Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
File: rzA4pxexVOHPpHEWgy2ibyiyowQ.mft (raw, json)
Hash identifier: MFySJs3Nqsa9UE9G4pIlCT98TC1ASLJGEK92vHQhV8I=
Subject key identifier: 01:83:41:96:0B:AD:CE:6F:FC:36:15:F5:91:88:E8:FC:1A:E0:8D:5C
Authority key identifier: AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
Certificate issuer: /CN=af3038a717b154e1cfa47116832da26f28b2a304
Certificate serial: 0194BC3BCECE0D22BA4745341D63E4C0FD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 9-nqsKi4Ev5jKkuKWzG_WIBo83k.roa (hash: SHAm2ssxR7ZkFZ7Brw788jEHfHi8MZS6JxMLuTDqDJs=)
2: rzA4pxexVOHPpHEWgy2ibyiyowQ.crl (hash: KCCv+/7uCRVoqoDKPppav3xm4Qdri1v+/pss81F7ZFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ce:ce:0d:22:ba:47:45:34:1d:63:e4:c0:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3038a717b154e1cfa47116832da26f28b2a304
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=018341960badce6ffc3615f59188e8fc1ae08d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:d8:0d:6d:b0:41:52:0f:2b:de:5c:4f:9b:
c4:d9:80:f7:f6:40:f6:c4:47:63:27:32:23:39:cd:
6b:62:d1:2f:ec:1f:69:66:94:98:1b:e5:31:4e:68:
8d:1a:b7:df:ff:70:fa:a3:64:ad:5f:ec:b8:83:fd:
cd:2f:29:fb:57:01:98:99:01:aa:06:2e:9f:19:11:
5c:25:1d:35:cf:71:60:c3:ff:07:95:90:52:75:3f:
62:e6:52:73:80:d0:70:86:03:48:c7:10:da:34:f2:
1a:69:52:26:a6:00:cc:b4:41:5e:28:8b:d7:c8:55:
61:b5:75:9b:70:0a:72:3e:b4:13:54:77:10:95:50:
a3:97:12:08:4e:b0:89:1d:66:cf:1e:dd:9b:56:63:
65:d0:01:97:8a:7c:20:49:8c:19:76:26:09:30:f6:
12:ab:db:90:f3:30:c5:d0:b4:e8:ed:f6:15:e2:17:
78:19:cc:54:e4:1c:df:a4:c2:e6:c8:b5:bd:37:56:
09:0e:34:7a:0c:93:ed:8e:1b:28:5b:8c:93:cb:4a:
df:3d:69:55:3d:a6:35:66:20:6a:21:de:9d:09:60:
21:fb:7f:1c:5a:53:44:66:a0:99:2c:1a:73:e8:2b:
f4:13:f2:26:19:7d:cc:cc:d9:8b:30:54:6c:7d:8b:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:41:96:0B:AD:CE:6F:FC:36:15:F5:91:88:E8:FC:1A:E0:8D:5C
X509v3 Authority Key Identifier:
keyid:AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:aa:5e:57:e4:e3:e4:68:1d:ad:71:8f:ea:a4:7d:21:2f:
1d:28:05:45:03:88:44:33:a6:eb:9c:2d:1a:b0:f1:8c:71:a8:
73:66:13:77:59:2e:cf:40:82:0a:10:cf:07:6e:d6:15:0f:06:
ea:94:24:b3:60:54:35:5f:f3:9b:24:a9:78:dd:6f:cf:53:13:
6b:ad:16:fb:40:8e:7f:b8:fe:f1:53:80:76:b7:b7:f8:dd:3e:
fc:0c:03:92:a2:32:56:5b:a7:02:b5:8c:b5:ae:03:db:cd:d3:
62:d8:ee:ae:0b:99:b6:2b:f5:6d:ae:f6:fb:cd:48:da:c9:1d:
d9:10:8b:22:92:54:ef:ed:3d:ca:7d:bc:3c:77:49:d9:b6:f1:
b2:b8:00:b7:a2:51:a8:6b:0a:9f:1a:51:03:cb:df:f3:fb:10:
ae:bc:22:8d:03:a4:5e:6d:47:27:88:6e:58:ba:18:c7:88:7e:
e3:7c:aa:0e:12:94:7f:7b:cb:90:09:16:e4:2d:4a:6a:65:a9:
ba:ae:bc:6d:42:64:73:21:bc:a3:ea:dd:83:89:de:86:2e:3d:
81:57:e3:24:17:2e:66:74:fd:db:bb:8e:42:20:5d:85:c6:ce:
18:af:f5:80:10:5f:4d:71:0a:dc:d4:52:2d:e3:97:ed:4d:7a:
6f:64:34:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O87ODSK6R0U0HWPkwP2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMzAzOGE3MTdiMTU0ZTFjZmE0NzExNjgzMmRhMjZmMjhi
MmEzMDQwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
EygwMTgzNDE5NjBiYWRjZTZmZmMzNjE1ZjU5MTg4ZThmYzFhZTA4ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmDYDW2wQVIPK95cT5vE2YD39kD2
xEdjJzIjOc1rYtEv7B9pZpSYG+UxTmiNGrff/3D6o2StX+y4g/3NLyn7VwGYmQGq
Bi6fGRFcJR01z3Fgw/8HlZBSdT9i5lJzgNBwhgNIxxDaNPIaaVImpgDMtEFeKIvX
yFVhtXWbcApyPrQTVHcQlVCjlxIITrCJHWbPHt2bVmNl0AGXinwgSYwZdiYJMPYS
q9uQ8zDF0LTo7fYV4hd4GcxU5BzfpMLmyLW9N1YJDjR6DJPtjhsoW4yTy0rfPWlV
PaY1ZiBqId6dCWAh+38cWlNEZqCZLBpz6Cv0E/ImGX3MzNmLMFRsfYtuBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGDQZYLrc5v/DYV9ZGI6Pwa4I1cMB8GA1UdIwQY
MBaAFK8wOKcXsVThz6RxFoMtom8osqMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnpBNHB4ZXhWT0hQcEhFV2d5MmlieWl5b3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82Y2ZiNzgtNjNiYy00ODIwLWI5MDMt
ODYwYzQ5ZDBlYjZhLzEvcnpBNHB4ZXhWT0hQcEhFV2d5MmlieWl5b3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82Y2ZiNzgtNjNiYy00ODIwLWI5MDMtODYwYzQ5ZDBlYjZh
LzEvcnpBNHB4ZXhWT0hQcEhFV2d5MmlieWl5b3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPeqXlfk
4+RoHa1xj+qkfSEvHSgFRQOIRDOm65wtGrDxjHGoc2YTd1kuz0CCChDPB27WFQ8G
6pQks2BUNV/zmySpeN1vz1MTa60W+0COf7j+8VOAdre3+N0+/AwDkqIyVlunArWM
ta4D283TYtjurguZtiv1ba72+81I2skd2RCLIpJU7+09yn28PHdJ2bbxsrgAt6JR
qGsKnxpRA8vf8/sQrrwijQOkXm1HJ4huWLoYx4h+43yqDhKUf3vLkAkW5C1KamWp
uq68bUJkcyG8o+rdg4nehi49gVfjJBcuZnT927uOQiBdhcbOGK/1gBBfTXEK3NRS
LeOX7U16b2Q0JA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:25 2025 by rpki-client