Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
File: ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft (raw, json)
Hash identifier: egJ73x+7swLLoFLxJuqamXSnssYvdDFYCImKfbtUbOw=
Subject key identifier: 12:67:52:FE:39:A4:CA:46:91:55:B9:DA:EB:FF:E1:C9:ED:03:45:7A
Authority key identifier: 64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
Certificate issuer: /CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Certificate serial: 0194BBCEAF4239D37465E00173F44545F069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl (hash: C2DAnsPlCwCG65UqLC9T7ewmEgE1/Gw3CC1xDPqNkZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:42:39:d3:74:65:e0:01:73:f4:45:45:f0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=126752fe39a4ca469155b9daebffe1c9ed03457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:39:e4:c3:c5:5d:2a:6a:67:3b:cf:b7:66:
8d:51:bd:9b:6f:54:9b:db:8e:35:ad:d8:53:82:7e:
8a:bf:97:ac:2a:d5:fb:25:63:b2:a8:35:42:54:0b:
8c:1e:da:b2:fb:aa:41:12:71:6c:f9:1a:3b:36:55:
ac:8f:08:d3:8e:ac:ae:0e:2b:e8:1a:5d:40:72:e0:
89:ab:62:42:8a:65:cc:30:62:e3:70:81:35:61:5a:
fd:2c:3e:77:80:76:00:b0:8e:18:e7:89:3e:9b:e7:
1b:17:8e:1b:9a:e0:fc:7e:9b:ed:a6:bb:54:93:db:
26:d4:e4:bd:dd:25:f4:86:63:fb:29:8f:35:0f:f1:
6e:10:4b:7c:65:9d:cd:fc:d1:e2:05:44:2e:d8:6b:
79:f6:2d:9b:d0:6d:0f:a5:0d:c9:1c:ff:22:df:1b:
49:04:8d:c9:f7:5b:ee:5a:84:56:ec:86:0b:6b:1c:
54:93:46:06:3a:4c:d0:ea:df:a2:09:09:9a:b1:57:
d3:b2:64:f2:51:1e:e8:56:68:0a:e9:db:b7:42:e8:
41:4f:df:c7:ac:17:61:bb:3d:f3:bc:4b:bd:de:11:
83:dd:21:e3:68:97:70:6e:17:72:76:26:db:56:1b:
b4:ed:65:37:09:bf:e5:d8:b9:8f:27:88:7e:9d:71:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:52:FE:39:A4:CA:46:91:55:B9:DA:EB:FF:E1:C9:ED:03:45:7A
X509v3 Authority Key Identifier:
keyid:64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a7:10:d9:09:cc:92:52:3b:f3:b0:78:14:6f:4a:6d:cc:52:
db:8d:65:02:f3:6b:2e:8a:62:be:9c:84:cc:65:16:7b:d8:58:
1b:7f:10:43:93:cc:41:2e:99:8b:41:f3:39:7b:69:9f:42:04:
52:4f:02:b3:07:32:3a:bf:d0:11:71:33:55:4e:31:7f:36:17:
20:70:13:58:78:b1:8a:98:35:88:99:2d:24:6b:88:71:21:68:
0b:a6:92:bb:15:34:43:bc:22:ec:03:06:ef:4f:fd:83:f7:05:
17:58:ee:fc:57:a7:4f:0d:8e:b7:98:30:ac:eb:19:7b:05:91:
a6:36:a5:12:b2:fa:23:0a:54:d5:8e:d6:85:6a:a3:dd:03:65:
d8:a4:8b:7c:6f:cc:76:2e:aa:ff:7b:b7:77:b4:65:93:5b:5e:
ff:d2:af:75:d6:2c:89:a4:3a:62:61:1d:d5:4a:f6:f2:45:6d:
d5:3e:9f:42:28:0f:d9:6f:52:ac:86:73:9b:3b:c5:2f:0e:d2:
0d:61:81:66:84:4d:d7:b7:10:a7:c6:e2:ff:9b:ff:1d:4f:8e:
a0:3c:be:76:ad:9b:09:13:8c:c0:79:05:de:2f:85:e1:24:e2:
51:20:82:e5:4a:a8:d4:e7:5d:b7:6d:7d:f2:e0:31:8c:b8:33:
7c:d0:8b:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zq9COdN0ZeABc/RFRfBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGFlYWUyOGE0MWZjNzQwMTBkMGJmYjgzZmQ4MGNhMzQ1
YzU3ZjkwHhcNMjUwMTMxMTAwMTEyWhcNMjUwMjAxMTAwMTEyWjAzMTEwLwYDVQQD
EygxMjY3NTJmZTM5YTRjYTQ2OTE1NWI5ZGFlYmZmZTFjOWVkMDM0NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwg55MPFXSpqZzvPt2aNUb2bb1Sb
2441rdhTgn6Kv5esKtX7JWOyqDVCVAuMHtqy+6pBEnFs+Ro7NlWsjwjTjqyuDivo
Gl1AcuCJq2JCimXMMGLjcIE1YVr9LD53gHYAsI4Y54k+m+cbF44bmuD8fpvtprtU
k9sm1OS93SX0hmP7KY81D/FuEEt8ZZ3N/NHiBUQu2Gt59i2b0G0PpQ3JHP8i3xtJ
BI3J91vuWoRW7IYLaxxUk0YGOkzQ6t+iCQmasVfTsmTyUR7oVmgK6du3QuhBT9/H
rBdhuz3zvEu93hGD3SHjaJdwbhdydibbVhu07WU3Cb/l2LmPJ4h+nXGFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJnUv45pMpGkVW52uv/4cntA0V6MB8GA1UdIwQY
MBaAFGTa6uKKQfx0AQ0L+4P9gMo0XFf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZWUyZmEtNjEzMS00N2ZhLWIxZTYt
NjVhMjQyMDAyMjcwLzEvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZWUyZmEtNjEzMS00N2ZhLWIxZTYtNjVhMjQyMDAyMjcw
LzEvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6cQ2QnM
klI787B4FG9KbcxS241lAvNrLopivpyEzGUWe9hYG38QQ5PMQS6Zi0HzOXtpn0IE
Uk8CswcyOr/QEXEzVU4xfzYXIHATWHixipg1iJktJGuIcSFoC6aSuxU0Q7wi7AMG
70/9g/cFF1ju/FenTw2Ot5gwrOsZewWRpjalErL6IwpU1Y7WhWqj3QNl2KSLfG/M
di6q/3u3d7Rlk1te/9KvddYsiaQ6YmEd1Ur28kVt1T6fQigP2W9SrIZzmzvFLw7S
DWGBZoRN17cQp8bi/5v/HU+OoDy+dq2bCROMwHkF3i+F4STiUSCC5Uqo1Oddt219
8uAxjLgzfNCL/g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:37 2025 by rpki-client