Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: aR/r9g1iLb0tEOfSv9yebfDHXL41rWH6BE38For2gDg=
Subject key identifier: BD:C1:91:B6:D7:96:6B:EE:40:DC:9E:E6:4E:85:A9:26:CA:16:3A:0C
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 0194BC3C420E473E7D1D7B3D7C39E7390586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: gpOFwGigFruN2xX1_4na-JihRrY.roa (hash: 0yfE24GB/9TSNfuk9Qc/laEhooVfpgFo5Q1e52VDvck=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: Q3PUE4FYp8qRom15ptqjoGIQpA4T/u+he6nGJKjPAgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:42:0e:47:3e:7d:1d:7b:3d:7c:39:e7:39:05:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=bdc191b6d7966bee40dc9ee64e85a926ca163a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:e4:f5:e9:92:28:47:ce:4a:8f:45:0d:7b:
24:74:35:c4:c3:a4:6d:c4:2e:b1:f2:36:00:a5:7a:
11:05:e1:fe:53:57:3a:cb:e3:85:0b:46:2d:c2:3e:
a6:8d:b2:23:90:0e:9d:77:7a:b7:d8:db:34:e9:91:
2f:52:3d:1b:d3:9a:61:64:2e:22:19:ab:68:92:08:
ea:aa:3b:21:6f:5b:f7:b6:86:60:24:87:70:83:b6:
e2:e0:09:54:22:33:bc:79:00:f2:d3:ba:97:b4:3c:
ea:e3:27:65:3b:07:26:b2:ca:53:a3:04:75:b5:63:
b2:46:eb:20:69:8c:59:e6:ee:50:b2:19:7d:8c:27:
98:17:71:5c:48:4c:75:5e:bd:64:ed:5a:72:b8:3f:
8e:6c:8f:e7:c0:26:fc:36:08:cf:74:92:98:e4:f8:
53:1d:5c:40:b0:36:48:46:b8:7d:01:c9:1f:1f:9e:
1e:0c:c9:c0:d1:0c:af:45:13:9c:49:cd:24:2b:47:
27:6d:ee:42:b7:26:f7:83:a4:8a:51:cd:4a:dc:45:
dc:9e:36:7a:c9:3d:0e:d7:58:8d:5f:6f:b4:08:8d:
69:18:cd:10:f2:16:d1:65:96:93:6b:c5:7e:10:10:
87:ba:f1:14:2e:08:3b:2b:9a:90:d6:5a:d6:fc:d9:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:91:B6:D7:96:6B:EE:40:DC:9E:E6:4E:85:A9:26:CA:16:3A:0C
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:b3:2d:9a:91:ff:6d:df:aa:6a:dc:27:0d:50:67:23:fe:
6f:10:19:6d:0d:39:af:bf:46:67:b6:f5:06:e4:92:37:2f:0c:
cd:d5:73:cd:eb:fd:e0:c7:f9:a4:e0:67:2c:6b:e1:ae:1c:41:
4b:3b:4f:1d:c5:d4:fb:2f:ab:bc:5c:90:22:db:aa:86:03:3d:
9c:7c:11:00:67:37:fc:3d:08:bd:51:77:17:04:2b:b1:df:4a:
7f:e2:90:3d:71:47:09:c1:5b:ce:6f:47:51:1c:a7:ff:39:22:
93:a4:d5:0d:f5:7f:d2:c0:85:58:c2:70:7b:a5:f2:bf:fa:cb:
66:4c:8e:60:8d:51:68:ee:9c:2d:bf:e8:92:39:d4:20:9e:fb:
18:5e:5b:21:36:9b:e9:0c:15:46:06:aa:9e:e9:2b:a7:42:0b:
9c:b0:9a:54:14:cb:62:cf:c8:41:99:49:91:7c:24:11:1a:ec:
b1:6d:eb:a2:0a:60:27:b2:eb:ec:4a:ce:ed:1b:40:e1:92:21:
54:5e:19:c8:60:9a:5e:30:3a:88:84:8e:48:25:92:37:83:0c:
f5:e8:2f:71:7e:41:22:8d:50:9a:31:08:92:1e:96:1a:fa:5c:
73:ca:13:aa:20:80:87:6e:f0:64:7e:92:1c:13:43:15:4f:db:
92:7c:87:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEIORz59HXs9fDnnOQWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1
NjJjNDQwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EyhiZGMxOTFiNmQ3OTY2YmVlNDBkYzllZTY0ZTg1YTkyNmNhMTYzYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW/k9emSKEfOSo9FDXskdDXEw6Rt
xC6x8jYApXoRBeH+U1c6y+OFC0Ytwj6mjbIjkA6dd3q32Ns06ZEvUj0b05phZC4i
Gatokgjqqjshb1v3toZgJIdwg7bi4AlUIjO8eQDy07qXtDzq4ydlOwcmsspTowR1
tWOyRusgaYxZ5u5Qshl9jCeYF3FcSEx1Xr1k7VpyuD+ObI/nwCb8NgjPdJKY5PhT
HVxAsDZIRrh9AckfH54eDMnA0QyvRROcSc0kK0cnbe5Ctyb3g6SKUc1K3EXcnjZ6
yT0O11iNX2+0CI1pGM0Q8hbRZZaTa8V+EBCHuvEULgg7K5qQ1lrW/NloNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3BkbbXlmvuQNye5k6FqSbKFjoMMB8GA1UdIwQY
MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt
Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4
LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+ezLZqR
/23fqmrcJw1QZyP+bxAZbQ05r79GZ7b1BuSSNy8MzdVzzev94Mf5pOBnLGvhrhxB
SztPHcXU+y+rvFyQItuqhgM9nHwRAGc3/D0IvVF3FwQrsd9Kf+KQPXFHCcFbzm9H
URyn/zkik6TVDfV/0sCFWMJwe6Xyv/rLZkyOYI1RaO6cLb/okjnUIJ77GF5bITab
6QwVRgaqnukrp0ILnLCaVBTLYs/IQZlJkXwkERrssW3rogpgJ7Lr7ErO7RtA4ZIh
VF4ZyGCaXjA6iISOSCWSN4MM9egvcX5BIo1QmjEIkh6WGvpcc8oTqiCAh27wZH6S
HBNDFU/bknyHog==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:11 2025 by rpki-client