Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: UhBKJtFZ1wx2jyGp1YaKUp0/fDFDtMIigjpqakDO7s0=
Subject key identifier: C6:BD:C1:7B:4D:EE:2F:84:7A:C7:1C:7A:42:1F:55:CA:58:00:9A:9F
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 0194BCA9751D3BDB3E2B8FAF86AE6A07BB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 11AF
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: p8JJT0NeI64T/fyVGtKZcMlvUohsMQVVwjihaa9dGi0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:1d:3b:db:3e:2b:8f:af:86:ae:6a:07:bb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=c6bdc17b4dee2f847ac71c7a421f55ca58009a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:27:48:e4:f2:f2:dc:f5:06:22:b6:cf:38:
8f:ad:6b:5f:64:3a:c6:87:68:1a:8f:09:45:17:0f:
99:0d:5a:5d:bf:fc:ec:c4:8f:8f:06:a7:e4:01:3a:
1a:a8:12:31:a8:64:1e:db:d4:ec:ef:49:2e:34:99:
77:28:c8:5f:4e:3a:59:82:fa:3b:1b:89:95:3e:fa:
2f:85:31:05:72:79:2c:92:95:34:52:b8:d3:c8:2b:
e2:d9:79:2d:d3:e5:8d:ef:e7:cc:cd:09:c1:44:d6:
ef:ff:2b:0a:ed:2d:77:f4:8f:80:4c:6d:e2:fe:64:
9f:e4:06:db:14:ea:73:a8:88:0a:73:27:48:22:97:
10:21:db:b8:88:ce:fc:e3:19:18:31:3b:3b:b6:57:
67:53:9e:96:48:7d:cf:1f:38:76:a5:65:a5:62:be:
e6:bf:a0:8c:10:8c:37:d4:72:38:78:dc:17:63:12:
38:c9:0a:fb:12:1a:d3:3c:34:cc:aa:81:2a:ad:1e:
a2:f9:a1:1d:26:49:7e:a5:73:73:0a:e9:27:09:d0:
59:9c:4c:d7:4e:ff:0e:f9:15:d8:5d:fe:9b:4f:b2:
56:25:b0:1a:78:6f:3b:f5:3b:5e:97:bb:db:ab:bf:
b4:1b:c9:8b:6c:03:e6:76:32:43:58:cb:fc:ca:2d:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BD:C1:7B:4D:EE:2F:84:7A:C7:1C:7A:42:1F:55:CA:58:00:9A:9F
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:98:b6:9b:02:06:3a:61:fd:e7:87:84:09:bd:1e:ea:91:7f:
2d:bd:f6:41:9f:4a:0f:7f:b9:cf:2e:a1:24:d8:d6:48:87:f1:
e1:f9:c2:83:db:00:9d:2e:41:48:8f:dd:06:1c:3d:46:fd:ec:
bf:ca:5d:eb:9a:07:38:37:d4:92:32:bf:dd:70:5c:ce:ba:13:
c2:57:e2:99:d7:ae:47:f9:d6:d0:92:b6:13:43:a7:07:e8:5f:
a8:37:04:d8:5a:07:65:8a:3c:56:07:17:9c:fb:ce:08:68:90:
b0:b9:d7:ab:16:c0:71:cf:db:08:5e:06:92:55:69:38:02:44:
ea:07:0b:b6:84:10:c6:14:f0:6b:62:67:35:68:4b:c9:85:35:
86:a5:98:57:ad:95:b2:ec:83:cd:d7:ab:0a:da:e4:ef:c7:56:
07:9e:54:4a:81:f3:4f:b7:3a:ac:d8:96:c1:64:75:17:df:d9:
45:36:0f:e7:e2:3a:39:ca:b4:e9:fe:8f:b2:01:39:60:f7:ab:
77:92:4e:c6:54:a4:34:4c:3b:da:23:32:27:a3:bc:7d:bd:ef:
98:e0:4b:ac:4b:81:5b:45:79:57:8b:74:a4:a6:48:c5:8c:cd:
bc:5a:f2:bd:d3:0e:48:a9:63:0e:34:9d:de:06:0e:52:5f:cf:
4b:2e:9b:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXUdO9s+K4+vhq5qB7sYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTNiZTg0NzE4ZjU1MWMyNDE0NzdmMjJhMDQxYzczNGVi
OTdkYzUwHhcNMjUwMTMxMTQwMDA5WhcNMjUwMjAxMTQwMDA5WjAzMTEwLwYDVQQD
EyhjNmJkYzE3YjRkZWUyZjg0N2FjNzFjN2E0MjFmNTVjYTU4MDA5YTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk98nSOTy8tz1BiK2zziPrWtfZDrG
h2gajwlFFw+ZDVpdv/zsxI+PBqfkAToaqBIxqGQe29Ts70kuNJl3KMhfTjpZgvo7
G4mVPvovhTEFcnkskpU0UrjTyCvi2Xkt0+WN7+fMzQnBRNbv/ysK7S139I+ATG3i
/mSf5AbbFOpzqIgKcydIIpcQIdu4iM784xkYMTs7tldnU56WSH3PHzh2pWWlYr7m
v6CMEIw31HI4eNwXYxI4yQr7EhrTPDTMqoEqrR6i+aEdJkl+pXNzCuknCdBZnEzX
Tv8O+RXYXf6bT7JWJbAaeG879Ttel7vbq7+0G8mLbAPmdjJDWMv8yi18BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa9wXtN7i+EesccekIfVcpYAJqfMB8GA1UdIwQY
MBaAFMwTvoRxj1UcJBR38ioEHHNOuX3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUt
NzQxZDU1Yzk5ODAyLzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUtNzQxZDU1Yzk5ODAy
LzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJi2mwIG
OmH954eECb0e6pF/Lb32QZ9KD3+5zy6hJNjWSIfx4fnCg9sAnS5BSI/dBhw9Rv3s
v8pd65oHODfUkjK/3XBczroTwlfimdeuR/nW0JK2E0OnB+hfqDcE2FoHZYo8VgcX
nPvOCGiQsLnXqxbAcc/bCF4GklVpOAJE6gcLtoQQxhTwa2JnNWhLyYU1hqWYV62V
suyDzderCtrk78dWB55USoHzT7c6rNiWwWR1F9/ZRTYP5+I6Ocq06f6PsgE5YPer
d5JOxlSkNEw72iMyJ6O8fb3vmOBLrEuBW0V5V4t0pKZIxYzNvFryvdMOSKljDjSd
3gYOUl/PSy6bdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:36 2025 by rpki-client