Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: Q/GkjZmDKDQ1TyL+/RezhW1xCgOohtdKQw/J59ggZ9k=
Subject key identifier: 43:79:E2:07:73:3F:6A:28:C3:25:C8:29:EA:DD:7E:CE:B5:6A:A4:CF
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 0194BD4E9959887FB972569CEA58777ADF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 6qAIt9V6Tuc9FVGp-Mx0RnmXJnc.roa (hash: CiYXMrIwOkUf5P8W6OuLsiwB9SuH3vnA0mKQsfSXJRs=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: 9aWDTLIOwYH0b0mNTo38VJCbrGTz3G1npPFq09O/X38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:59:88:7f:b9:72:56:9c:ea:58:77:7a:df:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=4379e207733f6a28c325c829eadd7eceb56aa4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:c8:55:c5:d9:c3:4b:8e:d5:74:2c:7c:ef:
f1:54:f2:4d:28:47:d5:55:f9:92:3f:f4:c7:81:64:
e7:d2:13:92:36:cc:a4:91:c7:20:78:b7:8e:2d:6f:
80:54:82:fe:32:32:ab:61:bf:fb:fa:9a:21:e2:95:
b5:db:fa:75:9b:dd:39:eb:ab:ee:7c:66:6c:4c:63:
63:00:60:78:27:c2:2f:52:82:01:e0:eb:91:64:b7:
e5:54:ab:b4:5e:19:54:25:15:18:ba:2a:8c:54:ed:
12:26:42:08:2a:9e:5a:c4:7f:8f:45:2f:fe:61:fc:
0e:41:4b:e4:d8:4c:68:10:5c:03:69:04:5d:00:ef:
ac:3e:27:e2:91:ee:a5:3c:21:1d:b1:18:63:a7:f3:
ee:9f:14:4c:1d:3c:8b:26:b3:ef:b5:bb:69:0c:91:
b1:0d:a7:21:bc:19:79:af:6b:ca:15:08:6b:7e:89:
8b:e1:1b:ef:37:2e:c7:57:0d:97:15:e4:ef:b0:09:
81:17:f2:d3:ac:f1:86:bb:b0:1f:3c:3e:7b:82:7f:
e6:b4:49:ed:f0:63:a2:86:0f:68:47:66:b7:6e:b2:
51:db:36:42:40:58:4f:ae:b5:ce:78:b9:dd:94:7a:
36:ac:55:c6:99:1c:b0:8c:05:09:58:8c:b3:f2:e1:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:79:E2:07:73:3F:6A:28:C3:25:C8:29:EA:DD:7E:CE:B5:6A:A4:CF
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:22:0b:cb:20:42:91:e8:c9:76:fc:82:d8:e6:08:f9:b5:6b:
84:ba:ce:aa:7a:8f:aa:e9:6e:05:91:56:35:5e:c9:3d:4b:09:
32:4e:30:92:5c:25:23:0d:5f:cd:b6:f8:15:db:e5:d5:b7:7d:
bf:3c:12:79:c7:d6:51:b0:5f:a1:b1:4b:d2:f4:08:df:e2:9c:
01:6e:7f:f3:4b:06:19:0a:10:ec:46:ca:bb:62:23:ee:7d:28:
0f:33:2c:39:c4:a7:bf:df:e2:18:42:a9:f3:67:9e:3e:bf:d9:
88:7f:cb:0d:ed:dc:f7:2e:db:56:f6:0a:80:79:7a:e8:30:d2:
31:18:1d:cc:0d:82:44:da:16:92:e8:3a:64:7a:36:34:19:a0:
9d:ef:74:37:b0:1f:00:f2:47:dc:7e:10:e8:c8:f7:af:c6:ea:
44:c0:93:92:3f:1e:01:ab:83:e3:78:85:37:72:88:6d:36:1a:
cb:d2:cc:6f:25:55:9f:aa:6e:02:5d:f9:66:0e:09:42:24:52:
d9:3e:29:b7:9c:3d:d5:01:b2:3a:6d:c5:2f:94:54:5b:54:92:
83:fe:bc:d1:6a:f7:24:e1:13:87:cd:75:d1:8a:51:03:c2:e8:
c4:7b:98:78:b1:a4:de:b6:60:04:80:87:70:16:92:aa:2f:45:
89:79:b1:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TplZiH+5clac6lh3et+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MGIxZjg3NzJjNmVmNDg0ZTJjZDJkNjYyNjNmMmVmOThm
YTM5NjgwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
Eyg0Mzc5ZTIwNzczM2Y2YTI4YzMyNWM4MjllYWRkN2VjZWI1NmFhNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte/IVcXZw0uO1XQsfO/xVPJNKEfV
VfmSP/THgWTn0hOSNsykkccgeLeOLW+AVIL+MjKrYb/7+poh4pW12/p1m90566vu
fGZsTGNjAGB4J8IvUoIB4OuRZLflVKu0XhlUJRUYuiqMVO0SJkIIKp5axH+PRS/+
YfwOQUvk2ExoEFwDaQRdAO+sPifike6lPCEdsRhjp/PunxRMHTyLJrPvtbtpDJGx
DachvBl5r2vKFQhrfomL4RvvNy7HVw2XFeTvsAmBF/LTrPGGu7AfPD57gn/mtEnt
8GOihg9oR2a3brJR2zZCQFhPrrXOeLndlHo2rFXGmRywjAUJWIyz8uFGwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN54gdzP2oowyXIKerdfs61aqTPMB8GA1UdIwQY
MBaAFGQLH4dyxu9ITizS1mJj8u+Y+jloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQt
Mzg3YWZhMGE1MzRmLzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQtMzg3YWZhMGE1MzRm
LzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSILyyBC
kejJdvyC2OYI+bVrhLrOqnqPquluBZFWNV7JPUsJMk4wklwlIw1fzbb4Fdvl1bd9
vzwSecfWUbBfobFL0vQI3+KcAW5/80sGGQoQ7EbKu2Ij7n0oDzMsOcSnv9/iGEKp
82eePr/ZiH/LDe3c9y7bVvYKgHl66DDSMRgdzA2CRNoWkug6ZHo2NBmgne90N7Af
APJH3H4Q6Mj3r8bqRMCTkj8eAauD43iFN3KIbTYay9LMbyVVn6puAl35Zg4JQiRS
2T4pt5w91QGyOm3FL5RUW1SSg/680Wr3JOETh8110YpRA8LoxHuYeLGk3rZgBICH
cBaSqi9FiXmxTw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:12 2025 by rpki-client