Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: BUR92LDGNHt56EdOuc6UmV16CZKaxxobifGiTm4zUi8=
Subject key identifier: 10:CE:91:33:1F:8E:8C:EB:AF:1F:8D:9A:59:81:BC:D1:40:08:C0:54
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 0194BC72F2035A1549C64C78353087CBB4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 03D4
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: UQmSZ2AXcMM1j/7GAyzAg7TepXnrMgkluvwzK5faNZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f2:03:5a:15:49:c6:4c:78:35:30:87:cb:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=10ce91331f8e8cebaf1f8d9a5981bcd14008c054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:5f:a1:15:0d:b1:7b:7e:bc:3e:20:2f:1a:
98:9c:3e:d9:cf:c2:da:e6:30:45:34:a2:68:47:a7:
e6:f7:6d:ad:28:fa:41:1c:3b:91:20:17:89:25:85:
b9:57:a0:71:c9:e2:a2:f6:0d:d9:99:5b:eb:58:3f:
cd:3c:00:65:f9:0e:21:9c:a2:dc:99:4e:e9:e2:66:
5c:98:82:a0:f3:85:24:2a:e1:7a:4a:b3:7f:d0:a2:
19:b7:43:30:ab:c2:5a:e6:a9:da:cc:78:8a:86:ee:
e1:c1:13:e4:b1:ba:19:fd:12:ff:44:23:46:a3:af:
14:f0:d5:5b:d0:38:b1:51:c5:36:74:a3:df:5c:7f:
1c:27:3b:d7:95:09:ca:d0:11:88:2d:b9:d1:5d:1c:
f2:7d:1e:55:e0:85:e3:95:c6:58:c3:35:c5:65:39:
25:c7:a9:bd:7a:a8:aa:95:6a:b0:59:bc:c3:df:3a:
c4:76:1c:1a:b8:cb:1c:2a:18:a1:29:aa:54:c9:29:
21:4f:06:8e:46:21:55:04:3b:69:44:3d:68:6a:7b:
19:0b:20:65:70:1b:e9:5c:ea:48:f1:af:21:07:8d:
4f:ca:cc:4d:4d:63:1f:93:62:0e:89:c7:1a:70:85:
f8:ab:b8:02:13:64:f0:f8:e8:7e:cf:38:d8:b4:ee:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:91:33:1F:8E:8C:EB:AF:1F:8D:9A:59:81:BC:D1:40:08:C0:54
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8e:e6:1e:42:5f:7b:a1:1e:fc:a6:fa:56:44:4d:85:11:78:
08:5d:e5:90:8a:ec:91:3d:de:09:e5:0f:bf:83:04:c7:da:72:
02:98:35:07:3b:15:88:2c:f2:b3:69:84:45:e8:fc:9e:89:fa:
2f:65:93:8a:80:98:a9:ed:02:aa:7a:e0:c4:05:ec:a3:7c:70:
db:40:ef:31:76:7c:8d:61:79:67:ce:b1:ee:d9:21:ca:72:9c:
e5:39:97:79:6b:57:2d:09:75:ec:89:23:fd:6c:e4:de:b9:8e:
80:b6:fe:14:ff:91:35:87:c8:28:a3:0b:78:72:b7:50:4a:08:
94:0e:49:69:17:ae:2a:c5:2b:be:c2:5b:ad:fe:62:c3:28:87:
eb:67:d0:63:bf:aa:03:85:3f:8d:ee:18:5b:8a:ea:51:c5:bf:
ea:2c:33:18:8d:f8:8d:0e:93:fc:ae:11:2c:ee:cf:ab:24:cb:
f7:b7:ba:34:1c:e3:d9:0d:ea:da:d2:b1:0b:7e:4e:b5:d2:01:
c9:91:90:74:18:42:a5:7c:97:53:dd:b7:8c:93:a5:29:46:d7:
e9:e6:c4:55:54:d8:cd:cd:ca:c4:38:68:d9:bc:61:80:16:e6:
e7:a4:3a:a4:99:aa:8e:fa:c7:4b:18:75:a0:a7:30:34:f9:bd:
3c:ff:18:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvIDWhVJxkx4NTCHy7SxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm
Y2M3ODEwHhcNMjUwMTMxMTMwMDM3WhcNMjUwMjAxMTMwMDM3WjAzMTEwLwYDVQQD
EygxMGNlOTEzMzFmOGU4Y2ViYWYxZjhkOWE1OTgxYmNkMTQwMDhjMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7NfoRUNsXt+vD4gLxqYnD7Zz8La
5jBFNKJoR6fm922tKPpBHDuRIBeJJYW5V6BxyeKi9g3ZmVvrWD/NPABl+Q4hnKLc
mU7p4mZcmIKg84UkKuF6SrN/0KIZt0Mwq8Ja5qnazHiKhu7hwRPksboZ/RL/RCNG
o68U8NVb0DixUcU2dKPfXH8cJzvXlQnK0BGILbnRXRzyfR5V4IXjlcZYwzXFZTkl
x6m9eqiqlWqwWbzD3zrEdhwauMscKhihKapUySkhTwaORiFVBDtpRD1oansZCyBl
cBvpXOpI8a8hB41PysxNTWMfk2IOiccacIX4q7gCE2Tw+Oh+zzjYtO7zdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDOkTMfjozrrx+NmlmBvNFACMBUMB8GA1UdIwQY
MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt
ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm
LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI7mHkJf
e6Ee/Kb6VkRNhRF4CF3lkIrskT3eCeUPv4MEx9pyApg1BzsViCzys2mERej8non6
L2WTioCYqe0CqnrgxAXso3xw20DvMXZ8jWF5Z86x7tkhynKc5TmXeWtXLQl17Ikj
/Wzk3rmOgLb+FP+RNYfIKKMLeHK3UEoIlA5JaReuKsUrvsJbrf5iwyiH62fQY7+q
A4U/je4YW4rqUcW/6iwzGI34jQ6T/K4RLO7PqyTL97e6NBzj2Q3q2tKxC35OtdIB
yZGQdBhCpXyXU923jJOlKUbX6ebEVVTYzc3KxDho2bxhgBbm56Q6pJmqjvrHSxh1
oKcwNPm9PP8Yqg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:03 2025 by rpki-client