Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 8lEpfuFrsvjqoHhf+8SkS2nTmyZnJ81LiILkWDHUN90=
Subject key identifier: 49:79:92:95:AD:20:C4:01:35:FC:8A:2A:D6:E8:72:22:71:6F:1D:92
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 0194BC3BEB130C02E41B233B686606622DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: QyHGuWXByMjmzcPcktmWXGmEV974zExZOg6UXOzZNgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:13:0c:02:e4:1b:23:3b:68:66:06:62:2d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=49799295ad20c40135fc8a2ad6e87222716f1d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:70:62:8d:bb:f3:5a:9b:6c:6b:5e:ba:7d:
96:da:9d:e9:f6:09:62:3b:3e:5c:ce:a7:20:e8:78:
9b:a3:71:ca:5f:df:78:1b:ee:6f:d6:a7:6f:6b:e2:
e6:a8:69:cb:e9:2e:ce:37:cf:4e:ca:08:91:c3:ee:
2a:d7:f3:72:8a:e5:db:02:8f:bf:71:bd:97:bf:ad:
80:d4:4f:5c:b7:71:85:3d:37:22:50:d3:5d:cf:7a:
09:f4:e6:06:ca:49:57:65:e6:d0:c2:a1:68:aa:5d:
df:da:c8:c4:9b:ad:d0:82:f9:41:fb:c5:a7:c4:56:
f9:13:c4:44:a0:c9:b3:79:d1:e4:46:2b:0b:4d:9d:
e1:62:48:dd:7a:14:fa:dc:a9:a5:87:9f:9a:09:ca:
65:b8:48:d4:c4:27:bd:e3:17:d9:6d:1a:16:ec:b2:
84:79:00:01:22:47:5c:9d:6a:7c:c8:b2:6c:0b:ea:
0f:c1:ed:a5:7c:d9:c4:c5:ff:65:d0:0f:61:ae:3c:
65:70:ea:92:b4:63:f8:8c:98:7b:6b:15:38:a2:64:
84:33:d7:5b:2e:5e:73:49:f2:7f:0e:b6:e7:7e:d6:
75:35:88:a2:3c:61:e7:69:95:9a:38:bd:5c:0c:1f:
5c:4c:3f:91:4c:42:a5:da:33:74:64:be:a1:3c:51:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:92:95:AD:20:C4:01:35:FC:8A:2A:D6:E8:72:22:71:6F:1D:92
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:71:63:5f:39:83:27:91:74:96:5a:c0:c4:70:6c:c6:ca:a9:
ad:75:23:c6:01:ae:47:9e:6f:de:3d:96:4a:d7:9c:e8:91:e2:
0f:35:4b:04:0b:97:ba:9a:b3:1d:6f:0c:e8:b8:94:a0:b9:48:
f5:f4:88:1c:a9:90:9e:14:ba:79:db:1e:f1:e7:c9:d9:cb:ff:
a2:9c:a2:70:ad:38:a5:30:06:24:7d:11:1e:13:ff:b2:37:1b:
75:12:5f:3c:6e:06:cc:7f:59:9f:4c:6d:f3:47:cc:20:b6:45:
f7:01:85:37:4f:a5:3b:b3:70:ae:61:1e:3e:a7:93:ea:46:07:
de:b6:e8:59:f3:1c:cf:fe:dc:5d:e8:66:6c:c6:42:ca:08:38:
d2:5a:bc:43:65:90:79:3d:92:b6:b7:5a:24:35:00:b0:96:72:
04:c7:c5:44:7c:b9:cb:c7:8c:14:c8:34:27:ac:91:06:f9:3e:
93:64:d0:15:df:25:80:00:5b:1e:f0:10:1e:82:2e:34:06:1e:
29:7a:30:0d:eb:e4:b5:b3:ba:f5:14:b8:63:34:a8:7b:64:af:
57:2f:07:fe:3c:15:7d:33:8d:7e:cc:77:a0:dc:7c:31:a0:3f:
4d:cc:e2:3f:da:9b:0c:b1:20:76:38:9c:69:9a:2a:c1:46:98:
1f:da:7a:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+sTDALkGyM7aGYGYi3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy
ZDU5ODYwHhcNMjUwMTMxMTIwMDMwWhcNMjUwMjAxMTIwMDMwWjAzMTEwLwYDVQQD
Eyg0OTc5OTI5NWFkMjBjNDAxMzVmYzhhMmFkNmU4NzIyMjcxNmYxZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4dwYo2781qbbGteun2W2p3p9gli
Oz5czqcg6Hibo3HKX994G+5v1qdva+LmqGnL6S7ON89OygiRw+4q1/NyiuXbAo+/
cb2Xv62A1E9ct3GFPTciUNNdz3oJ9OYGyklXZebQwqFoql3f2sjEm63QgvlB+8Wn
xFb5E8REoMmzedHkRisLTZ3hYkjdehT63Kmlh5+aCcpluEjUxCe94xfZbRoW7LKE
eQABIkdcnWp8yLJsC+oPwe2lfNnExf9l0A9hrjxlcOqStGP4jJh7axU4omSEM9db
Ll5zSfJ/DrbnftZ1NYiiPGHnaZWaOL1cDB9cTD+RTEKl2jN0ZL6hPFG+2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl5kpWtIMQBNfyKKtbociJxbx2SMB8GA1UdIwQY
MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt
NmJjODM5NDY1NmI3LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3
LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnFjXzmD
J5F0llrAxHBsxsqprXUjxgGuR55v3j2WStec6JHiDzVLBAuXupqzHW8M6LiUoLlI
9fSIHKmQnhS6edse8efJ2cv/opyicK04pTAGJH0RHhP/sjcbdRJfPG4GzH9Zn0xt
80fMILZF9wGFN0+lO7NwrmEePqeT6kYH3rboWfMcz/7cXehmbMZCygg40lq8Q2WQ
eT2StrdaJDUAsJZyBMfFRHy5y8eMFMg0J6yRBvk+k2TQFd8lgABbHvAQHoIuNAYe
KXowDevktbO69RS4YzSoe2SvVy8H/jwVfTONfsx3oNx8MaA/TcziP9qbDLEgdjic
aZoqwUaYH9p6Gg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:19 2025 by rpki-client