Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft
File: 1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft (raw, json)
Hash identifier: tExxUhn7EcwrrvozjgGXWsiEsl3JazunSPkMOEBMoQo=
Subject key identifier: B6:24:25:38:D5:67:D4:3C:D5:E7:F2:48:7C:56:F5:89:82:31:4B:3E
Authority key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Certificate issuer: /CN=f998035895f95549c2cdaac3f005446cbdd11c02
Certificate serial: 018AC0D83B4ABB5C4DDB12C3A135A4720DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft
Manifest number: 0F01
Signing time: Sat 23 Sep 2023 07:01:50 +0000
Manifest this update: Sat 23 Sep 2023 07:01:50 +0000
Manifest next update: Sun 24 Sep 2023 07:01:50 +0000
Files and hashes: 1: 1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl (hash: 3bh9vQr3q/3BaHkblkuQREwSldtcK2DQ11BKZdPwG0A=)
2: 1Qf2ZO-GF3gQbdLltBr4X8ZdLAY.roa (hash: 0VoMApJGXbPDUuJG0CXXllydUQm3XtN7rnzuLUb27do=)
3: huu3eCtyLYszV41lNAiqQHEYB3g.roa (hash: ISpTwmf4iTCGLfHrmVw+iyN5Mvg1S1fX3svF3/eJLvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:d8:3b:4a:bb:5c:4d:db:12:c3:a1:35:a4:72:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Validity
Not Before: Sep 23 07:01:50 2023 GMT
Not After : Sep 24 07:01:50 2023 GMT
Subject: CN=b6242538d567d43cd5e7f2487c56f58982314b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f4:bc:57:66:ff:f7:12:6c:ab:c0:21:52:6f:
2c:3c:69:ff:01:ea:08:5d:24:e5:7a:bb:f7:ec:2d:
bf:fd:95:17:bb:68:6c:85:49:14:51:3e:36:a5:98:
e5:09:0e:e5:dc:c9:78:d3:29:77:27:38:2c:18:dd:
b6:f6:53:42:2d:28:80:8f:63:a8:77:fe:12:ac:b8:
ea:ab:75:cd:66:98:69:83:fc:c1:2e:a0:ef:24:9c:
7b:b6:86:49:53:cb:d8:ea:9d:cc:c8:d9:24:6f:60:
bc:03:2c:3c:e9:42:b6:7c:5b:04:bb:ba:3b:04:fa:
c3:8e:b4:76:a4:31:b2:c5:77:71:ed:b0:8d:04:60:
de:dc:85:5d:f8:fe:b8:6d:5f:4a:9e:f0:5f:4b:7d:
90:d0:84:d4:24:23:04:30:4b:1f:6e:10:22:3d:02:
38:4f:3e:a1:7d:54:26:32:f0:13:6b:0e:e1:99:02:
09:d1:55:99:64:b2:7d:9a:26:01:aa:73:9d:d5:93:
6f:18:39:6c:be:16:25:55:92:9d:ec:51:73:3c:eb:
5b:13:e5:18:ae:af:e1:97:06:30:5d:1e:63:af:5d:
be:6b:3c:68:3c:2c:cb:c2:a2:98:cb:bc:6f:c2:ac:
6f:cf:dd:6c:4f:3f:18:07:96:85:fb:d0:87:89:65:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:25:38:D5:67:D4:3C:D5:E7:F2:48:7C:56:F5:89:82:31:4B:3E
X509v3 Authority Key Identifier:
keyid:F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:66:8d:8d:6b:43:b3:71:66:2d:fc:48:00:57:8c:5e:cf:df:
25:66:a4:2d:82:30:98:5c:d9:50:1a:f4:63:fa:5a:a6:5f:0b:
74:69:36:89:d5:2a:be:c9:70:2c:6a:33:97:eb:75:c7:65:06:
f1:0b:9f:13:ae:a2:98:97:00:10:9c:81:b1:4d:f1:b4:51:40:
17:80:42:93:52:52:47:63:5c:d8:f3:2f:7b:cd:b2:fd:0f:85:
91:74:48:06:34:c8:10:15:80:01:4b:90:6b:38:e7:bc:56:6e:
a5:93:71:e8:93:bc:88:7a:a1:45:b5:32:1f:bc:96:ec:62:0a:
46:ff:3c:bb:16:d9:bd:e1:18:46:8c:7a:3c:9e:72:3d:cc:5c:
66:00:c5:54:61:f0:f4:32:d7:4e:4a:68:da:13:53:5b:0e:f0:
90:1c:08:d6:de:45:93:01:6b:6a:6c:14:af:2c:da:42:bf:d0:
65:37:73:ff:d5:45:9f:3b:48:9e:25:a8:43:fc:0d:f7:fa:43:
c3:e0:65:3a:ef:bd:1d:c6:5d:bf:6c:1c:9e:93:fe:ff:e3:4b:
8c:40:33:7f:34:9f:1d:6c:62:2c:09:78:f8:9b:cc:05:3e:58:
a6:3e:e8:56:0f:62:6b:22:e8:bb:dd:ff:36:0a:77:83:10:29:
13:19:7d:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYrA2DtKu1xN2xLDoTWkcg3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OTgwMzU4OTVmOTU1NDljMmNkYWFjM2YwMDU0NDZjYmRk
MTFjMDIwHhcNMjMwOTIzMDcwMTUwWhcNMjMwOTI0MDcwMTUwWjAzMTEwLwYDVQQD
EyhiNjI0MjUzOGQ1NjdkNDNjZDVlN2YyNDg3YzU2ZjU4OTgyMzE0YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fS8V2b/9xJsq8AhUm8sPGn/AeoI
XSTlerv37C2//ZUXu2hshUkUUT42pZjlCQ7l3Ml40yl3JzgsGN229lNCLSiAj2Oo
d/4SrLjqq3XNZphpg/zBLqDvJJx7toZJU8vY6p3MyNkkb2C8Ayw86UK2fFsEu7o7
BPrDjrR2pDGyxXdx7bCNBGDe3IVd+P64bV9KnvBfS32Q0ITUJCMEMEsfbhAiPQI4
Tz6hfVQmMvATaw7hmQIJ0VWZZLJ9miYBqnOd1ZNvGDlsvhYlVZKd7FFzPOtbE+UY
rq/hlwYwXR5jr12+azxoPCzLwqKYy7xvwqxvz91sTz8YB5aF+9CHiWXpNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLYkJTjVZ9Q81efySHxW9YmCMUs+MB8GA1UdIwQY
MBaAFPmYA1iV+VVJws2qw/AFRGy90RwCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aZ0RXSlg1VlVuQ3phckQ4QVZFYkwzUkhBSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvODdjM2VlLWQwODYtNDU1OS05MGQ0
LWYzYmE5ZTdlYzc4Zi8xLzEtWmdEV0pYNVZVbkN6YXJEOEFWRWJMM1JIQUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA0Lzg3YzNlZS1kMDg2LTQ1NTktOTBkNC1mM2JhOWU3ZWM3
OGYvMS8xLVpnRFdKWDVWVW5DemFyRDhBVkViTDNSSEFJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmaN
jWtDs3FmLfxIAFeMXs/fJWakLYIwmFzZUBr0Y/papl8LdGk2idUqvslwLGozl+t1
x2UG8QufE66imJcAEJyBsU3xtFFAF4BCk1JSR2Nc2PMve82y/Q+FkXRIBjTIEBWA
AUuQazjnvFZupZNx6JO8iHqhRbUyH7yW7GIKRv88uxbZveEYRox6PJ5yPcxcZgDF
VGHw9DLXTkpo2hNTWw7wkBwI1t5FkwFramwUryzaQr/QZTdz/9VFnztIniWoQ/wN
9/pDw+BlOu+9HcZdv2wcnpP+/+NLjEAzfzSfHWxiLAl4+JvMBT5Ypj7oVg9iayLo
u93/Ngp3gxApExl9QA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:17 2025 by rpki-client