Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: W8q1g7+xC3W/EZt4mX1TE/L5zc8dFVLrTrWJN6O+jjE=
Subject key identifier: AA:50:FC:36:7E:91:A7:DF:70:19:E9:59:F0:99:7F:15:13:9A:BD:A4
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 0194BC730FA4486447BE14166CEF18FFE54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: kbmXvFbTUHNiMQ/XAqriLzDE+HDQ9uKawAEPnTIsD8U=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:a4:48:64:47:be:14:16:6c:ef:18:ff:e5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=aa50fc367e91a7df7019e959f0997f15139abda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:ab:6c:cd:08:d6:74:8e:1b:3e:dc:a4:96:
a2:52:1d:66:25:ed:f7:67:7c:04:fc:b5:b1:75:1f:
0f:5e:14:5a:ba:c9:58:ed:a4:84:5f:8d:53:17:e9:
82:1f:23:0a:01:5e:e0:89:15:aa:43:28:12:e6:3a:
f8:24:f3:d3:92:02:ca:1a:e3:a0:6d:f3:df:14:01:
8c:1d:48:ee:19:cc:72:28:45:54:da:79:f9:34:4b:
c7:e7:20:94:90:4d:3d:4e:cb:c9:df:87:45:d1:02:
dc:81:0b:db:4b:80:a6:ff:22:3b:98:e4:25:0e:0e:
18:a1:69:6f:28:5c:46:57:15:13:e5:8c:55:86:43:
cb:ef:1f:c2:15:fa:a6:00:65:7c:1f:15:99:4b:fd:
9b:dc:44:b2:71:51:4a:ee:29:6a:80:58:2b:7a:5a:
a6:81:69:07:9d:3b:c3:89:bd:23:1a:8b:e1:13:46:
78:31:ac:56:f4:31:73:39:5e:9a:5e:d5:79:e0:f4:
ab:d3:d6:75:de:78:01:43:7c:58:9a:81:4c:4a:8b:
9d:e2:3b:3f:ca:71:81:6a:77:ab:ca:a2:2f:3f:eb:
27:80:91:38:12:7e:8c:84:4e:b4:d1:cf:7d:a4:54:
22:40:02:c9:48:30:01:01:0e:6b:32:40:c8:fe:14:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:50:FC:36:7E:91:A7:DF:70:19:E9:59:F0:99:7F:15:13:9A:BD:A4
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:81:7c:dd:ff:60:df:3e:38:ea:81:57:b8:5a:9a:23:d1:89:
2f:4a:9e:59:af:d3:e1:93:36:83:bb:a2:40:44:a2:ba:f6:3a:
68:e4:fe:d8:90:67:9a:84:5a:13:22:04:81:95:5a:94:02:71:
61:73:3e:ae:52:30:7e:50:3a:25:10:a5:33:42:5d:54:45:bb:
e7:b9:0e:54:2c:9e:c3:61:6c:42:c7:f7:4d:2d:ab:29:8e:79:
cf:9d:c9:ef:5d:23:ab:87:85:2d:25:08:64:c2:34:ce:32:f0:
93:12:b6:d8:d9:7a:ef:02:bc:8f:4e:ab:81:50:bd:a4:8b:5c:
cb:a3:7e:64:a0:63:84:8a:6d:2b:f2:20:69:20:c5:75:d2:b7:
b9:2b:98:35:a9:33:6c:43:9f:dd:63:40:b0:73:ac:aa:fa:14:
e0:40:03:d9:05:fd:e7:90:c4:3f:3e:35:b8:11:8f:22:09:dd:
f0:82:7e:7e:7a:ba:24:84:58:26:80:12:74:f7:89:9b:07:4e:
79:46:94:c2:f3:40:84:65:24:75:e1:04:41:b2:b0:e5:83:3e:
f6:c9:93:36:5b:a7:e2:89:fa:f8:59:c9:24:86:18:47:21:0b:
08:e6:de:a4:84:38:cd:3d:73:73:33:85:0e:84:b0:53:3e:30:
17:08:b9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cw+kSGRHvhQWbO8Y/+VPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh
NmNhMjgwHhcNMjUwMTMxMTMwMDQ0WhcNMjUwMjAxMTMwMDQ0WjAzMTEwLwYDVQQD
EyhhYTUwZmMzNjdlOTFhN2RmNzAxOWU5NTlmMDk5N2YxNTEzOWFiZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucyrbM0I1nSOGz7cpJaiUh1mJe33
Z3wE/LWxdR8PXhRauslY7aSEX41TF+mCHyMKAV7giRWqQygS5jr4JPPTkgLKGuOg
bfPfFAGMHUjuGcxyKEVU2nn5NEvH5yCUkE09TsvJ34dF0QLcgQvbS4Cm/yI7mOQl
Dg4YoWlvKFxGVxUT5YxVhkPL7x/CFfqmAGV8HxWZS/2b3ESycVFK7ilqgFgrelqm
gWkHnTvDib0jGovhE0Z4MaxW9DFzOV6aXtV54PSr09Z13ngBQ3xYmoFMSoud4js/
ynGBaneryqIvP+sngJE4En6MhE600c99pFQiQALJSDABAQ5rMkDI/hQNKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpQ/DZ+kaffcBnpWfCZfxUTmr2kMB8GA1UdIwQY
MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt
YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh
LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4F83f9g
3z446oFXuFqaI9GJL0qeWa/T4ZM2g7uiQESiuvY6aOT+2JBnmoRaEyIEgZValAJx
YXM+rlIwflA6JRClM0JdVEW757kOVCyew2FsQsf3TS2rKY55z53J710jq4eFLSUI
ZMI0zjLwkxK22Nl67wK8j06rgVC9pItcy6N+ZKBjhIptK/IgaSDFddK3uSuYNakz
bEOf3WNAsHOsqvoU4EAD2QX955DEPz41uBGPIgnd8IJ+fnq6JIRYJoASdPeJmwdO
eUaUwvNAhGUkdeEEQbKw5YM+9smTNlun4on6+FnJJIYYRyELCObepIQ4zT1zczOF
DoSwUz4wFwi5yw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:22 2025 by rpki-client