Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: sVLwezwslI49W7s6r2lxDb3QiqzIApsjM2LVxqtrwcE=
Subject key identifier: 73:46:D3:75:DA:19:89:30:45:02:97:87:2C:07:59:08:45:D0:0C:5A
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 0194BD8555FD88AC7B79FB262A016EA991C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: mgZktqdAD6wca1BkVHLBYFaI8dTcvCiD6XlA+wGZwBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:fd:88:ac:7b:79:fb:26:2a:01:6e:a9:91:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=7346d375da198930450297872c07590845d00c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:15:73:a6:8b:59:72:d9:f6:c9:d5:cd:8a:
02:bf:39:83:20:52:a1:2e:ca:5a:f1:0b:d7:9f:fd:
5d:84:0b:21:29:e3:50:85:c2:6a:6b:62:08:5b:ca:
09:e6:e1:2d:65:f4:25:57:c7:69:13:74:dc:d5:63:
8b:ee:aa:53:44:46:69:58:f4:51:2b:12:aa:92:4e:
99:6a:86:29:3a:e3:1c:d2:26:85:37:96:ab:bc:f7:
4e:af:75:8b:da:fa:35:28:af:52:fd:57:30:ae:ce:
4b:62:93:5b:3f:3f:4f:26:67:eb:c8:29:22:f2:51:
d1:b6:67:32:89:41:11:87:a7:cd:17:5a:04:08:6a:
0d:79:b9:57:46:f8:39:5d:ab:f8:ad:a8:1e:da:51:
92:4c:59:35:62:73:bf:1a:db:3b:65:ad:ea:00:f7:
95:09:d8:3f:cc:79:0f:43:87:96:82:a7:4d:49:02:
98:61:b3:43:93:50:1d:be:19:9e:27:b0:ff:df:e2:
95:6b:c2:1e:9a:4a:10:76:c7:0c:88:b9:96:09:d5:
ab:c4:d3:3c:51:aa:64:c2:94:7f:81:b7:c8:9b:90:
cb:ef:fc:6d:fa:81:b7:76:0a:fb:b8:50:45:21:81:
47:64:cf:dd:b8:9b:8e:3e:b7:fe:12:2d:78:10:a6:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:46:D3:75:DA:19:89:30:45:02:97:87:2C:07:59:08:45:D0:0C:5A
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:92:bd:5b:89:2a:d8:80:f2:84:44:58:36:73:da:d6:27:
b2:45:7a:ad:2c:01:b2:8e:a7:e9:47:1f:0d:32:cd:3d:69:6a:
37:ff:07:35:78:ba:c9:cb:5d:7f:34:41:a2:25:97:53:0d:9c:
b4:17:39:9f:e8:e3:d1:89:73:12:25:76:15:cf:bf:84:5c:ed:
ea:e4:1e:f2:26:39:9b:8d:9a:9b:dc:7c:a4:2d:e4:2b:bb:16:
d0:cd:65:f4:d4:68:78:88:01:17:00:30:52:32:1c:c8:ba:ad:
0b:98:42:1a:cc:64:1f:97:e2:f4:1d:e1:8f:f9:f8:68:21:61:
92:a2:35:1a:a7:46:db:40:3c:8c:2f:29:f0:f5:39:9f:0a:47:
ef:66:7c:3e:77:e4:eb:f1:94:d2:f5:c8:49:bf:10:2c:ed:ef:
bd:88:37:3d:9f:97:f2:37:e4:d4:15:cd:52:9c:65:28:3b:99:
99:3a:e6:cc:f1:32:ea:c6:1f:fb:a2:56:ca:68:a9:ed:dc:7d:
b4:b6:8d:db:f5:da:37:a3:bc:0a:47:05:55:d1:cb:c6:54:4a:
6e:55:39:f9:d2:df:90:de:ec:d0:2e:2b:85:d1:5f:b9:ec:2f:
42:fe:30:7d:fe:af:d5:47:d5:a2:ed:0b:01:a0:3d:e5:96:ff:
e8:0c:a6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVX9iKx7efsmKgFuqZHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm
ZDg1NWIwHhcNMjUwMTMxMTgwMDE5WhcNMjUwMjAxMTgwMDE5WjAzMTEwLwYDVQQD
Eyg3MzQ2ZDM3NWRhMTk4OTMwNDUwMjk3ODcyYzA3NTkwODQ1ZDAwYzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljIVc6aLWXLZ9snVzYoCvzmDIFKh
Lspa8QvXn/1dhAshKeNQhcJqa2IIW8oJ5uEtZfQlV8dpE3Tc1WOL7qpTREZpWPRR
KxKqkk6ZaoYpOuMc0iaFN5arvPdOr3WL2vo1KK9S/Vcwrs5LYpNbPz9PJmfryCki
8lHRtmcyiUERh6fNF1oECGoNeblXRvg5Xav4rage2lGSTFk1YnO/Gts7Za3qAPeV
Cdg/zHkPQ4eWgqdNSQKYYbNDk1AdvhmeJ7D/3+KVa8IemkoQdscMiLmWCdWrxNM8
UapkwpR/gbfIm5DL7/xt+oG3dgr7uFBFIYFHZM/duJuOPrf+Ei14EKb7/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNG03XaGYkwRQKXhywHWQhF0AxaMB8GA1UdIwQY
MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt
NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew
LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1iSvVuJ
KtiA8oREWDZz2tYnskV6rSwBso6n6UcfDTLNPWlqN/8HNXi6yctdfzRBoiWXUw2c
tBc5n+jj0YlzEiV2Fc+/hFzt6uQe8iY5m42am9x8pC3kK7sW0M1l9NRoeIgBFwAw
UjIcyLqtC5hCGsxkH5fi9B3hj/n4aCFhkqI1GqdG20A8jC8p8PU5nwpH72Z8Pnfk
6/GU0vXISb8QLO3vvYg3PZ+X8jfk1BXNUpxlKDuZmTrmzPEy6sYf+6JWymip7dx9
tLaN2/XaN6O8CkcFVdHLxlRKblU5+dLfkN7s0C4rhdFfuewvQv4wff6v1UfVou0L
AaA95Zb/6AymTg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:13 2025 by rpki-client