Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: z9hfEFGuXmcYb/+7+xIuAOZ+N6gbule6WIGwhAH2C1w=
Subject key identifier: 67:C9:A8:6A:DF:96:4E:73:6F:2B:BC:4B:A8:0C:2B:34:91:FA:C5:A9
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 0194BBCE63ADFE22BC0CCDBEA8A227B59B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: 1Zo0h6HL/vYXqzjGtghXCqGJWHrElJil8YSWYp/ARzQ=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:63:ad:fe:22:bc:0c:cd:be:a8:a2:27:b5:9b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=67c9a86adf964e736f2bbc4ba80c2b3491fac5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:dc:bc:63:06:b0:56:58:c3:62:05:bb:ba:
81:52:60:6e:23:56:58:c4:d8:cd:b7:e1:00:f0:89:
3b:2b:5a:9d:01:03:23:74:31:de:5c:17:e4:24:fb:
ea:35:c5:0a:b6:29:2f:a3:38:7a:4c:4e:66:59:cd:
17:be:6c:ee:c4:e5:f3:27:51:a1:9d:61:c4:b5:16:
29:80:40:e3:21:a5:ef:ba:ea:0b:e9:c5:43:a3:6f:
80:d9:bb:20:e7:74:7b:af:e8:c1:94:a1:30:71:e2:
4e:92:9f:4f:bc:00:49:f5:4d:c3:29:35:f7:e0:06:
c9:9a:9c:6c:64:51:6d:09:d0:ca:3a:fc:9f:33:25:
fd:1e:12:d7:e4:ad:ff:3e:a1:1a:ec:b2:39:a6:71:
44:1c:1b:1f:d1:92:73:66:af:eb:ca:1f:37:ba:9d:
8c:66:99:3e:f0:fa:28:4b:c4:e6:3f:ca:e0:da:5d:
c8:7f:d7:08:da:10:80:e7:4f:8b:8f:a0:35:93:c3:
5e:c4:01:b8:31:59:63:98:af:76:70:56:c0:f0:d2:
7b:e5:87:e9:8c:4a:9a:34:ef:8e:d1:21:0f:92:28:
71:f2:a7:ff:ab:9d:52:b3:b2:32:70:11:21:f2:a5:
42:e8:14:d4:96:ed:db:a1:12:a7:77:6d:9f:91:84:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C9:A8:6A:DF:96:4E:73:6F:2B:BC:4B:A8:0C:2B:34:91:FA:C5:A9
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cd:4a:8c:e2:04:18:d9:39:3d:af:8d:ac:bd:d9:6a:b5:7d:
a1:c7:6d:62:66:56:ba:18:8d:9c:ff:46:a0:4e:c7:6d:af:fc:
0d:c4:09:14:78:4c:0e:34:23:a6:9d:eb:cd:60:15:f6:80:18:
3d:d5:87:28:22:2c:03:59:bd:5d:85:00:92:04:61:31:ab:1e:
91:c2:54:d7:06:df:0b:91:48:4b:4c:bb:15:93:4c:f9:f6:a6:
5c:2b:63:be:ec:1c:2f:aa:48:3c:37:50:02:f6:2f:5e:e9:89:
2b:5c:c7:8c:c1:42:ad:41:bb:80:86:d1:24:d3:40:e6:1d:be:
38:3a:c1:bd:b4:8c:79:f6:35:bb:df:5c:73:83:17:b0:32:52:
13:db:a2:59:24:92:74:33:67:be:28:4b:92:bd:43:09:bd:a9:
b5:da:df:d0:20:64:74:a7:6f:94:28:2a:0c:68:76:09:a0:62:
f8:7c:3b:81:3a:b6:b9:25:14:3d:dd:f4:9f:1d:48:53:03:b9:
27:75:71:f8:20:3b:3a:80:a6:14:b1:54:3b:7b:e9:0d:ef:04:
89:6a:2f:b6:d4:ae:70:88:3d:e8:0f:f3:e9:cc:b4:36:64:53:
f9:bd:54:e3:12:99:45:6c:fe:a5:4b:32:14:a2:a3:a2:b3:21:
28:dc:e3:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmOt/iK8DM2+qKIntZuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWQ2YWZiOGRkZjhmOGMwZGQ2NjA3OTBlZGNiYTFmM2Iz
NzBjNjMwHhcNMjUwMTMxMTAwMDUyWhcNMjUwMjAxMTAwMDUyWjAzMTEwLwYDVQQD
Eyg2N2M5YTg2YWRmOTY0ZTczNmYyYmJjNGJhODBjMmIzNDkxZmFjNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+7cvGMGsFZYw2IFu7qBUmBuI1ZY
xNjNt+EA8Ik7K1qdAQMjdDHeXBfkJPvqNcUKtikvozh6TE5mWc0XvmzuxOXzJ1Gh
nWHEtRYpgEDjIaXvuuoL6cVDo2+A2bsg53R7r+jBlKEwceJOkp9PvABJ9U3DKTX3
4AbJmpxsZFFtCdDKOvyfMyX9HhLX5K3/PqEa7LI5pnFEHBsf0ZJzZq/ryh83up2M
Zpk+8PooS8TmP8rg2l3If9cI2hCA50+Lj6A1k8NexAG4MVljmK92cFbA8NJ75Yfp
jEqaNO+O0SEPkihx8qf/q51Ss7IycBEh8qVC6BTUlu3boRKnd22fkYTLGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfJqGrflk5zbyu8S6gMKzSR+sWpMB8GA1UdIwQY
MBaAFHWdavuN34+MDdZgeQ7cuh87NwxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUt
MjU0YmNiY2VjMDM3LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUtMjU0YmNiY2VjMDM3
LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAus1KjOIE
GNk5Pa+NrL3ZarV9ocdtYmZWuhiNnP9GoE7Hba/8DcQJFHhMDjQjpp3rzWAV9oAY
PdWHKCIsA1m9XYUAkgRhMasekcJU1wbfC5FIS0y7FZNM+famXCtjvuwcL6pIPDdQ
AvYvXumJK1zHjMFCrUG7gIbRJNNA5h2+ODrBvbSMefY1u99cc4MXsDJSE9uiWSSS
dDNnvihLkr1DCb2ptdrf0CBkdKdvlCgqDGh2CaBi+Hw7gTq2uSUUPd30nx1IUwO5
J3Vx+CA7OoCmFLFUO3vpDe8EiWovttSucIg96A/z6cy0NmRT+b1U4xKZRWz+pUsy
FKKjorMhKNzjAQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:21 2025 by rpki-client