Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: T0WZGODXEck/WimP+y50j8e8qD4WLKGzvbOsksI9b4Q=
Subject key identifier: DC:00:B2:A1:EF:2D:9C:69:04:38:2A:71:4D:41:39:2D:09:C5:1B:6C
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0194BC7334E9A809F7C7800378081279AF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 7B
Signing time: Fri 31 Jan 2025 13:00:54 +0000
Manifest this update: Fri 31 Jan 2025 13:00:54 +0000
Manifest next update: Sat 01 Feb 2025 13:00:54 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: CUdrpbWgWqRMhADQtCPcKGZpA3fiTELiDa7MjyQesM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:34:e9:a8:09:f7:c7:80:03:78:08:12:79:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Jan 31 13:00:54 2025 GMT
Not After : Feb 1 13:00:54 2025 GMT
Subject: CN=dc00b2a1ef2d9c6904382a714d41392d09c51b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:70:11:d3:95:44:d2:92:e0:f8:e4:99:0c:
fc:14:34:41:5e:f7:02:39:18:f8:0b:3a:c9:dd:d4:
03:76:6b:57:f2:de:e7:b5:9a:1c:be:2b:68:cd:f2:
96:82:50:b9:5a:dc:d8:e8:b6:85:9e:72:8b:dc:a9:
db:a9:88:47:39:ee:f6:04:d9:21:49:f1:0b:71:5f:
af:fb:f7:fe:84:d2:8a:81:f7:6e:92:7f:ab:62:95:
49:e5:5c:d1:dd:43:06:7f:a2:5e:9e:c2:cf:30:ca:
46:2e:66:99:97:61:30:1d:e2:23:a7:58:4d:39:20:
02:0c:33:f6:b9:fd:d5:a8:b5:00:d4:7a:80:17:7b:
08:93:96:d1:86:d1:ec:fe:b4:d9:68:93:22:c2:5e:
94:f4:e8:b2:79:88:e8:f0:9f:10:0d:07:77:38:5b:
5d:10:7a:1f:5b:23:7c:5b:8a:8b:ad:c5:48:ea:37:
ec:27:51:61:d1:30:5c:92:f3:18:8a:de:bd:e1:a7:
c3:cb:83:dc:56:c5:81:77:4f:ea:1b:09:2b:6e:18:
1d:28:e9:66:c6:8b:23:a2:17:54:69:dd:d4:f6:ce:
38:5b:86:d6:9d:11:32:e3:78:e9:bc:0e:61:ea:2b:
0e:f6:39:e9:2f:fd:32:30:3d:0d:77:b3:7e:3a:60:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:00:B2:A1:EF:2D:9C:69:04:38:2A:71:4D:41:39:2D:09:C5:1B:6C
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:11:a5:57:db:c1:4f:ab:50:c5:e0:90:1a:8f:4c:c2:21:b5:
11:19:45:79:81:8e:f7:15:63:65:e1:10:24:ca:dc:30:ca:04:
28:fa:fe:07:99:42:17:5a:44:b7:31:ec:6e:1f:bf:94:c8:e3:
c7:b2:01:d8:da:5f:26:09:88:c8:d4:21:0b:e1:15:8e:21:21:
a8:0b:d2:47:fa:ed:4a:bb:ad:19:7d:dd:2e:6a:1e:7c:ae:bc:
3e:0a:6d:84:2e:07:de:90:55:d0:a8:f7:40:a2:e3:3f:b7:60:
d9:92:b8:a0:ec:9c:e8:da:62:66:1a:cf:d3:ed:16:aa:9a:7f:
07:ae:ec:3b:f5:73:27:5d:cf:39:a6:80:45:b0:08:25:eb:00:
06:7f:dd:f6:e7:73:c3:ad:2d:52:b4:29:48:3a:cd:3e:8a:46:
5f:4d:ba:51:a1:d3:a5:b0:72:55:1e:22:c0:86:77:8c:2a:12:
58:32:f7:67:26:27:7b:f8:54:e9:92:c5:28:fb:4f:e5:83:0e:
cf:32:cf:29:6b:bc:b5:3a:01:7b:39:b0:56:46:e5:5f:a6:3c:
0b:82:a2:29:8b:68:0c:00:cf:27:a5:2b:a1:c0:6f:05:4b:70:
16:b7:bd:d3:5b:e3:92:07:95:17:9b:85:01:32:11:c4:c6:a5:
40:48:3e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8czTpqAn3x4ADeAgSea9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5
ZTcwZjIwHhcNMjUwMTMxMTMwMDU0WhcNMjUwMjAxMTMwMDU0WjAzMTEwLwYDVQQD
EyhkYzAwYjJhMWVmMmQ5YzY5MDQzODJhNzE0ZDQxMzkyZDA5YzUxYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8RwEdOVRNKS4PjkmQz8FDRBXvcC
ORj4CzrJ3dQDdmtX8t7ntZocvitozfKWglC5WtzY6LaFnnKL3KnbqYhHOe72BNkh
SfELcV+v+/f+hNKKgfdukn+rYpVJ5VzR3UMGf6JensLPMMpGLmaZl2EwHeIjp1hN
OSACDDP2uf3VqLUA1HqAF3sIk5bRhtHs/rTZaJMiwl6U9OiyeYjo8J8QDQd3OFtd
EHofWyN8W4qLrcVI6jfsJ1Fh0TBckvMYit694afDy4PcVsWBd0/qGwkrbhgdKOlm
xosjohdUad3U9s44W4bWnREy43jpvA5h6isO9jnpL/0yMD0Nd7N+OmBrsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwAsqHvLZxpBDgqcU1BOS0JxRtsMB8GA1UdIwQY
MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt
NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj
LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBGlV9vB
T6tQxeCQGo9MwiG1ERlFeYGO9xVjZeEQJMrcMMoEKPr+B5lCF1pEtzHsbh+/lMjj
x7IB2NpfJgmIyNQhC+EVjiEhqAvSR/rtSrutGX3dLmoefK68PgpthC4H3pBV0Kj3
QKLjP7dg2ZK4oOyc6NpiZhrP0+0Wqpp/B67sO/VzJ13POaaARbAIJesABn/d9udz
w60tUrQpSDrNPopGX026UaHTpbByVR4iwIZ3jCoSWDL3ZyYne/hU6ZLFKPtP5YMO
zzLPKWu8tToBezmwVkblX6Y8C4KiKYtoDADPJ6UrocBvBUtwFre901vjkgeVF5uF
ATIRxMalQEg+SQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:31:42 2025 by rpki-client