Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: IsziLr8UsnAygP4A0L/MJXifld8jXlmM9UhK8KvQ/AQ=
Subject key identifier: D2:DE:EE:D9:0C:7D:EC:49:0B:F0:95:DF:2C:11:F5:F8:8C:79:9C:BC
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 0194BD85868E2F7FD52B475BCA203DA9ABA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: Ub2zLNgfXWcl/ciGBQaqvYmQe1t1IeZYg+F7xIuoDJ4=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:8e:2f:7f:d5:2b:47:5b:ca:20:3d:a9:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=d2deeed90c7dec490bf095df2c11f5f88c799cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b6:f4:74:ce:af:3d:20:94:2d:74:09:18:35:
2b:f6:38:e4:ab:7e:65:c8:4b:4a:c4:61:16:ad:12:
73:61:9b:af:c2:47:2c:bc:78:8d:1d:2b:94:7a:93:
f1:64:46:df:28:5b:03:fd:57:ae:e7:f5:3c:2f:73:
3a:88:8f:bb:9d:6f:23:6d:a1:ca:63:16:30:e9:b9:
ff:ec:36:7d:21:1d:ed:0d:3e:09:74:c5:7d:99:f5:
6f:a8:2e:c7:c3:3a:0c:87:72:b2:23:77:ac:e5:40:
a8:32:94:14:02:c8:db:d6:31:d8:78:10:74:8f:8c:
fb:8c:e5:10:a9:21:db:b0:1b:9f:51:9f:71:91:34:
2f:84:38:a5:ab:bb:ab:1f:14:87:85:b6:81:0a:1e:
75:51:6b:15:98:d5:70:92:e8:1f:84:94:b6:f5:16:
92:ec:92:20:e0:66:df:1d:3a:8a:79:01:dd:2c:ab:
d6:db:ca:5b:8a:86:4f:34:55:18:fc:25:6b:7c:be:
30:44:ec:e8:59:d4:49:36:2b:87:bb:de:c7:7a:ca:
ed:ce:c3:f3:42:22:3b:b8:7c:fb:d2:02:59:c6:be:
f0:c1:a5:65:2f:d1:c7:bc:f5:d9:bc:70:dc:20:57:
64:58:69:e4:aa:5e:ed:1f:2b:9f:11:7a:5d:b1:a1:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:EE:D9:0C:7D:EC:49:0B:F0:95:DF:2C:11:F5:F8:8C:79:9C:BC
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d8:d3:37:de:94:09:af:9a:44:ee:91:1a:20:0b:2a:41:86:
c1:d3:30:ff:2d:0a:cd:18:e4:04:39:b7:9f:da:43:4e:64:11:
14:42:14:10:02:67:0e:be:52:7d:63:19:67:32:4d:39:39:6c:
ce:dc:7a:12:00:e4:a2:c2:fe:6b:36:8b:cd:b3:1b:54:7f:b4:
93:32:53:49:b3:e7:c9:dd:75:4b:f9:89:9a:db:a0:20:59:93:
93:89:83:62:42:97:fc:86:c0:f6:7e:a8:25:c8:cf:1c:bb:72:
49:65:40:14:1a:2c:a3:c9:aa:f3:6f:b5:57:80:4e:a5:05:63:
6e:6c:db:0f:5b:76:ad:09:57:be:21:38:39:a7:57:83:38:03:
4d:79:f6:55:d8:07:b4:d0:f5:ef:0d:dd:b0:4b:ab:64:d0:6a:
05:71:94:12:e1:fa:08:b0:84:bc:49:b1:64:36:b9:34:c4:39:
47:9d:7f:8f:90:d1:1f:18:69:99:11:47:ac:52:ed:69:49:55:
6b:de:d0:e3:fa:22:b5:45:7b:3f:c7:ec:c9:30:41:b8:4d:5c:
6f:a7:20:8b:08:d8:2e:ff:16:00:0f:a3:d1:92:49:7c:dd:00:
f7:12:64:be:7e:aa:17:e3:e1:23:26:4c:c3:7e:ca:b3:7d:cc:
20:af:66:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYaOL3/VK0dbyiA9qaupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk
NmE2ZWIwHhcNMjUwMTMxMTgwMDMyWhcNMjUwMjAxMTgwMDMyWjAzMTEwLwYDVQQD
EyhkMmRlZWVkOTBjN2RlYzQ5MGJmMDk1ZGYyYzExZjVmODhjNzk5Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Lb0dM6vPSCULXQJGDUr9jjkq35l
yEtKxGEWrRJzYZuvwkcsvHiNHSuUepPxZEbfKFsD/Veu5/U8L3M6iI+7nW8jbaHK
YxYw6bn/7DZ9IR3tDT4JdMV9mfVvqC7HwzoMh3KyI3es5UCoMpQUAsjb1jHYeBB0
j4z7jOUQqSHbsBufUZ9xkTQvhDilq7urHxSHhbaBCh51UWsVmNVwkugfhJS29RaS
7JIg4GbfHTqKeQHdLKvW28pbioZPNFUY/CVrfL4wROzoWdRJNiuHu97HesrtzsPz
QiI7uHz70gJZxr7wwaVlL9HHvPXZvHDcIFdkWGnkql7tHyufEXpdsaG56QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLe7tkMfexJC/CV3ywR9fiMeZy8MB8GA1UdIwQY
MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt
ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy
LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9jTN96U
Ca+aRO6RGiALKkGGwdMw/y0KzRjkBDm3n9pDTmQRFEIUEAJnDr5SfWMZZzJNOTls
ztx6EgDkosL+azaLzbMbVH+0kzJTSbPnyd11S/mJmtugIFmTk4mDYkKX/IbA9n6o
JcjPHLtySWVAFBoso8mq82+1V4BOpQVjbmzbD1t2rQlXviE4OadXgzgDTXn2VdgH
tND17w3dsEurZNBqBXGUEuH6CLCEvEmxZDa5NMQ5R51/j5DRHxhpmRFHrFLtaUlV
a97Q4/oitUV7P8fsyTBBuE1cb6cgiwjYLv8WAA+j0ZJJfN0A9xJkvn6qF+PhIyZM
w37Ks33MIK9mlw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:19 2025 by rpki-client