Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: fsmIHu915YCKFqSdslnpBntzNPeZvKaExbrDPgDsj/k=
Subject key identifier: 2C:9D:2D:1D:0C:71:EF:75:A8:E7:36:BE:BE:54:18:4D:FA:71:CA:6D
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 0194BC3BE66D5628BBD7F232ED1F51B4D1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 13E3
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: DaEQEM5a835LkFf7788A1OAMoXbXfo1qIgA2uPVEaiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:6d:56:28:bb:d7:f2:32:ed:1f:51:b4:d1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=2c9d2d1d0c71ef75a8e736bebe54184dfa71ca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:d4:51:6f:97:8e:5d:5d:08:5f:17:28:62:
68:d5:63:41:48:91:05:f3:1b:99:21:2e:48:90:a4:
c2:38:f1:e5:1b:1f:98:b0:3f:0c:9c:47:86:23:a1:
13:25:64:a0:5a:90:35:77:10:31:f6:cb:24:fb:ca:
49:d5:ea:45:ae:75:ee:80:0d:1e:19:94:10:d3:89:
d6:60:2e:bf:aa:dd:46:07:58:0e:40:93:35:fb:36:
4f:2b:b6:c3:ad:b4:99:43:a5:5b:66:1c:ac:41:c8:
d4:65:24:5b:2e:f7:f8:19:d6:4c:79:a2:80:e6:45:
81:d4:a1:cd:40:43:94:95:57:5b:dc:87:75:37:8f:
df:99:a3:ed:71:f0:fe:fc:91:31:f8:5a:7c:e3:bb:
a2:4d:88:87:e5:ea:27:4d:9a:80:71:15:7c:fb:a3:
3f:96:52:b3:8e:a7:99:89:59:d0:0c:d9:21:73:d8:
16:6c:b7:cf:f0:b3:95:35:8f:3a:b1:f3:2c:c6:b2:
72:12:85:fb:37:61:14:01:eb:35:59:7e:5b:8d:f2:
ac:e9:bc:a4:b2:e9:e6:06:25:7d:d5:d0:c7:0e:a3:
cb:84:a3:ef:bf:ba:3f:5d:75:16:7d:11:bb:b0:e9:
c1:5e:c3:52:4b:89:5e:47:43:48:a5:0d:da:55:55:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:2D:1D:0C:71:EF:75:A8:E7:36:BE:BE:54:18:4D:FA:71:CA:6D
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:10:53:35:01:85:66:4f:5c:5d:7a:7c:8a:17:88:9c:98:08:
3c:e7:f6:35:36:8c:bb:a0:d0:98:83:e5:61:aa:c7:d8:3d:94:
58:d1:38:65:b5:b5:24:fa:47:7c:43:80:11:16:ee:40:0c:9c:
49:d1:95:79:33:8c:23:07:7d:a1:46:70:1a:fd:55:bb:8d:6a:
f4:ff:1d:8d:56:77:f5:48:42:0c:6f:d0:78:63:b3:63:be:c8:
76:3d:d0:1e:cf:48:77:cd:dd:86:79:3c:57:bf:19:30:46:90:
02:e1:f7:9b:b9:3c:2b:44:c5:50:29:93:13:da:76:ea:dc:a3:
3a:b4:6a:e1:5a:f4:49:0c:06:7c:21:88:d6:ff:36:52:1b:e2:
ab:e8:7e:9d:b4:20:a7:f6:3f:d1:4a:e4:b0:80:72:f3:5e:d7:
f3:c3:d7:2b:21:bd:3c:99:bb:fa:50:a6:b8:89:a1:8e:86:05:
01:63:d0:7e:65:24:78:88:5b:da:0b:39:d0:0d:22:be:06:43:
0a:a9:ed:94:5e:8c:a7:e4:29:5d:96:67:a1:6b:98:d5:25:72:
f8:38:5a:87:2c:d7:fa:75:aa:78:f9:fe:0d:51:80:8d:36:be:
29:30:a9:9f:81:b9:9c:a3:62:65:6e:f3:32:98:2e:9f:54:34:
f1:07:2f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+ZtVii71/Iy7R9RtNGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzdmOTU2YTRjZTk0ZWIxZWM2NGU3NjQ3YjQzY2RiY2I4
ZmM0NDkwHhcNMjUwMTMxMTIwMDI5WhcNMjUwMjAxMTIwMDI5WjAzMTEwLwYDVQQD
EygyYzlkMmQxZDBjNzFlZjc1YThlNzM2YmViZTU0MTg0ZGZhNzFjYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6bUUW+Xjl1dCF8XKGJo1WNBSJEF
8xuZIS5IkKTCOPHlGx+YsD8MnEeGI6ETJWSgWpA1dxAx9ssk+8pJ1epFrnXugA0e
GZQQ04nWYC6/qt1GB1gOQJM1+zZPK7bDrbSZQ6VbZhysQcjUZSRbLvf4GdZMeaKA
5kWB1KHNQEOUlVdb3Id1N4/fmaPtcfD+/JEx+Fp847uiTYiH5eonTZqAcRV8+6M/
llKzjqeZiVnQDNkhc9gWbLfP8LOVNY86sfMsxrJyEoX7N2EUAes1WX5bjfKs6byk
sunmBiV91dDHDqPLhKPvv7o/XXUWfRG7sOnBXsNSS4leR0NIpQ3aVVXAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCydLR0Mce91qOc2vr5UGE36ccptMB8GA1UdIwQY
MBaAFM03+VakzpTrHsZOdke0PNvLj8RJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yOTQzYzEtMzZiNi00MzAzLWJjMjct
YmJlMTJiZDM4ZTA0LzEvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yOTQzYzEtMzZiNi00MzAzLWJjMjctYmJlMTJiZDM4ZTA0
LzEvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRBTNQGF
Zk9cXXp8iheInJgIPOf2NTaMu6DQmIPlYarH2D2UWNE4ZbW1JPpHfEOAERbuQAyc
SdGVeTOMIwd9oUZwGv1Vu41q9P8djVZ39UhCDG/QeGOzY77Idj3QHs9Id83dhnk8
V78ZMEaQAuH3m7k8K0TFUCmTE9p26tyjOrRq4Vr0SQwGfCGI1v82Uhviq+h+nbQg
p/Y/0UrksIBy817X88PXKyG9PJm7+lCmuImhjoYFAWPQfmUkeIhb2gs50A0ivgZD
CqntlF6Mp+QpXZZnoWuY1SVy+DhahyzX+nWqePn+DVGAjTa+KTCpn4G5nKNiZW7z
Mpgun1Q08QcvdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:40 2025 by rpki-client