Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: 5OjEUi3jth+ChjXEHLGmB5QZP9bn+xTrzqDr0LPucv4=
Subject key identifier: D1:9C:D9:28:D6:D7:9C:8B:EC:BD:0A:14:70:10:3E:DC:DD:34:5B:EF
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 0194BC3C1117AC9CD22A4A4CDA3C8EEF8156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: +BmIxHdiXizrrVcp/Pp6Xgr8/Q2VPu6NIJtzcFYqF0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:17:ac:9c:d2:2a:4a:4c:da:3c:8e:ef:81:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=d19cd928d6d79c8becbd0a1470103edcdd345bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:81:c2:b8:e6:d9:57:4b:77:2c:9e:1d:fe:
22:88:ab:df:4c:81:21:5c:05:ec:3e:6a:10:0c:d0:
d9:54:c0:0b:27:ea:cd:7d:f4:c4:ae:d0:e9:ab:5f:
3e:c9:e4:12:46:71:0f:63:5b:b1:7c:4a:5a:5a:61:
b9:4e:ff:c7:f6:e7:72:c7:a7:ba:82:43:7a:e8:36:
45:90:fe:d9:f6:ce:6d:98:39:1d:24:0a:9f:29:c0:
e9:b7:4b:b3:80:dd:80:22:24:52:b4:a3:3b:0e:78:
90:6f:b9:40:6b:bf:fb:44:a4:37:09:c1:32:08:a0:
f7:e1:d3:98:7f:87:b7:36:d6:fe:74:06:f8:37:8c:
01:b0:c0:88:e8:40:aa:16:bc:ac:db:99:35:fe:30:
3f:ba:19:5a:b4:6a:93:b9:e1:c0:54:bf:08:1a:2f:
80:7d:05:c7:26:8d:0d:cf:48:ba:97:fa:d1:44:e5:
3e:48:a2:43:bc:a3:50:bd:a0:37:a3:95:b2:71:83:
ee:92:90:8f:38:83:9d:29:30:c0:03:d5:9c:1a:f3:
54:c5:a9:e4:56:2c:c1:6b:85:bc:3a:83:54:fa:b5:
e9:09:fe:b9:de:58:23:ee:59:33:ab:c2:95:b0:35:
97:16:a5:09:c0:03:5a:a3:21:f9:24:28:eb:6f:52:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9C:D9:28:D6:D7:9C:8B:EC:BD:0A:14:70:10:3E:DC:DD:34:5B:EF
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b1:9e:ec:a9:c1:08:27:1f:d4:d2:ff:48:75:f6:4c:a3:11:
23:93:94:28:56:77:47:ef:d5:1c:ba:ef:01:f5:0d:3c:6d:24:
bf:85:8e:9a:4f:b0:fa:62:52:37:20:b3:b0:3b:1e:67:da:0f:
1d:59:ed:25:d0:92:78:a6:45:54:93:d6:4f:14:f9:9b:08:8e:
22:f5:73:49:a1:0a:0e:97:f6:b9:7f:e7:38:35:60:ac:78:4e:
cd:cc:f0:f3:6c:e0:6c:e2:76:8b:12:9a:7b:b8:d3:70:1e:fe:
62:cb:ba:c5:a0:f0:d5:72:bd:3e:e6:66:f0:ee:fd:e4:7e:38:
97:17:2a:b9:5f:6d:57:32:70:a7:8b:c8:fa:da:fb:ac:79:fd:
53:5f:50:4f:61:b6:2f:15:e1:65:60:d1:e9:3a:a3:1e:bb:dd:
65:a5:13:65:cc:d3:cf:ac:ac:d0:96:de:ad:e3:d1:42:3d:b2:
8d:cf:2c:12:9c:b0:3b:64:c0:0b:45:08:bf:4e:03:f9:84:f2:
9e:2f:4d:9b:dd:7c:ae:ca:a0:8d:85:7c:b7:65:94:2c:c5:0d:
a8:f0:be:3a:7c:33:25:63:c4:69:e1:ff:5c:71:20:2a:2b:b5:
db:bf:51:eb:1d:2f:5b:2c:98:d2:63:94:59:29:29:31:4f:52:
36:51:8d:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBEXrJzSKkpM2jyO74FWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0
YThiMTIwHhcNMjUwMTMxMTIwMDQwWhcNMjUwMjAxMTIwMDQwWjAzMTEwLwYDVQQD
EyhkMTljZDkyOGQ2ZDc5YzhiZWNiZDBhMTQ3MDEwM2VkY2RkMzQ1YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A6Bwrjm2VdLdyyeHf4iiKvfTIEh
XAXsPmoQDNDZVMALJ+rNffTErtDpq18+yeQSRnEPY1uxfEpaWmG5Tv/H9udyx6e6
gkN66DZFkP7Z9s5tmDkdJAqfKcDpt0uzgN2AIiRStKM7DniQb7lAa7/7RKQ3CcEy
CKD34dOYf4e3Ntb+dAb4N4wBsMCI6ECqFrys25k1/jA/uhlatGqTueHAVL8IGi+A
fQXHJo0Nz0i6l/rRROU+SKJDvKNQvaA3o5WycYPukpCPOIOdKTDAA9WcGvNUxank
VizBa4W8OoNU+rXpCf653lgj7lkzq8KVsDWXFqUJwANaoyH5JCjrb1Ls9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGc2SjW15yL7L0KFHAQPtzdNFvvMB8GA1UdIwQY
MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt
NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl
LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyrGe7KnB
CCcf1NL/SHX2TKMRI5OUKFZ3R+/VHLrvAfUNPG0kv4WOmk+w+mJSNyCzsDseZ9oP
HVntJdCSeKZFVJPWTxT5mwiOIvVzSaEKDpf2uX/nODVgrHhOzczw82zgbOJ2ixKa
e7jTcB7+Ysu6xaDw1XK9PuZm8O795H44lxcquV9tVzJwp4vI+tr7rHn9U19QT2G2
LxXhZWDR6TqjHrvdZaUTZczTz6ys0JberePRQj2yjc8sEpywO2TAC0UIv04D+YTy
ni9Nm918rsqgjYV8t2WULMUNqPC+OnwzJWPEaeH/XHEgKiu1279R6x0vWyyY0mOU
WSkpMU9SNlGNfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:12 2025 by rpki-client