Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
File: MzNh-6hAkXT7PEgrjKJvI169IsI.mft (raw, json)
Hash identifier: MEQOO1bToThePYKUbSti68fFYEL4gSkKrqignc799hs=
Subject key identifier: E8:5A:E0:BC:F0:68:D1:B2:35:E6:A4:40:87:70:9C:05:E9:9F:8E:2B
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0195E0B41CA6241946B6F92C57FD86497A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
Manifest number: 1179
Signing time: Sat 29 Mar 2025 07:00:54 +0000
Manifest this update: Sat 29 Mar 2025 07:00:54 +0000
Manifest next update: Sun 30 Mar 2025 07:00:54 +0000
Files and hashes: 1: 7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa (hash: RlyXBzHmtsm995ENs8O6yiu+NFUTpzrFveSmekzl2mQ=)
2: MzNh-6hAkXT7PEgrjKJvI169IsI.crl (hash: dxet/+lIt/URK30hd8EU/GCpdvbESF6tutji22KypzY=)
3: eL7L2yvUaHUcrqYa9YfSEkCrZQ0.roa (hash: hRmFfXusSA4yPVBPDkdUWWukYfa7ZjWi3ll24wVEEEs=)
4: rZcv-swn7039blCdnkHsmvuTEE0.roa (hash: YkjIIueA3tSkus+TXP81fG/yVykEarWy1n4j2aCv7FI=)
5: redZ5Lo-6i46yM5qdUMWwkSisZE.roa (hash: HxevwAQ5SK1xf86uDMqoDN6xfryXXeJR1/gwiD3DlWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:1c:a6:24:19:46:b6:f9:2c:57:fd:86:49:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Mar 29 07:00:54 2025 GMT
Not After : Mar 30 07:00:54 2025 GMT
Subject: CN=e85ae0bcf068d1b235e6a44087709c05e99f8e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:5d:9b:39:3d:ae:45:ff:b2:a4:37:93:99:
a3:25:ac:4c:db:3b:fd:cd:61:c5:2e:f4:50:08:0e:
fd:c1:e8:c5:3c:46:c0:26:42:bc:3f:b9:9e:4e:bb:
87:83:0c:2a:d4:e5:d7:70:e9:46:76:6c:3f:85:d3:
4a:b1:f8:e1:ae:43:00:68:19:79:7c:5e:53:1c:4b:
ab:4d:6a:14:8c:0d:29:a5:d2:4f:07:93:42:05:b9:
05:1c:68:ad:5a:a0:e6:71:7d:18:bb:35:4b:7c:1a:
1c:56:9f:41:ab:ca:c9:81:bb:56:d1:83:bb:4d:e5:
3e:cd:21:2a:55:0d:92:85:05:a4:d7:9f:2c:76:52:
74:d7:80:c9:6f:85:85:e8:bd:7f:6a:3f:d8:33:15:
45:4d:c8:70:c1:e0:bb:a0:8f:f1:57:a0:31:72:02:
7b:ed:46:54:f8:24:84:a4:a5:6b:3d:5c:47:5e:86:
5b:56:eb:9f:0a:1e:1d:84:b3:bb:00:9a:f2:54:65:
c1:a9:a8:f2:08:5f:6f:ff:15:89:9d:0f:d4:f8:19:
8b:ac:f4:84:e5:17:fb:97:0c:04:ae:c5:1c:e7:be:
2d:0b:3c:63:34:c9:ce:35:8c:d8:2e:9d:b6:84:cd:
22:5a:bb:5c:aa:84:0f:4c:04:2c:eb:03:36:5a:6e:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:E0:BC:F0:68:D1:B2:35:E6:A4:40:87:70:9C:05:E9:9F:8E:2B
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d8:9c:e8:49:e1:c1:12:76:68:bf:b0:2f:bd:ae:10:8b:d2:
78:be:ff:a8:df:31:43:5a:40:e8:08:cc:a9:1d:0d:07:e1:03:
52:95:8b:ed:d2:c2:49:bb:75:06:3f:dc:6d:77:c0:c7:9e:92:
6a:ca:a5:0f:03:e9:fd:84:04:41:bb:06:fb:56:90:1f:3a:a5:
d8:6e:f4:bc:ae:db:df:9a:90:6f:df:a4:97:9f:54:86:b7:f8:
49:01:40:0b:b8:74:57:8f:50:c1:10:e1:19:6f:cf:9a:05:47:
77:75:a7:55:a4:dd:30:0a:82:c2:76:fd:52:34:0a:e4:a3:f8:
9e:0b:ff:b1:9a:90:ba:04:03:b1:38:96:08:e9:ee:90:28:b0:
d5:e9:d1:92:1d:0a:18:da:28:e2:48:1a:ad:db:34:2a:2d:cd:
5d:bb:11:c9:f6:c1:21:6a:6a:06:08:d5:22:72:a5:79:0f:4c:
6a:14:fe:75:bd:fc:5e:ec:6b:4f:c4:5f:9c:76:57:52:57:0b:
40:d9:4d:44:21:94:f4:45:8b:fc:98:4c:eb:41:4d:a0:38:05:
64:65:f2:c2:a6:06:71:03:e9:ba:dd:aa:aa:3d:11:47:79:f3:
c9:58:db:f3:9c:77:c1:b0:10:8e:6e:51:0f:47:35:31:fb:1a:
a3:b9:e3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtBymJBlGtvksV/2GSXqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzM2MWZiYTg0MDkxNzRmYjNjNDgyYjhjYTI2ZjIzNWVi
ZDIyYzIwHhcNMjUwMzI5MDcwMDU0WhcNMjUwMzMwMDcwMDU0WjAzMTEwLwYDVQQD
EyhlODVhZTBiY2YwNjhkMWIyMzVlNmE0NDA4NzcwOWMwNWU5OWY4ZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Fdmzk9rkX/sqQ3k5mjJaxM2zv9
zWHFLvRQCA79wejFPEbAJkK8P7meTruHgwwq1OXXcOlGdmw/hdNKsfjhrkMAaBl5
fF5THEurTWoUjA0ppdJPB5NCBbkFHGitWqDmcX0YuzVLfBocVp9Bq8rJgbtW0YO7
TeU+zSEqVQ2ShQWk158sdlJ014DJb4WF6L1/aj/YMxVFTchwweC7oI/xV6AxcgJ7
7UZU+CSEpKVrPVxHXoZbVuufCh4dhLO7AJryVGXBqajyCF9v/xWJnQ/U+BmLrPSE
5Rf7lwwErsUc574tCzxjNMnONYzYLp22hM0iWrtcqoQPTAQs6wM2Wm63+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOha4LzwaNGyNeakQIdwnAXpn44rMB8GA1UdIwQY
MBaAFDMzYfuoQJF0+zxIK4yibyNevSLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjkt
YjJjY2NmMGVhZGFiLzEvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjktYjJjY2NmMGVhZGFi
LzEvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNic6Enh
wRJ2aL+wL72uEIvSeL7/qN8xQ1pA6AjMqR0NB+EDUpWL7dLCSbt1Bj/cbXfAx56S
asqlDwPp/YQEQbsG+1aQHzql2G70vK7b35qQb9+kl59Uhrf4SQFAC7h0V49QwRDh
GW/PmgVHd3WnVaTdMAqCwnb9UjQK5KP4ngv/sZqQugQDsTiWCOnukCiw1enRkh0K
GNoo4kgards0Ki3NXbsRyfbBIWpqBgjVInKleQ9MahT+db38XuxrT8RfnHZXUlcL
QNlNRCGU9EWL/JhM60FNoDgFZGXywqYGcQPput2qqj0RR3nzyVjb85x3wbAQjm5R
D0c1Mfsao7nj6Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:19:13 2025 by rpki-client