Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: 5gMDoR2QHGYWuqHoxTdcOLQ/Lk/fGqZH6yNShxlrsy8=
Subject key identifier: CE:28:16:8C:7B:82:3A:F4:46:38:6A:72:1F:59:80:65:4E:B7:A0:BA
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 0194BC72D15D05488FC9E689A4DBC0E41F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 11C8
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: bv46QZ/cpyzGgNBZ2fjuOZ+v1fpLmgqrYWEo7F0sROU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d1:5d:05:48:8f:c9:e6:89:a4:db:c0:e4:1f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=ce28168c7b823af446386a721f5980654eb7a0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:c3:6d:3f:db:80:b1:ba:60:98:94:2b:26:
2c:2b:39:41:f0:20:89:64:fc:8c:fb:5f:59:e8:65:
98:36:b4:1f:e2:ae:ef:1b:b4:46:ec:fd:ee:f8:66:
93:f5:61:dd:49:6d:5a:60:85:8a:80:da:16:66:90:
ee:ae:69:12:90:ea:68:ff:1b:a3:f7:62:2d:a0:fb:
da:48:a6:15:ed:eb:47:b8:34:1f:fd:8c:fd:3c:9b:
7d:1d:0e:bc:a7:52:af:48:ae:a4:81:53:a2:6d:2b:
9d:95:3f:8d:33:55:76:99:87:04:8d:06:01:8c:e4:
5a:1b:ac:50:16:5d:97:dd:a2:91:f5:2c:50:a9:1e:
95:19:15:63:b3:60:d9:3d:60:04:ad:7a:d2:ee:00:
d2:90:06:0d:57:32:55:23:c6:9f:97:08:55:d0:e4:
84:3a:06:1a:8c:01:61:d9:15:76:0d:2d:12:bd:8f:
e4:15:04:3c:2d:33:03:5a:b4:51:2f:fb:33:0d:67:
14:07:a0:99:83:3b:42:88:b7:a0:c0:61:e0:ec:e3:
fc:0d:d7:92:d8:a8:02:cd:d3:e8:3f:38:e6:00:1a:
2e:57:fd:b7:12:d0:0b:09:1a:cc:53:68:6b:2b:7b:
fc:98:ce:06:c4:5c:1d:db:34:e5:64:2c:6b:29:bb:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:16:8C:7B:82:3A:F4:46:38:6A:72:1F:59:80:65:4E:B7:A0:BA
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:62:41:30:e2:ec:69:3e:af:0f:93:cd:ee:ff:d1:43:8a:5b:
66:40:3e:0a:3b:f0:9f:da:27:5d:b6:f4:b7:2c:48:2f:32:2e:
e5:fa:57:2f:67:f1:f7:52:8a:c5:3d:e6:42:e5:26:db:df:62:
36:f3:34:1e:d8:d9:c3:59:45:42:a0:c3:14:e3:a7:70:60:b8:
df:c9:f8:b8:e0:d4:02:f4:32:c3:ef:59:ac:4a:c0:a9:58:9a:
e7:d1:b0:61:96:6a:02:2b:21:c3:64:ea:b3:90:96:6c:fe:b8:
c4:cd:f7:ba:1a:f5:58:8c:e6:14:42:47:e8:ba:c5:6f:e7:80:
ab:ca:46:c0:30:df:4b:4c:ca:20:b6:c2:8e:c5:fb:f0:fc:67:
76:39:b7:22:7a:09:e7:dc:f4:08:3c:8e:eb:c5:fe:66:4a:76:
01:1f:70:5f:9d:3a:32:90:a0:15:6a:21:a6:2e:4f:ce:a9:bc:
d9:4b:e7:24:f1:09:8e:64:bf:2a:5e:ec:32:49:e4:20:be:9a:
2e:5e:f3:35:28:ae:4e:d7:f5:6e:ee:06:3b:61:7c:43:59:24:
0e:a0:54:bb:9a:5e:f3:2a:00:97:eb:ea:96:b8:07:d5:9e:7c:
17:56:c2:c5:e9:a6:cd:8b:27:6f:c9:70:06:ed:63:94:9a:c0:
94:17:75:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctFdBUiPyeaJpNvA5B+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOWExY2JlOWIwYjRiYTdiNDdkNDJhYWQ2NzI1NzE0ODRl
NTU5NWYwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
EyhjZTI4MTY4YzdiODIzYWY0NDYzODZhNzIxZjU5ODA2NTRlYjdhMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xjDbT/bgLG6YJiUKyYsKzlB8CCJ
ZPyM+19Z6GWYNrQf4q7vG7RG7P3u+GaT9WHdSW1aYIWKgNoWZpDurmkSkOpo/xuj
92ItoPvaSKYV7etHuDQf/Yz9PJt9HQ68p1KvSK6kgVOibSudlT+NM1V2mYcEjQYB
jORaG6xQFl2X3aKR9SxQqR6VGRVjs2DZPWAErXrS7gDSkAYNVzJVI8aflwhV0OSE
OgYajAFh2RV2DS0SvY/kFQQ8LTMDWrRRL/szDWcUB6CZgztCiLegwGHg7OP8DdeS
2KgCzdPoPzjmABouV/23EtALCRrMU2hrK3v8mM4GxFwd2zTlZCxrKbu4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4oFox7gjr0Rjhqch9ZgGVOt6C6MB8GA1UdIwQY
MBaAFM2aHL6bC0untH1CqtZyVxSE5VlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgt
N2UxZWYyMTU2NjQ4LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgtN2UxZWYyMTU2NjQ4
LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2JBMOLs
aT6vD5PN7v/RQ4pbZkA+Cjvwn9onXbb0tyxILzIu5fpXL2fx91KKxT3mQuUm299i
NvM0HtjZw1lFQqDDFOOncGC438n4uODUAvQyw+9ZrErAqVia59GwYZZqAishw2Tq
s5CWbP64xM33uhr1WIzmFEJH6LrFb+eAq8pGwDDfS0zKILbCjsX78Pxndjm3InoJ
59z0CDyO68X+Zkp2AR9wX506MpCgFWohpi5Pzqm82UvnJPEJjmS/Kl7sMknkIL6a
Ll7zNSiuTtf1bu4GO2F8Q1kkDqBUu5pe8yoAl+vqlrgH1Z58F1bCxemmzYsnb8lw
Bu1jlJrAlBd1rA==
-----END CERTIFICATE-----
Generated at Thu May 1 07:19:14 2025 by rpki-client