Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: 2VZ44QVdzexGwOmR47YSw65OOzU8qF6ot5LN3d2ELhc=
Subject key identifier: 01:55:84:F7:32:10:2A:BF:C0:94:81:D9:5A:58:FA:12:02:C6:8B:2A
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 0194BC3C9A63C6DAAE7801D9F4BB609FB408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 12B7
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: C9GdcF48a3BR6ae8L2osQnMOOUFo413SgNXTA0wTszc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:63:c6:da:ae:78:01:d9:f4:bb:60:9f:b4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=015584f732102abfc09481d95a58fa1202c68b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:a6:fb:c4:c3:60:2b:e5:2c:a2:ef:1a:28:
3b:96:d0:33:cc:06:fd:02:b9:c8:80:23:30:1f:8b:
76:89:7b:c5:7d:87:c1:62:bf:5f:ce:95:39:8f:66:
62:49:ff:15:56:ce:26:80:48:ea:2b:d2:8d:48:b1:
4e:49:f1:05:47:34:1f:19:8c:bb:29:6d:93:97:0b:
62:71:22:46:2a:88:16:22:e8:94:47:67:e4:52:1e:
21:7c:f8:d8:53:31:f5:7b:be:85:27:b9:ed:a1:e5:
ba:6b:f0:5c:ed:7e:93:09:e5:24:8b:df:a9:3c:d9:
c5:d9:83:1e:b5:1c:df:36:ff:2b:f9:bf:c2:2c:c2:
d5:17:5a:d7:25:65:4d:e6:de:77:81:8e:08:cf:ce:
e4:5b:45:90:42:d0:24:44:b3:04:a5:a7:93:a9:60:
43:4f:33:0a:9c:a6:9d:a3:c8:9b:de:06:83:46:c6:
e9:9c:45:6e:0d:60:33:6a:74:ea:09:01:f4:9d:f1:
9b:c8:02:2d:91:69:58:7d:21:00:2d:10:ed:92:c0:
5a:ed:1c:4c:d8:bc:13:06:57:27:45:aa:ab:58:e4:
06:fa:9c:de:86:a5:3c:c4:0c:f9:80:6a:55:66:9a:
b9:19:80:2f:cb:5b:7f:f8:0a:08:98:c2:75:6d:c2:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:55:84:F7:32:10:2A:BF:C0:94:81:D9:5A:58:FA:12:02:C6:8B:2A
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:e5:23:93:61:8a:01:e9:e9:7c:18:48:c2:37:6b:9b:d4:
88:8f:b8:12:0e:38:ad:80:1f:5c:fc:3d:70:65:db:c3:52:a1:
89:84:9d:db:2d:e2:94:0b:83:37:6e:ee:e8:40:a4:66:8c:4f:
19:30:77:48:d5:f0:2b:3c:47:b6:d3:68:56:5a:a6:db:e5:9c:
cc:d6:9f:a4:57:f6:2a:1a:71:7c:86:e5:ae:b4:30:87:f6:34:
58:fd:48:7d:6f:a7:4f:5e:63:47:8a:4a:da:a7:83:ed:33:d0:
f5:55:df:52:97:59:be:24:c9:3b:31:7b:37:08:a9:11:87:51:
51:81:cb:75:7f:7f:0f:98:5e:77:00:fd:af:a4:2f:90:75:65:
ae:2a:cd:60:ab:5b:ee:1f:16:4b:53:20:90:33:92:8a:5a:ac:
d1:6d:ad:71:5d:69:7c:5f:e6:53:a5:c1:22:c6:99:75:31:b5:
eb:80:cf:00:3a:41:0e:f8:43:c1:26:7a:81:21:ec:55:c3:01:
e5:01:46:a5:e0:8a:69:50:20:76:b4:ce:d1:73:2e:99:e6:35:
fa:3d:3d:a9:03:df:bb:2c:49:7e:9f:ef:88:a7:02:af:43:5b:
67:f7:4c:00:1f:ee:38:8c:93:c7:c8:f4:d7:98:48:86:4e:33:
22:79:d0:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJpjxtqueAHZ9Ltgn7QIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh
MDI2NzgwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
EygwMTU1ODRmNzMyMTAyYWJmYzA5NDgxZDk1YTU4ZmExMjAyYzY4YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GGm+8TDYCvlLKLvGig7ltAzzAb9
ArnIgCMwH4t2iXvFfYfBYr9fzpU5j2ZiSf8VVs4mgEjqK9KNSLFOSfEFRzQfGYy7
KW2TlwticSJGKogWIuiUR2fkUh4hfPjYUzH1e76FJ7ntoeW6a/Bc7X6TCeUki9+p
PNnF2YMetRzfNv8r+b/CLMLVF1rXJWVN5t53gY4Iz87kW0WQQtAkRLMEpaeTqWBD
TzMKnKado8ib3gaDRsbpnEVuDWAzanTqCQH0nfGbyAItkWlYfSEALRDtksBa7RxM
2LwTBlcnRaqrWOQG+pzehqU8xAz5gGpVZpq5GYAvy1t/+AoImMJ1bcKpawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFVhPcyECq/wJSB2VpY+hICxosqMB8GA1UdIwQY
MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt
ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx
LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyvlI5Nh
igHp6XwYSMI3a5vUiI+4Eg44rYAfXPw9cGXbw1KhiYSd2y3ilAuDN27u6ECkZoxP
GTB3SNXwKzxHttNoVlqm2+WczNafpFf2KhpxfIblrrQwh/Y0WP1IfW+nT15jR4pK
2qeD7TPQ9VXfUpdZviTJOzF7NwipEYdRUYHLdX9/D5hedwD9r6QvkHVlrirNYKtb
7h8WS1MgkDOSilqs0W2tcV1pfF/mU6XBIsaZdTG164DPADpBDvhDwSZ6gSHsVcMB
5QFGpeCKaVAgdrTO0XMumeY1+j09qQPfuyxJfp/viKcCr0NbZ/dMAB/uOIyTx8j0
15hIhk4zInnQ8A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:06 2025 by rpki-client