOhp
br/1C/XwgGkXPszySb5XDTE5GzebYMyLOD87a2bshgswhF05iTk+apJ3cHcQ9CXJ
Zfv/o4J3xu/1TJCNU8iJFlhnvVpGDQDYlzQOMTBfcFcMLIjXX5GxsEYDFT6DolRc
NEuqwGMEY4slju4ddZ2IjCeW2TypA1pbwgmnBU/jRHVgmJt9yrhzmhPJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYsPiLjlFglqNw/HlHTX9qXZjKbMB8GA1UdIwQY
MBaAFGZ23/YagwVnWXfob1Lu5nRdZCj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5iZjlocURCV2RaZC1odlV1N21kRjFrS1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82Y2IyM2UtN2M2NS00NmIzLTliNmQt
N2M2NjM1ZGE4OTJkLzEvWm5iZjlocURCV2RaZC1odlV1N21kRjFrS1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82Y2IyM2UtN2M2NS00NmIzLTliNmQtN2M2NjM1ZGE4OTJk
LzEvWm5iZjlocURCV2RaZC1odlV1N21kRjFrS1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYz1rfZO
VQTyAsGUM0RP/sReYcmxK/oKT6HJ+W+ukeQHhwAIMCDEPl6NMTM9Do/02WAUmJzP
lH9am0g9BxsPQU9x9cmrTSu0MK7CdqCQHCBMFKyktZxIr60wopaCop1zxiW1Ir7k
cDDPtLkxMg3FILpI3e+eQU9Wj0pHx7xS76Crmf3KVpga34m6u52ItHk1YoiZye4x
uNfjYktdbSX9DeV1LdtcnEuisKeSRWUYiuBxSyqgKQ6Dik8hVGA+kLkJPaifF0k4
Fif/TnJSrBo9KLEZusLReMmwicLNFN7wR2H1l4k8jRGl9o9D1Oj/E8JfE9ABEMeI
2rP6K3PVZxaKpQ==
-----END CERTIFICATE-----
Generated at Thu May 1 07:19:13 2025 by rpki-client