Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: 4saZBvBPZWJTb5Z/Hac0Smuf5uf5EaJ4qMoifrIdKMg=
Subject key identifier: 0A:F9:A7:AE:73:C9:7D:C7:BD:DC:AF:60:C7:7F:BC:63:00:3B:13:FF
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 0194BCA9EC49D2D240695C7D785FC2D900BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: oIqCZD3hT4CyN17v6ywNtViGbe0rIKZTuxXjAkFsf4Q=)
2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ec:49:d2:d2:40:69:5c:7d:78:5f:c2:d9:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=0af9a7ae73c97dc7bddcaf60c77fbc63003b13ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:33:59:12:7b:a4:d3:60:ba:66:bb:ff:2d:
af:a1:d4:36:3d:1a:03:f7:e4:91:41:21:db:8f:2e:
e8:4e:d1:69:96:de:e4:f1:d3:06:b3:09:88:90:6f:
a5:fc:c9:f0:f3:10:f4:e4:56:8d:ef:cc:e7:a1:b3:
10:67:ae:2f:ca:a3:7e:43:98:16:80:26:14:d6:d2:
61:1f:51:9f:f6:47:5a:7d:65:d7:59:b6:be:2d:6d:
1f:62:ac:91:47:25:f8:e4:f2:da:ca:e5:9f:93:aa:
92:75:22:63:4c:cb:8a:72:79:22:8b:ee:52:e9:c3:
0d:6b:c8:55:3c:ab:9a:a8:1a:23:6f:7d:72:a7:8e:
b8:74:56:9e:d0:58:27:89:9f:6d:a5:11:e5:62:b2:
cb:24:e6:03:83:d1:59:68:db:a5:a4:63:91:54:e5:
26:80:b7:eb:18:63:98:76:8e:c6:c0:27:ba:43:c9:
4e:52:6d:dd:bb:06:fc:49:45:b5:60:ba:cf:e0:fd:
a6:ce:04:ac:db:89:7a:39:40:1e:f3:9c:12:92:33:
e7:35:7b:04:76:7d:21:e3:ba:4c:c0:4b:e6:f0:7e:
bb:fb:45:c0:6b:14:16:08:d0:e5:2d:e4:f9:55:1f:
e2:d0:f3:8d:71:ba:d8:f3:fb:b6:9e:38:c3:86:83:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:A7:AE:73:C9:7D:C7:BD:DC:AF:60:C7:7F:BC:63:00:3B:13:FF
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4c:96:8a:86:05:30:e2:a9:d8:de:2e:3f:51:f2:f3:62:9a:
fb:0b:44:7e:76:fd:34:62:db:64:b7:31:d1:0d:e8:dd:f7:d1:
fc:9e:68:33:d7:cd:35:0e:da:c5:39:76:4c:c6:8b:17:9a:05:
35:ba:15:d0:04:eb:11:ec:7f:e2:79:82:bd:d2:73:60:ac:37:
4f:13:d6:e6:2d:87:e8:a5:20:82:22:75:c6:93:9d:42:af:ac:
d3:96:76:b0:0f:0f:46:db:f3:7e:da:1b:40:a5:2c:f6:0b:fb:
66:f3:c0:aa:e0:41:e0:7f:34:2b:fa:f9:4e:6c:8d:38:72:b9:
18:a9:00:1a:e6:fc:95:7d:35:1b:bf:f4:85:c1:15:c6:6d:01:
d8:21:e9:b6:3c:eb:fd:1d:10:ba:8a:9f:de:40:8e:e5:8d:d1:
96:27:2c:5f:ff:32:07:7d:10:bc:62:c1:ec:10:3a:d1:7a:0c:
b4:86:ad:92:5d:e1:e2:fd:17:9b:4b:f4:b0:2a:2e:d0:53:8b:
d5:7a:8c:4c:f7:b5:67:a7:01:01:7f:5f:08:06:4a:8e:67:32:
aa:27:bd:4a:99:ab:0b:c5:17:54:ac:d3:c3:65:50:15:ed:f9:
81:97:b0:c3:b9:ad:13:23:80:a4:3d:56:69:ac:a2:cd:d4:7d:
6c:f4:48:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qexJ0tJAaVx9eF/C2QC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm
MDhhZDgwHhcNMjUwMTMxMTQwMDQwWhcNMjUwMjAxMTQwMDQwWjAzMTEwLwYDVQQD
EygwYWY5YTdhZTczYzk3ZGM3YmRkY2FmNjBjNzdmYmM2MzAwM2IxM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+AzWRJ7pNNguma7/y2vodQ2PRoD
9+SRQSHbjy7oTtFplt7k8dMGswmIkG+l/Mnw8xD05FaN78znobMQZ64vyqN+Q5gW
gCYU1tJhH1Gf9kdafWXXWba+LW0fYqyRRyX45PLayuWfk6qSdSJjTMuKcnkii+5S
6cMNa8hVPKuaqBojb31yp464dFae0FgniZ9tpRHlYrLLJOYDg9FZaNulpGORVOUm
gLfrGGOYdo7GwCe6Q8lOUm3duwb8SUW1YLrP4P2mzgSs24l6OUAe85wSkjPnNXsE
dn0h47pMwEvm8H67+0XAaxQWCNDlLeT5VR/i0PONcbrY8/u2njjDhoP+WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr5p65zyX3HvdyvYMd/vGMAOxP/MB8GA1UdIwQY
MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt
MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0
LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUyWioYF
MOKp2N4uP1Hy82Ka+wtEfnb9NGLbZLcx0Q3o3ffR/J5oM9fNNQ7axTl2TMaLF5oF
NboV0ATrEex/4nmCvdJzYKw3TxPW5i2H6KUggiJ1xpOdQq+s05Z2sA8PRtvzftob
QKUs9gv7ZvPAquBB4H80K/r5TmyNOHK5GKkAGub8lX01G7/0hcEVxm0B2CHptjzr
/R0Quoqf3kCO5Y3RlicsX/8yB30QvGLB7BA60XoMtIatkl3h4v0Xm0v0sCou0FOL
1XqMTPe1Z6cBAX9fCAZKjmcyqie9SpmrC8UXVKzTw2VQFe35gZeww7mtEyOApD1W
aayizdR9bPRIEg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:18 2025 by rpki-client