Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: B49c2msz1HOK08l3JKNPyQA5du76NpWO/i+X/l/h8Bs=
Subject key identifier: 0B:4D:EF:F7:39:DC:31:60:16:5D:3C:78:09:2F:82:FE:C1:F7:4C:E6
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 0194BCA9F1EC6DB4130FF94D9BC0EE4FC594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 043E
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: CgnO/pxpKvcyjXNLd7jRnKlxtO/6tnMprt1J0rN//RE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:ec:6d:b4:13:0f:f9:4d:9b:c0:ee:4f:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=0b4deff739dc3160165d3c78092f82fec1f74ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:bf:87:27:a3:3f:57:43:17:02:21:db:63:
d5:a7:89:34:64:7b:fc:b1:f3:85:38:fa:56:53:fa:
20:25:3e:ee:0b:6b:8e:61:33:c8:b0:34:dd:30:db:
f3:6f:f8:28:e4:8a:49:2d:77:99:1b:0a:f3:83:09:
2b:b3:ce:f1:19:2c:5c:39:9d:3a:26:04:c0:b2:a9:
af:a3:55:70:cc:d3:d4:93:41:95:80:35:03:79:88:
12:fb:5a:c6:c8:44:e1:b4:a9:02:74:a1:63:cb:e2:
ba:1a:ad:4c:6d:df:92:50:9d:4a:65:7c:5e:26:0c:
75:1d:2f:97:05:c7:51:fe:bb:af:3d:ac:a2:da:ec:
70:fb:b2:11:16:cb:ad:c5:2a:5a:d2:f3:b8:f4:6a:
bf:87:65:55:f5:cf:0a:a6:28:b8:8f:86:b5:0d:7a:
9e:03:9b:fa:43:ee:26:e4:42:f3:62:6d:4f:d3:e7:
78:68:07:a1:f3:c3:79:5d:27:8e:de:d3:2a:75:a7:
ab:82:18:6b:fb:a2:b8:ec:a9:b7:82:ce:f3:fd:6e:
4a:da:da:3c:53:48:e0:6f:c0:a1:b2:b2:11:55:15:
ea:0d:c2:f5:43:58:02:7b:6f:2b:2f:92:6e:11:5f:
e2:3a:97:8f:ad:9e:6e:0b:b1:ac:fb:d2:78:65:e7:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4D:EF:F7:39:DC:31:60:16:5D:3C:78:09:2F:82:FE:C1:F7:4C:E6
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:8d:81:59:24:93:69:8d:16:17:89:89:49:49:cd:88:62:
5c:dc:c2:7e:29:ac:b1:bd:1b:9f:7f:2a:91:61:ff:00:67:75:
a0:c5:6f:42:6a:f8:79:25:e7:28:0f:fd:f9:83:86:c8:67:71:
c7:48:9f:b1:44:43:fd:9b:55:6c:47:10:aa:fd:ed:98:56:17:
c4:cb:1a:8d:9d:60:82:9a:49:46:6b:a8:e6:c2:4b:be:bb:81:
dc:27:8d:06:59:c1:bf:cf:8e:47:be:f9:b5:3a:29:b1:3d:9a:
fe:ab:54:8d:94:97:24:b5:82:93:15:8f:ff:ec:09:39:10:ad:
02:c2:f9:0f:1f:d4:b9:10:e0:bf:0a:5d:b6:02:63:08:e3:80:
c0:4b:0c:8f:64:fe:56:65:43:6f:0a:15:66:2e:90:90:de:42:
c4:23:c9:1b:4d:27:f8:f8:4e:23:17:db:f3:25:86:4a:c7:f4:
32:06:c6:ab:1d:7d:56:a7:f2:38:cf:91:74:ba:7e:bd:9c:98:
56:7a:ac:71:b3:c8:c2:b9:df:cd:9e:03:28:d0:f5:da:ff:c7:
93:7e:44:51:33:21:45:3c:0b:69:a2:b0:18:b4:2e:9a:c0:41:
cc:60:1b:61:fa:f7:b1:33:10:d6:83:01:c7:ee:ac:d0:1b:c0:
8d:36:37:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfHsbbQTD/lNm8DuT8WUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjUwMTMxMTQwMDQxWhcNMjUwMjAxMTQwMDQxWjAzMTEwLwYDVQQD
EygwYjRkZWZmNzM5ZGMzMTYwMTY1ZDNjNzgwOTJmODJmZWMxZjc0Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9K/hyejP1dDFwIh22PVp4k0ZHv8
sfOFOPpWU/ogJT7uC2uOYTPIsDTdMNvzb/go5IpJLXeZGwrzgwkrs87xGSxcOZ06
JgTAsqmvo1VwzNPUk0GVgDUDeYgS+1rGyEThtKkCdKFjy+K6Gq1Mbd+SUJ1KZXxe
Jgx1HS+XBcdR/ruvPayi2uxw+7IRFsutxSpa0vO49Gq/h2VV9c8Kpii4j4a1DXqe
A5v6Q+4m5ELzYm1P0+d4aAeh88N5XSeO3tMqdaerghhr+6K47Km3gs7z/W5K2to8
U0jgb8ChsrIRVRXqDcL1Q1gCe28rL5JuEV/iOpePrZ5uC7Gs+9J4ZedTkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtN7/c53DFgFl08eAkvgv7B90zmMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTeNgVkk
k2mNFheJiUlJzYhiXNzCfimssb0bn38qkWH/AGd1oMVvQmr4eSXnKA/9+YOGyGdx
x0ifsURD/ZtVbEcQqv3tmFYXxMsajZ1ggppJRmuo5sJLvruB3CeNBlnBv8+OR775
tTopsT2a/qtUjZSXJLWCkxWP/+wJORCtAsL5Dx/UuRDgvwpdtgJjCOOAwEsMj2T+
VmVDbwoVZi6QkN5CxCPJG00n+PhOIxfb8yWGSsf0MgbGqx19VqfyOM+RdLp+vZyY
VnqscbPIwrnfzZ4DKND12v/Hk35EUTMhRTwLaaKwGLQumsBBzGAbYfr3sTMQ1oMB
x+6s0BvAjTY3Hg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:22 2025 by rpki-client