Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
File: CZoxZcQAepQBMaMnzHfMIhzBadk.mft (raw, json)
Hash identifier: qZ5RP0y5ugMdZZHC7m8NwGNZsqs2+a+Oy2H9V6QHiew=
Subject key identifier: B1:5D:5E:36:74:FC:E5:7D:29:2B:2F:DD:FF:D1:9A:85:49:B5:6B:33
Authority key identifier: 09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
Certificate issuer: /CN=099a3165c4007a940131a327cc77cc221cc169d9
Certificate serial: 0194BBCE2E04D650884972AB40A5E691126E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: CZoxZcQAepQBMaMnzHfMIhzBadk.crl (hash: PXde7P5Al0CwnS2t7EdrD6n0To21FwWUPLIjDeXTECE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:04:d6:50:88:49:72:ab:40:a5:e6:91:12:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a3165c4007a940131a327cc77cc221cc169d9
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=b15d5e3674fce57d292b2fddffd19a8549b56b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:77:8f:c8:f3:3c:f6:4a:81:c7:f1:bb:3a:
8c:4a:5b:10:f2:76:31:72:19:0f:53:d9:33:49:7f:
73:ff:1f:70:db:ef:26:72:6b:58:5a:27:e9:37:24:
dc:fa:96:09:fc:38:51:cb:73:81:ac:da:f5:e7:43:
45:4f:ce:aa:ab:a4:09:bc:a0:4d:8b:bb:4d:5f:63:
ad:b0:e4:e7:4b:10:b7:f0:ad:1d:96:09:c6:a9:6c:
df:43:26:56:73:39:d5:c4:a6:a7:bc:73:ea:ae:88:
15:64:72:1c:fc:5d:d3:15:df:dc:72:2a:7f:17:56:
da:dd:b4:3c:01:e0:20:dd:87:ff:4c:46:5b:8d:6c:
67:28:bb:b2:ed:70:b2:21:39:a5:0e:7c:4a:ce:ae:
87:b6:dc:a4:e5:e0:b4:dd:a3:51:83:eb:69:83:b6:
ee:5c:9e:74:da:57:1f:31:92:c9:d3:fc:77:0a:79:
38:61:05:b8:1d:70:b1:89:70:e1:67:a1:74:57:b4:
c2:f4:0f:32:4a:41:92:68:66:28:73:b4:2c:04:47:
34:37:1f:e1:13:3c:7a:a3:21:28:2f:8b:43:b9:1c:
81:19:fb:96:bf:81:f9:21:fd:1a:1b:25:06:86:ea:
46:d7:70:d4:84:76:5f:14:36:c5:be:59:40:90:d9:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:5E:36:74:FC:E5:7D:29:2B:2F:DD:FF:D1:9A:85:49:B5:6B:33
X509v3 Authority Key Identifier:
keyid:09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a9:d6:52:15:2a:cc:a8:95:0b:e0:8e:5d:0a:f7:94:d7:0a:
cb:73:18:6a:4a:e9:2d:a4:08:14:e9:1a:82:83:34:e1:d4:3c:
2d:d4:35:29:10:78:b5:ea:79:aa:30:a1:96:f1:18:6e:fa:1e:
77:43:94:5c:50:52:ef:60:70:d9:b9:80:be:17:d8:e4:cf:94:
90:8e:65:76:0e:9a:44:ed:0d:e6:fc:c7:5e:a5:e5:b0:f4:7a:
29:e5:fd:d4:ed:12:eb:3f:7b:d3:31:de:15:5f:49:e9:7c:39:
a3:af:5f:90:b0:17:ac:5e:0f:9b:b1:21:20:ab:47:61:f2:6b:
b8:fd:de:ba:b5:13:c5:bd:9c:3c:cb:6f:a2:b9:18:dd:33:7b:
ea:67:1e:aa:b9:64:2c:47:16:b6:f6:ec:36:7a:0f:7f:e9:1e:
5f:d0:7a:f7:55:ee:ec:16:e9:ee:86:ef:e1:2f:c3:16:b6:29:
c4:fa:2d:1c:25:ac:d5:25:f5:e0:dc:d1:b1:e8:1b:1d:c8:48:
27:38:df:e9:af:d3:8a:bd:a6:95:e1:bf:f6:d4:f1:ef:72:4d:
d1:bd:d8:77:d5:89:ef:a7:fa:16:5d:35:72:5d:57:1e:80:ec:
fe:25:a2:97:ad:1f:55:6c:ec:38:4c:5c:28:fa:27:d2:6c:2b:
85:24:69:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi4E1lCISXKrQKXmkRJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWEzMTY1YzQwMDdhOTQwMTMxYTMyN2NjNzdjYzIyMWNj
MTY5ZDkwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
EyhiMTVkNWUzNjc0ZmNlNTdkMjkyYjJmZGRmZmQxOWE4NTQ5YjU2YjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziZ3j8jzPPZKgcfxuzqMSlsQ8nYx
chkPU9kzSX9z/x9w2+8mcmtYWifpNyTc+pYJ/DhRy3OBrNr150NFT86qq6QJvKBN
i7tNX2OtsOTnSxC38K0dlgnGqWzfQyZWcznVxKanvHPqrogVZHIc/F3TFd/ccip/
F1ba3bQ8AeAg3Yf/TEZbjWxnKLuy7XCyITmlDnxKzq6Httyk5eC03aNRg+tpg7bu
XJ502lcfMZLJ0/x3Cnk4YQW4HXCxiXDhZ6F0V7TC9A8ySkGSaGYoc7QsBEc0Nx/h
Ezx6oyEoL4tDuRyBGfuWv4H5If0aGyUGhupG13DUhHZfFDbFvllAkNkbKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFdXjZ0/OV9KSsv3f/RmoVJtWszMB8GA1UdIwQY
MBaAFAmaMWXEAHqUATGjJ8x3zCIcwWnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pveFpjUUFlcFFCTWFNbnpIZk1JaHpCYWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMWYwYTAtZGEzYy00ZDk1LWE2Mzgt
NTA2NjcyNzY5ZDljLzEvQ1pveFpjUUFlcFFCTWFNbnpIZk1JaHpCYWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMWYwYTAtZGEzYy00ZDk1LWE2MzgtNTA2NjcyNzY5ZDlj
LzEvQ1pveFpjUUFlcFFCTWFNbnpIZk1JaHpCYWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYanWUhUq
zKiVC+COXQr3lNcKy3MYakrpLaQIFOkagoM04dQ8LdQ1KRB4tep5qjChlvEYbvoe
d0OUXFBS72Bw2bmAvhfY5M+UkI5ldg6aRO0N5vzHXqXlsPR6KeX91O0S6z970zHe
FV9J6Xw5o69fkLAXrF4Pm7EhIKtHYfJruP3eurUTxb2cPMtvorkY3TN76mceqrlk
LEcWtvbsNnoPf+keX9B691Xu7Bbp7obv4S/DFrYpxPotHCWs1SX14NzRsegbHchI
Jzjf6a/Tir2mleG/9tTx73JN0b3Yd9WJ76f6Fl01cl1XHoDs/iWil60fVWzsOExc
KPon0mwrhSRpZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:55 2025 by rpki-client