Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
File: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft (raw, json)
Hash identifier: 2dneYBy9hlK90a//yaCkw7VhyDb1I0PfSKKO1yrO1iQ=
Subject key identifier: 69:90:88:3A:0D:B6:52:2F:8F:C1:9D:78:1A:92:97:58:0F:5B:D8:22
Authority key identifier: CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
Certificate issuer: /CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Certificate serial: 0194BC3C63824F4C151EE00B539D19593964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
Manifest number: 39
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl (hash: RjEgxNjcNVsNtA9AJjVjNI4PLW6OaVel/nagn2sTMs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:63:82:4f:4c:15:1e:e0:0b:53:9d:19:59:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=6990883a0db6522f8fc19d781a9297580f5bd822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:6c:3c:9f:21:b3:ac:94:5f:ff:22:d6:30:
90:99:4c:46:3f:76:d6:b0:cc:4d:1e:f5:21:98:1e:
6b:b7:b5:15:c3:9b:25:99:4a:6e:41:4b:0f:d3:62:
7b:06:ae:cf:6d:d2:bd:9e:42:4c:51:75:b4:d2:2b:
d0:13:ee:26:0e:5c:f8:e1:93:bc:fd:6d:ad:9b:0a:
20:d3:56:c9:82:1f:20:69:c1:f3:98:bf:83:e8:5a:
92:37:2b:e5:9d:88:ce:92:59:40:58:52:a8:26:ef:
76:b2:18:ad:bd:c0:e0:47:86:5e:f6:0b:a0:9a:81:
2b:6a:02:30:25:19:bc:de:db:bb:b3:fe:f5:b6:a4:
c1:c8:d2:c8:2e:b8:b3:e9:e9:6f:db:20:2a:b4:7d:
99:46:84:81:c4:7d:d8:7f:4b:03:3b:7e:9a:58:bc:
54:b5:d4:20:22:74:bf:4b:39:25:9c:87:69:74:b7:
b0:62:7f:d7:0b:5e:45:dd:51:c1:b1:21:4f:c5:c4:
87:40:1b:9f:84:37:44:4f:a4:30:f5:c5:bd:f2:cb:
ba:62:d6:f6:bb:aa:b8:51:82:a3:01:a8:96:b1:25:
7e:d2:82:5c:88:c7:51:6f:7b:e3:a1:97:cb:77:a8:
7f:e8:87:67:de:cb:7c:22:c9:f0:c7:b1:d4:65:27:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:90:88:3A:0D:B6:52:2F:8F:C1:9D:78:1A:92:97:58:0F:5B:D8:22
X509v3 Authority Key Identifier:
keyid:CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b9:70:6c:eb:59:70:d2:c1:1f:96:0e:d0:14:6d:e6:40:6e:
4a:97:bb:46:f5:7f:49:51:3f:99:4a:30:5b:56:09:a1:90:2e:
fb:2f:95:ff:09:ea:e3:71:d1:b4:07:f9:1d:86:c9:d2:e1:7b:
98:5e:67:26:76:bc:8c:f8:d0:fe:77:82:71:56:0a:bc:f5:43:
d5:8e:37:ed:3f:df:40:f6:8e:4b:08:42:7a:41:e4:0a:8f:49:
5c:30:bc:68:7c:32:08:67:46:f3:ba:f0:d4:59:c6:5d:bd:be:
c1:f4:08:b1:49:af:c3:b6:76:b1:25:42:d7:c2:a1:0e:28:79:
87:51:8c:6f:3a:b2:71:a5:3e:8c:02:40:ca:42:0f:a2:b7:e5:
01:43:c1:b0:d6:ca:10:af:ef:f4:d0:e7:1d:f1:ab:14:fe:d8:
ab:da:9f:a3:4c:7d:7f:7d:8d:e1:53:9b:54:e7:63:38:4f:97:
80:8c:b0:04:f4:d1:2c:ef:42:b0:e9:90:d5:8f:4f:da:61:89:
55:02:eb:7f:3b:3a:3f:46:d7:7c:aa:95:84:3a:f4:1d:40:9e:
90:a7:39:0f:cf:08:38:81:25:2c:05:d3:1f:47:66:5f:bf:ad:
c3:52:2c:51:58:0a:b8:ce:6d:24:0d:57:1e:14:03:01:4f:a4:
80:e5:f4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGOCT0wVHuALU50ZWTlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlODFlMmQ1NmZkOWYxOTMyZGJjMGYyMTYzMjk5NDJmZTIz
Zjc1NWEwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
Eyg2OTkwODgzYTBkYjY1MjJmOGZjMTlkNzgxYTkyOTc1ODBmNWJkODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6hsPJ8hs6yUX/8i1jCQmUxGP3bW
sMxNHvUhmB5rt7UVw5slmUpuQUsP02J7Bq7PbdK9nkJMUXW00ivQE+4mDlz44ZO8
/W2tmwog01bJgh8gacHzmL+D6FqSNyvlnYjOkllAWFKoJu92shitvcDgR4Ze9gug
moEragIwJRm83tu7s/71tqTByNLILriz6elv2yAqtH2ZRoSBxH3Yf0sDO36aWLxU
tdQgInS/SzklnIdpdLewYn/XC15F3VHBsSFPxcSHQBufhDdET6Qw9cW98su6Ytb2
u6q4UYKjAaiWsSV+0oJciMdRb3vjoZfLd6h/6Idn3st8Isnwx7HUZSdQ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmQiDoNtlIvj8GdeBqSl1gPW9giMB8GA1UdIwQY
MBaAFM6B4tVv2fGTLbwPIWMplC/iP3VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMjBjZGMtYjFhNi00OThiLThjY2Mt
OTQ5M2E3NGI1Zjc1LzEvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jMjBjZGMtYjFhNi00OThiLThjY2MtOTQ5M2E3NGI1Zjc1
LzEvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLlwbOtZ
cNLBH5YO0BRt5kBuSpe7RvV/SVE/mUowW1YJoZAu+y+V/wnq43HRtAf5HYbJ0uF7
mF5nJna8jPjQ/neCcVYKvPVD1Y437T/fQPaOSwhCekHkCo9JXDC8aHwyCGdG87rw
1FnGXb2+wfQIsUmvw7Z2sSVC18KhDih5h1GMbzqycaU+jAJAykIPorflAUPBsNbK
EK/v9NDnHfGrFP7Yq9qfo0x9f32N4VObVOdjOE+XgIywBPTRLO9CsOmQ1Y9P2mGJ
VQLrfzs6P0bXfKqVhDr0HUCekKc5D88IOIElLAXTH0dmX7+tw1IsUVgKuM5tJA1X
HhQDAU+kgOX0YQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:38 2025 by rpki-client