Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: /RnGOTybs/EaQhwEYBcQVZ4btieuTTKbsWTL1M6gPW4=
Subject key identifier: FD:88:81:99:9A:3D:EE:B1:2E:AB:FA:58:C2:EA:2B:00:6C:35:5B:D2
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 0194BD4E46DEDF025D90ECFB7AFE74EB0C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 0F6D
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: xQqFP3hGrf8LHGtFwsR/9FvkS1Nm7+Ic1MBTXEjV648=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:de:df:02:5d:90:ec:fb:7a:fe:74:eb:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=fd8881999a3deeb12eabfa58c2ea2b006c355bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:b1:df:19:2c:a0:c4:1e:74:6b:cc:93:41:
4e:c6:2b:c6:cf:8a:32:57:a8:e1:d7:98:c0:5c:b0:
e7:90:7b:89:f9:8f:46:74:cf:09:1d:04:c7:9b:10:
8d:5a:85:6b:7b:c1:6e:21:44:78:b3:42:e7:4d:b9:
29:12:68:ee:ec:71:67:67:3e:96:03:09:2e:0b:a7:
71:db:ff:58:2b:9d:4e:38:e9:01:01:03:44:c0:c8:
cd:e9:0e:df:9f:f9:e0:cc:c5:28:ba:97:f1:a5:79:
9d:f3:0a:5a:7e:61:9f:0f:e1:84:90:93:2e:c6:5d:
35:8b:ce:98:43:73:62:0f:1c:6f:de:ed:07:7d:69:
a5:ae:6e:7c:50:6f:95:5e:9e:5c:52:24:cf:b2:25:
8e:78:25:e3:50:da:dd:87:8b:c0:cc:1d:df:65:b2:
0b:6b:ef:a6:83:dc:9a:8d:b6:9e:39:fa:1f:15:ba:
6b:36:2a:33:41:91:7a:7f:a7:a0:36:fc:24:25:d9:
f6:1b:be:fb:e9:eb:22:35:92:33:79:66:6e:ca:ae:
77:c6:37:be:5b:56:27:79:1e:aa:fa:94:37:57:bc:
79:42:0d:49:68:e0:d3:b3:22:f6:d5:67:ea:89:0e:
ba:a7:37:74:96:ac:7c:83:d0:3f:b5:d2:29:09:37:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:81:99:9A:3D:EE:B1:2E:AB:FA:58:C2:EA:2B:00:6C:35:5B:D2
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:27:45:fc:ba:fe:22:98:1e:be:d3:7b:e5:b0:0e:7e:d3:61:
e8:0b:f1:ee:43:1c:c3:10:32:05:5a:53:b1:83:12:c1:9d:12:
73:2b:2a:bc:8f:fd:bb:56:0a:9b:df:9a:0c:9b:67:bd:65:53:
82:f5:65:a7:b2:d0:7b:9e:55:2e:1d:f0:cc:cc:69:b3:8d:33:
83:f5:54:27:7e:65:64:63:ee:e4:a7:42:7a:f9:ab:9c:e3:76:
bc:bd:33:dc:44:d9:df:9d:cb:76:d6:9a:9d:3c:0e:6e:73:5e:
8f:08:c9:00:17:65:88:ff:cc:2c:bc:cb:36:21:70:19:15:b5:
c3:a9:00:2f:66:b1:db:5d:ad:4c:c6:e8:7e:c8:70:e7:a1:13:
f5:ae:9c:64:ff:56:ba:6a:42:a2:04:c1:20:44:7d:bd:7e:99:
16:31:1e:21:05:ec:f2:eb:6b:7d:8c:a8:97:0c:61:3c:23:86:
07:39:cd:31:cb:06:dc:d6:35:ed:41:eb:ec:20:f7:30:3d:83:
43:3f:f0:f4:0c:82:72:13:0f:a7:1d:2d:4d:a3:f4:2b:28:2d:
ac:7f:ff:6d:aa:18:95:43:5d:31:c4:cf:a9:01:49:6b:65:5f:
5c:1a:c1:da:aa:10:bf:46:14:93:28:0b:89:6c:6c:30:7a:a7:
f0:0a:69:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tkbe3wJdkOz7ev506wxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjUwMTMxMTcwMDExWhcNMjUwMjAxMTcwMDExWjAzMTEwLwYDVQQD
EyhmZDg4ODE5OTlhM2RlZWIxMmVhYmZhNThjMmVhMmIwMDZjMzU1YmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Ox3xksoMQedGvMk0FOxivGz4oy
V6jh15jAXLDnkHuJ+Y9GdM8JHQTHmxCNWoVre8FuIUR4s0LnTbkpEmju7HFnZz6W
AwkuC6dx2/9YK51OOOkBAQNEwMjN6Q7fn/ngzMUoupfxpXmd8wpafmGfD+GEkJMu
xl01i86YQ3NiDxxv3u0HfWmlrm58UG+VXp5cUiTPsiWOeCXjUNrdh4vAzB3fZbIL
a++mg9yajbaeOfofFbprNiozQZF6f6egNvwkJdn2G7776esiNZIzeWZuyq53xje+
W1YneR6q+pQ3V7x5Qg1JaODTsyL21WfqiQ66pzd0lqx8g9A/tdIpCTd+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2IgZmaPe6xLqv6WMLqKwBsNVvSMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMidF/Lr+
IpgevtN75bAOftNh6Avx7kMcwxAyBVpTsYMSwZ0ScysqvI/9u1YKm9+aDJtnvWVT
gvVlp7LQe55VLh3wzMxps40zg/VUJ35lZGPu5KdCevmrnON2vL0z3ETZ353Ldtaa
nTwObnNejwjJABdliP/MLLzLNiFwGRW1w6kAL2ax212tTMbofshw56ET9a6cZP9W
umpCogTBIER9vX6ZFjEeIQXs8utrfYyolwxhPCOGBznNMcsG3NY17UHr7CD3MD2D
Qz/w9AyCchMPpx0tTaP0KygtrH//baoYlUNdMcTPqQFJa2VfXBrB2qoQv0YUkygL
iWxsMHqn8AppPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:09 2025 by rpki-client