Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: Wr9OD4ixMlPeMwFgGkS2svw1itewtJH09p7wVkWfC7U=
Subject key identifier: 01:AA:83:CA:9D:FD:AF:8C:0F:6F:7B:A7:66:F8:97:89:36:3A:2B:84
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 0194BBCE58C9C9D51C62D8E181854344398C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: Fnii1CQxZd1EM5B0fjHHXI/GLh16sy/tCKpZtSTNA0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:58:c9:c9:d5:1c:62:d8:e1:81:85:43:44:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=01aa83ca9dfdaf8c0f6f7ba766f89789363a2b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:7c:37:52:2b:a4:22:cc:de:b8:76:f8:7d:
cf:03:7b:de:4a:fd:79:9e:bd:33:e7:7f:e1:7a:74:
a9:70:c7:17:9c:51:28:a6:80:8e:e4:82:78:4b:f9:
2d:9f:b8:88:40:8c:00:4f:9e:21:50:9e:7a:bc:0b:
cd:d1:ac:54:73:b3:86:cc:53:43:a7:f1:0e:42:14:
7a:a5:4c:dc:c3:ee:09:97:0d:75:c6:f6:14:34:38:
d1:4f:92:61:85:2e:8f:0b:17:83:d5:ef:70:81:51:
ef:25:87:c9:9a:85:0c:1d:99:8d:1e:e7:17:ab:81:
4e:72:cb:f2:04:31:62:72:bd:af:76:5c:06:23:5f:
69:9b:ad:08:ae:3b:99:3c:3b:26:c6:79:aa:3a:e8:
6a:ba:c8:41:87:c1:df:eb:eb:a7:fb:a6:2c:30:cb:
4e:b9:a2:9e:68:6f:84:13:7e:10:4b:a9:2f:06:68:
22:17:13:93:12:bc:d3:96:d3:60:1e:c7:9d:2b:f4:
e6:81:8b:44:dc:b2:68:d0:96:c0:0a:46:27:e5:c5:
26:15:7e:a2:e8:a2:b8:4e:f2:90:23:00:d7:79:b4:
ad:cf:14:f1:63:66:d0:4f:76:7e:e5:7d:be:cc:70:
29:f9:29:c3:ae:a7:f6:b8:ff:d2:67:50:3b:78:23:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:83:CA:9D:FD:AF:8C:0F:6F:7B:A7:66:F8:97:89:36:3A:2B:84
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:99:ee:53:e1:cf:64:91:e7:8b:7b:cc:2a:e5:6a:bc:52:
74:c6:5d:88:c4:ed:03:14:86:7a:6e:21:1a:a6:18:2b:98:bc:
78:6b:13:36:6c:d4:7f:53:86:9c:1f:04:9d:02:ce:2b:a1:4d:
d7:14:df:fd:ff:f6:f3:c2:1d:5d:3b:c1:42:22:94:6b:fd:86:
30:4c:10:6b:bd:15:86:ac:0d:3c:14:eb:6b:f7:8b:ac:5a:8b:
5a:b4:7b:de:a3:e4:dd:02:69:11:f6:8c:9a:31:24:58:db:da:
a3:d0:3d:24:be:df:c2:55:46:06:05:6b:d7:fb:72:f3:f5:4d:
fe:02:db:b3:1e:c5:44:73:09:39:55:26:ea:f8:10:36:d4:18:
13:fe:83:88:a3:e1:06:4b:16:26:d9:b2:22:3b:7b:82:15:ef:
e9:69:8b:b0:d6:d6:56:bb:b9:14:e6:e4:8d:dc:3f:04:62:71:
28:1f:14:14:f5:4b:61:6a:92:9a:40:37:c0:d0:48:a6:7e:86:
ae:e5:84:27:9f:ce:93:5a:7e:70:9c:ad:e0:25:1f:27:28:e3:
41:65:1a:67:8f:06:ff:0d:99:a0:5f:99:49:03:a9:4c:f7:da:
39:42:22:fd:49:d4:69:b7:de:3b:bf:27:62:6b:a3:b5:58:be:
9a:4a:5e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zljJydUcYtjhgYVDRDmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj
NDE4NDMwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
EygwMWFhODNjYTlkZmRhZjhjMGY2ZjdiYTc2NmY4OTc4OTM2M2EyYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhB8N1IrpCLM3rh2+H3PA3veSv15
nr0z53/henSpcMcXnFEopoCO5IJ4S/ktn7iIQIwAT54hUJ56vAvN0axUc7OGzFND
p/EOQhR6pUzcw+4Jlw11xvYUNDjRT5JhhS6PCxeD1e9wgVHvJYfJmoUMHZmNHucX
q4FOcsvyBDFicr2vdlwGI19pm60IrjuZPDsmxnmqOuhqushBh8Hf6+un+6YsMMtO
uaKeaG+EE34QS6kvBmgiFxOTErzTltNgHsedK/TmgYtE3LJo0JbACkYn5cUmFX6i
6KK4TvKQIwDXebStzxTxY2bQT3Z+5X2+zHAp+SnDrqf2uP/SZ1A7eCPJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGqg8qd/a+MD297p2b4l4k2OiuEMB8GA1UdIwQY
MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt
YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy
LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqCZ7lPh
z2SR54t7zCrlarxSdMZdiMTtAxSGem4hGqYYK5i8eGsTNmzUf1OGnB8EnQLOK6FN
1xTf/f/288IdXTvBQiKUa/2GMEwQa70VhqwNPBTra/eLrFqLWrR73qPk3QJpEfaM
mjEkWNvao9A9JL7fwlVGBgVr1/ty8/VN/gLbsx7FRHMJOVUm6vgQNtQYE/6DiKPh
BksWJtmyIjt7ghXv6WmLsNbWVru5FObkjdw/BGJxKB8UFPVLYWqSmkA3wNBIpn6G
ruWEJ5/Ok1p+cJyt4CUfJyjjQWUaZ48G/w2ZoF+ZSQOpTPfaOUIi/UnUabfeO78n
YmujtVi+mkpehA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:57 2025 by rpki-client