Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: Q4S2RxHvHE+RPjC3ZDNvHwG5b/cnMy3ybOVSpYBSTrU=
Subject key identifier: EC:F2:80:5C:22:60:64:DE:E1:71:9E:FD:F1:7F:7B:D4:AE:0B:E3:A1
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 0194BCE09C7E75004A56C46508AEFD7942D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: MnPqlVHc9fosDLrnBlP0E1NoB4o.roa (hash: mD2+/j4E1Q+n6Btlz8PZ33xc+5cKf1HzvljXUQ+mRBY=)
2: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: hexMLAn5QUmWU1uClBYMsoWfnnYHfRJ9V/WUECk34ko=)
3: dAVWxqlNNVP6A8VBFL9RneZwmJI.roa (hash: 1lPQWQ8lwFJDBfgG4WjGvPhvOrJDEic6DuXOVo8+YHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9c:7e:75:00:4a:56:c4:65:08:ae:fd:79:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=ecf2805c226064dee1719efdf17f7bd4ae0be3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b3:a6:00:f3:32:90:c3:d0:66:14:9c:60:c7:
e1:1b:d9:17:88:a9:a9:8f:48:62:32:73:50:a0:85:
79:a1:30:a0:37:9f:15:d2:dc:99:c2:75:f3:f8:91:
90:dc:a3:95:c7:c8:ad:d8:08:85:5e:3f:be:59:02:
4b:3e:cb:71:96:89:ea:4f:a5:2a:eb:f9:15:ae:1b:
ee:af:73:fb:e4:07:ae:83:26:c2:7f:53:e9:53:a5:
4f:ef:e2:8e:49:75:47:1e:99:0a:c1:3a:ea:1f:ef:
89:79:5c:e1:4c:98:d3:b7:19:19:10:41:06:f1:6c:
a9:93:7e:1c:81:9c:f2:c2:78:d7:08:51:e9:23:74:
fb:43:d4:43:c5:0c:73:56:83:1f:fb:9e:e2:47:ac:
98:72:a0:54:41:ac:bb:f0:3b:43:e9:c7:82:93:77:
94:81:25:d3:46:17:b4:6d:cf:a4:ee:3c:a8:8a:40:
59:23:09:b4:77:c8:80:a6:48:01:1f:34:6a:55:da:
fa:3b:ff:65:dd:fc:e8:8a:0e:34:d5:4e:b1:64:70:
15:cb:bd:bb:2d:40:ed:66:25:4b:d9:cd:5a:8f:f3:
7c:78:e5:26:35:74:ad:1f:b2:e8:01:44:89:c7:22:
80:e9:eb:98:f6:5e:2d:e6:d4:f3:75:a9:01:27:cb:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:80:5C:22:60:64:DE:E1:71:9E:FD:F1:7F:7B:D4:AE:0B:E3:A1
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ce:56:7e:de:8a:a7:02:d8:7d:44:d3:2d:c4:9e:4c:81:bb:
87:3d:12:91:85:53:e9:43:06:93:3d:32:83:2d:ee:2c:72:10:
5c:5a:cd:36:6e:4e:08:a0:a0:8f:1e:d9:a1:56:6a:76:1b:cc:
32:67:35:eb:e4:28:ad:2b:75:78:c2:22:40:c3:c5:f3:46:4e:
72:a3:0e:23:c3:b5:4e:9c:2d:60:65:cc:ef:96:5b:6e:b1:f4:
b7:41:9b:2d:0b:5f:a3:a6:8b:bd:74:0a:18:f8:e6:66:56:be:
33:14:e5:10:b9:f1:c3:20:2e:71:fa:4b:48:e9:c4:33:e9:9a:
78:cb:eb:74:c5:cb:49:58:3b:80:5f:2f:d1:6b:bd:19:2f:19:
fa:78:76:88:25:22:d4:ab:4b:35:4f:73:59:e2:48:d1:26:49:
0c:a8:7c:83:3d:0e:ac:2d:c6:67:84:cf:42:30:d3:5b:9b:8e:
80:0f:1d:e7:2a:38:33:60:81:49:ac:0c:65:09:e2:d9:26:e9:
2d:3c:5e:76:33:40:0a:c3:04:29:23:56:a9:30:2f:93:19:9d:
0e:9e:1c:7a:a6:de:30:c7:7f:19:2f:f4:23:95:34:40:33:e3:
b8:0f:94:c9:c1:5b:0b:a8:97:38:1c:2e:03:ae:20:a4:87:9e:
fa:60:52:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Jx+dQBKVsRlCK79eULUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2I0M2Y1MzhmMGFlNzIwZTUyN2IyYTZjMGI4YTg3NmQ5
NmM5NDcwHhcNMjUwMTMxMTUwMDI0WhcNMjUwMjAxMTUwMDI0WjAzMTEwLwYDVQQD
EyhlY2YyODA1YzIyNjA2NGRlZTE3MTllZmRmMTdmN2JkNGFlMGJlM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bOmAPMykMPQZhScYMfhG9kXiKmp
j0hiMnNQoIV5oTCgN58V0tyZwnXz+JGQ3KOVx8it2AiFXj++WQJLPstxlonqT6Uq
6/kVrhvur3P75AeugybCf1PpU6VP7+KOSXVHHpkKwTrqH++JeVzhTJjTtxkZEEEG
8Wypk34cgZzywnjXCFHpI3T7Q9RDxQxzVoMf+57iR6yYcqBUQay78DtD6ceCk3eU
gSXTRhe0bc+k7jyoikBZIwm0d8iApkgBHzRqVdr6O/9l3fzoig401U6xZHAVy727
LUDtZiVL2c1aj/N8eOUmNXStH7LoAUSJxyKA6euY9l4t5tTzdakBJ8vA+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzygFwiYGTe4XGe/fF/e9SuC+OhMB8GA1UdIwQY
MBaAFGd7Q/U48K5yDlJ7KmwLiodtlslHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGIt
Mjg3ODIwM2EwMDlkLzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGItMjg3ODIwM2EwMDlk
LzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARs5Wft6K
pwLYfUTTLcSeTIG7hz0SkYVT6UMGkz0ygy3uLHIQXFrNNm5OCKCgjx7ZoVZqdhvM
Mmc16+QorSt1eMIiQMPF80ZOcqMOI8O1TpwtYGXM75ZbbrH0t0GbLQtfo6aLvXQK
GPjmZla+MxTlELnxwyAucfpLSOnEM+maeMvrdMXLSVg7gF8v0Wu9GS8Z+nh2iCUi
1KtLNU9zWeJI0SZJDKh8gz0OrC3GZ4TPQjDTW5uOgA8d5yo4M2CBSawMZQni2Sbp
LTxedjNACsMEKSNWqTAvkxmdDp4ceqbeMMd/GS/0I5U0QDPjuA+UycFbC6iXOBwu
A64gpIee+mBSJA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:25 2025 by rpki-client