Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: jBG8T+9sSUWC6fP5dXjCHpfBFYb8KMwVyqSiE7SROmM=
Subject key identifier: 80:8F:98:B3:BE:4A:0F:1B:F1:4C:82:F3:BC:D2:D9:5E:FE:AD:F0:CD
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 0194BBCE3FE1BBC63B859B8187FCD2615AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: Yz+3FiXnQuJqEvzDdmG2nRUiyqXLB4p60vj4eXEUWRc=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3f:e1:bb:c6:3b:85:9b:81:87:fc:d2:61:5a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=808f98b3be4a0f1bf14c82f3bcd2d95efeadf0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:ac:db:0b:91:fa:89:5e:d0:56:a1:c9:31:
70:94:c2:6f:0d:74:db:48:3f:e2:13:2b:44:76:9d:
b1:58:60:96:5a:12:e5:b9:4d:a9:25:87:f5:43:6e:
7d:5f:8c:76:d1:14:11:24:b9:1b:5a:f6:98:10:7a:
84:ba:e3:6a:d2:29:35:c5:89:9c:d7:d2:03:0e:03:
b3:1e:5a:35:88:f2:a6:e1:2c:fc:29:12:74:3c:be:
de:4d:83:de:bb:6e:7a:8c:9b:4a:60:c4:a1:17:40:
03:e4:46:ab:81:a9:f1:0b:14:f7:4b:f6:43:9b:76:
f4:4e:5a:6e:2c:2e:04:be:10:ad:bd:fb:6d:2d:9a:
7e:6a:9e:b5:a0:54:5b:e7:e8:51:e2:69:e1:41:4a:
d8:b6:16:30:06:44:9a:47:e8:0b:02:c7:cc:4b:67:
36:d1:fb:1b:0b:7c:c6:1f:8f:f9:29:77:e6:25:dc:
57:e9:5a:aa:c8:98:94:09:71:88:70:c6:3d:07:f6:
44:32:d0:b1:3f:69:ff:9c:f4:3d:3a:09:d0:22:2f:
3f:09:bb:f5:f7:dd:43:f3:6c:cb:ca:a1:53:fb:23:
61:c5:44:3f:9a:70:bb:d2:6c:0f:07:9d:55:a3:ab:
c2:ae:b3:91:27:64:51:ba:52:bd:16:48:e6:61:2f:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:98:B3:BE:4A:0F:1B:F1:4C:82:F3:BC:D2:D9:5E:FE:AD:F0:CD
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:91:da:e2:1f:e4:26:9b:96:39:8d:db:0a:9a:d9:62:52:
f8:77:e3:b4:5a:09:4f:23:5b:a8:33:99:90:5c:62:a9:d4:c3:
83:fe:0d:7d:fb:21:51:0e:a2:18:ae:ad:9b:56:b1:62:61:69:
d3:5c:ff:37:14:c8:fc:3c:e3:e6:fa:05:41:4d:49:ab:74:b7:
d6:8f:37:62:0c:4a:4d:99:84:7c:78:ba:3a:ec:b9:c5:ab:1e:
86:9e:07:5c:8e:55:87:78:dd:c6:5b:5e:47:ed:cd:4e:28:d4:
cd:a6:e4:bd:df:f8:95:45:2d:70:3b:98:cd:a7:ff:7f:cf:89:
3a:ad:e8:49:55:01:35:a8:34:ca:8e:1a:98:14:c1:73:ba:92:
27:53:92:34:45:ed:8a:7c:6e:e4:5a:55:19:2f:d3:5b:f5:a1:
0e:16:44:c9:b9:f6:ac:8f:4c:32:5a:e2:8f:26:08:a8:5f:0c:
3e:2f:3d:49:03:95:b5:46:3f:8f:21:67:44:28:4f:98:9c:52:
bd:29:37:36:5a:17:2f:fb:5a:48:14:03:77:2e:23:09:28:ee:
92:9c:a3:52:95:0c:4f:30:27:fd:6d:37:30:66:cb:1a:aa:06:
cb:47:16:bf:10:a8:9a:42:85:ff:7f:63:4a:3e:85:ac:61:bf:
8e:40:bd:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zj/hu8Y7hZuBh/zSYVrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy
ZjhmN2IwHhcNMjUwMTMxMTAwMDQzWhcNMjUwMjAxMTAwMDQzWjAzMTEwLwYDVQQD
Eyg4MDhmOThiM2JlNGEwZjFiZjE0YzgyZjNiY2QyZDk1ZWZlYWRmMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW2s2wuR+ole0FahyTFwlMJvDXTb
SD/iEytEdp2xWGCWWhLluU2pJYf1Q259X4x20RQRJLkbWvaYEHqEuuNq0ik1xYmc
19IDDgOzHlo1iPKm4Sz8KRJ0PL7eTYPeu256jJtKYMShF0AD5EarganxCxT3S/ZD
m3b0TlpuLC4EvhCtvfttLZp+ap61oFRb5+hR4mnhQUrYthYwBkSaR+gLAsfMS2c2
0fsbC3zGH4/5KXfmJdxX6VqqyJiUCXGIcMY9B/ZEMtCxP2n/nPQ9OgnQIi8/Cbv1
991D82zLyqFT+yNhxUQ/mnC70mwPB51Vo6vCrrORJ2RRulK9FkjmYS/XEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICPmLO+Sg8b8UyC87zS2V7+rfDNMB8GA1UdIwQY
MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt
ZjNmN2JkMzFhMGZlLzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl
LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaiR2uIf
5CabljmN2wqa2WJS+HfjtFoJTyNbqDOZkFxiqdTDg/4NffshUQ6iGK6tm1axYmFp
01z/NxTI/Dzj5voFQU1Jq3S31o83YgxKTZmEfHi6Ouy5xasehp4HXI5Vh3jdxlte
R+3NTijUzabkvd/4lUUtcDuYzaf/f8+JOq3oSVUBNag0yo4amBTBc7qSJ1OSNEXt
inxu5FpVGS/TW/WhDhZEybn2rI9MMlrijyYIqF8MPi89SQOVtUY/jyFnRChPmJxS
vSk3NloXL/taSBQDdy4jCSjukpyjUpUMTzAn/W03MGbLGqoGy0cWvxComkKF/39j
Sj6FrGG/jkC9mA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:04 2025 by rpki-client