Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: HZcOHgC5zB/+KJH2Yfw47kJmVDx3iSmL1gJxNNBaRuY=
Subject key identifier: 13:22:4F:03:5E:EE:F4:A8:F7:1C:82:99:56:D8:1B:83:98:FC:68:20
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 0194BC72A8F11EAB1432B760D85BE3BFCD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 0493
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: 18/Ivk1sVfNkSJzKWydmZaE6OvbGNGRt2LpKMsVGyV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:f1:1e:ab:14:32:b7:60:d8:5b:e3:bf:cd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=13224f035eeef4a8f71c829956d81b8398fc6820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:91:ab:1e:69:4d:53:8d:d1:02:42:1f:1b:
a0:3d:b0:c2:74:1d:b8:50:a7:72:e5:42:df:16:db:
7e:fe:07:5f:79:11:1f:e6:23:b4:e0:68:6d:75:be:
ce:e2:e8:2e:36:7e:c3:d8:15:8d:cd:d8:f9:c9:ca:
6d:d6:0a:38:98:b9:33:20:b6:e3:08:f2:be:d2:25:
2b:05:30:02:96:a1:ec:fc:89:41:9e:8e:4d:e4:5d:
07:59:86:e5:0b:8a:7f:34:17:e5:ef:2c:f2:7c:77:
6a:c1:c1:26:60:4b:45:b8:2c:62:8d:be:e4:a7:8d:
f6:d3:d3:4b:4e:ae:97:59:c8:69:6d:42:85:77:d0:
b0:94:d3:c9:dd:ea:97:91:bc:c9:1d:70:e8:95:15:
72:cc:bb:5a:65:a3:7c:1b:7f:dd:2f:1e:25:6c:35:
22:5e:87:f2:db:aa:ca:37:8b:35:5d:d7:91:c4:a8:
75:c3:b9:19:b0:fb:3b:31:56:eb:38:66:2b:21:b6:
b4:02:5b:8e:d3:99:3e:f0:ed:c9:31:d9:f5:2a:8a:
20:51:7a:e3:0f:f5:ac:df:42:e3:ab:d4:60:56:5b:
ea:ac:7e:72:de:92:83:8b:17:b5:c6:c6:87:03:25:
9f:8b:7a:05:12:60:88:ab:b7:9a:c3:e1:c8:dc:8a:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:22:4F:03:5E:EE:F4:A8:F7:1C:82:99:56:D8:1B:83:98:FC:68:20
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dc:70:11:6e:4f:65:0e:0c:f2:98:29:b8:11:b9:cc:61:18:
76:ee:42:c8:21:cb:f4:45:fa:a7:5b:d5:63:9d:c1:ec:25:0e:
1a:ff:cd:a0:09:ef:2d:d2:30:f4:f4:6c:29:6e:d5:1e:a9:95:
28:bd:65:27:8e:d6:d8:f7:b4:f5:61:cc:d3:68:e4:68:c1:f7:
39:88:bd:46:6e:c2:69:c0:ee:55:3d:07:9d:de:65:cf:f9:fd:
06:af:d7:a0:a1:d4:3a:d7:07:8f:5b:59:9e:db:c4:0d:3c:2c:
33:82:f9:15:18:cd:46:4a:b0:3d:46:d6:bd:8d:27:1d:d4:20:
a7:4a:9b:ba:3a:85:7f:4c:e9:f7:f4:f1:dc:84:32:01:1c:8a:
5c:91:14:09:bd:0c:3f:d6:db:fc:59:32:02:33:55:b2:c6:54:
d1:c1:59:b6:a2:be:6b:37:8f:45:71:b1:f7:45:05:e9:ad:ed:
2f:b1:7f:80:d6:be:0a:56:37:4c:73:94:6b:f2:b2:ab:42:53:
99:b5:58:9e:44:c5:f4:1a:a8:ac:31:7f:d8:3b:27:e4:c2:c5:
6e:61:78:eb:81:8c:2b:cc:7f:78:d6:1c:55:09:fa:0c:64:30:
fe:1d:05:12:9d:97:50:74:25:d3:b4:32:53:72:a1:63:0e:0f:
a9:c4:4d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqjxHqsUMrdg2Fvjv81lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
EygxMzIyNGYwMzVlZWVmNGE4ZjcxYzgyOTk1NmQ4MWI4Mzk4ZmM2ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzKRqx5pTVON0QJCHxugPbDCdB24
UKdy5ULfFtt+/gdfeREf5iO04Ghtdb7O4uguNn7D2BWNzdj5ycpt1go4mLkzILbj
CPK+0iUrBTAClqHs/IlBno5N5F0HWYblC4p/NBfl7yzyfHdqwcEmYEtFuCxijb7k
p43209NLTq6XWchpbUKFd9CwlNPJ3eqXkbzJHXDolRVyzLtaZaN8G3/dLx4lbDUi
Xofy26rKN4s1XdeRxKh1w7kZsPs7MVbrOGYrIba0AluO05k+8O3JMdn1KoogUXrj
D/Ws30Ljq9RgVlvqrH5y3pKDixe1xsaHAyWfi3oFEmCIq7eaw+HI3IolbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMiTwNe7vSo9xyCmVbYG4OY/GggMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNxwEW5P
ZQ4M8pgpuBG5zGEYdu5CyCHL9EX6p1vVY53B7CUOGv/NoAnvLdIw9PRsKW7VHqmV
KL1lJ47W2Pe09WHM02jkaMH3OYi9Rm7CacDuVT0Hnd5lz/n9Bq/XoKHUOtcHj1tZ
ntvEDTwsM4L5FRjNRkqwPUbWvY0nHdQgp0qbujqFf0zp9/Tx3IQyARyKXJEUCb0M
P9bb/FkyAjNVssZU0cFZtqK+azePRXGx90UF6a3tL7F/gNa+ClY3THOUa/Kyq0JT
mbVYnkTF9BqorDF/2Dsn5MLFbmF464GMK8x/eNYcVQn6DGQw/h0FEp2XUHQl07Qy
U3KhYw4PqcRNzg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:56 2025 by rpki-client