Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: wl9l5wfqRTIgQBKFv69isuDzfFMfMpcVf/LahJeEsOw=
Subject key identifier: F8:8F:68:E5:92:F1:A1:C4:5A:00:E0:C3:F2:98:B5:E0:90:86:0B:10
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 0194BC72AFBDA92E341ECF1E6FC63E0B19D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: fVFpoW7r43PaQhDfuYyB77ANv5MIEWJqAm38oTfoch0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:af:bd:a9:2e:34:1e:cf:1e:6f:c6:3e:0b:19:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=f88f68e592f1a1c45a00e0c3f298b5e090860b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:6f:4e:28:e7:45:34:be:a8:3d:4b:9d:30:
41:a7:78:5a:3c:52:d7:e0:41:d5:01:b6:cb:1a:06:
23:e9:3c:4d:99:72:51:83:cc:7f:5d:bb:65:31:f8:
88:42:e2:77:b2:06:4c:fa:ed:d8:32:1f:1a:e7:53:
3a:b3:a1:8c:99:9a:f0:b8:10:cb:1a:7f:d4:72:d2:
48:a1:cf:17:9b:8b:94:18:b4:39:c0:6d:cb:4b:90:
f2:c0:77:8b:2a:d1:82:18:88:96:8b:bb:4c:54:40:
ea:22:5c:93:b4:e2:d9:9b:ae:7c:bc:d3:ca:9e:4b:
ec:e9:eb:c0:be:a2:ba:9e:e5:a5:01:e9:be:d8:64:
26:3d:ea:cf:1e:ed:f7:4a:de:d8:2c:f8:dd:a7:93:
34:44:8a:8a:7a:83:38:76:8f:0f:62:97:d7:a1:d5:
d3:0f:1d:17:69:ff:97:38:55:d4:fd:9e:0e:58:fb:
a2:a6:e3:ca:98:4e:3e:4c:45:4f:88:30:a0:38:a9:
14:9f:5c:2e:f3:e1:73:b7:d4:0f:fb:d1:f1:55:d6:
10:b6:3b:54:c4:ea:3a:a0:0d:2e:f2:9f:89:1c:fe:
10:3c:d7:12:26:01:a4:ad:73:82:ad:4f:dc:ba:c2:
de:3f:99:ed:1d:42:38:c2:3e:2a:bd:d0:3a:ae:4d:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:68:E5:92:F1:A1:C4:5A:00:E0:C3:F2:98:B5:E0:90:86:0B:10
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:15:f4:f4:4e:79:26:19:e2:8b:20:cd:e1:bd:eb:b4:c3:39:
d5:7d:04:4b:25:da:a1:64:f6:70:db:b8:77:9c:e7:bf:db:27:
1b:22:f8:6c:03:72:79:3f:36:ca:e2:6b:dd:6e:04:59:a1:89:
f5:0a:82:e0:82:ca:04:96:24:85:73:67:43:28:5d:16:2c:24:
9d:9f:43:fd:34:e1:f5:4a:fd:e4:ba:b5:18:b2:7a:7c:bf:f0:
99:61:28:08:07:c8:e0:51:67:d6:0e:14:86:0a:9d:eb:f1:3b:
f7:be:1a:dc:fc:92:6b:20:31:d3:39:87:b8:bc:00:4e:24:87:
1d:03:2f:bd:aa:fa:83:6b:3d:e2:3f:40:b5:1e:2e:2c:86:05:
08:46:6f:ae:87:da:bc:99:1d:4c:22:36:49:27:cc:26:09:c1:
03:fb:80:81:ce:ed:67:de:a4:41:36:c0:bf:61:ee:f6:a3:52:
06:dc:75:e7:73:99:17:d3:d3:c7:eb:11:b9:7e:8a:6f:92:c2:
cb:b8:de:64:c0:9b:74:42:2a:be:ca:fe:da:28:f1:8d:1a:a4:
ec:da:b9:f6:dc:4f:04:7c:c2:bf:75:7c:12:73:fe:30:92:63:
01:25:54:dc:ce:dc:90:40:ea:f9:8a:09:a2:5f:a0:1b:02:62:
30:38:92:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cq+9qS40Hs8eb8Y+CxnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NzBjOWI5NDA1NzQ4ZDI2NTQ4ZmQ1ZmNhN2E2NGEwMzhk
NTgxMmQwHhcNMjUwMTMxMTMwMDIwWhcNMjUwMjAxMTMwMDIwWjAzMTEwLwYDVQQD
EyhmODhmNjhlNTkyZjFhMWM0NWEwMGUwYzNmMjk4YjVlMDkwODYwYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PlvTijnRTS+qD1LnTBBp3haPFLX
4EHVAbbLGgYj6TxNmXJRg8x/XbtlMfiIQuJ3sgZM+u3YMh8a51M6s6GMmZrwuBDL
Gn/UctJIoc8Xm4uUGLQ5wG3LS5DywHeLKtGCGIiWi7tMVEDqIlyTtOLZm658vNPK
nkvs6evAvqK6nuWlAem+2GQmPerPHu33St7YLPjdp5M0RIqKeoM4do8PYpfXodXT
Dx0Xaf+XOFXU/Z4OWPuipuPKmE4+TEVPiDCgOKkUn1wu8+Fzt9QP+9HxVdYQtjtU
xOo6oA0u8p+JHP4QPNcSJgGkrXOCrU/cusLeP5ntHUI4wj4qvdA6rk2XBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiPaOWS8aHEWgDgw/KYteCQhgsQMB8GA1UdIwQY
MBaAFGdwyblAV0jSZUj9X8p6ZKA41YEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUt
MTQ4ODc4NzZhYTBlLzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUtMTQ4ODc4NzZhYTBl
LzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRX09E55
JhniiyDN4b3rtMM51X0ESyXaoWT2cNu4d5znv9snGyL4bANyeT82yuJr3W4EWaGJ
9QqC4ILKBJYkhXNnQyhdFiwknZ9D/TTh9Ur95Lq1GLJ6fL/wmWEoCAfI4FFn1g4U
hgqd6/E7974a3PySayAx0zmHuLwATiSHHQMvvar6g2s94j9AtR4uLIYFCEZvrofa
vJkdTCI2SSfMJgnBA/uAgc7tZ96kQTbAv2Hu9qNSBtx153OZF9PTx+sRuX6Kb5LC
y7jeZMCbdEIqvsr+2ijxjRqk7Nq59txPBHzCv3V8EnP+MJJjASVU3M7ckEDq+YoJ
ol+gGwJiMDiSPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:17 2025 by rpki-client