Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: YvoIUyqCoDgURRD4CFyJ/Gh/kFgioRoldlbhIsPC/iA=
Subject key identifier: FD:FD:D7:7A:8F:0E:7A:97:EC:D5:D0:E1:EF:48:34:F1:B0:25:E0:F7
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 0195E1903C6E03DDA7763CACE66EE743AC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 08AB
Signing time: Sat 29 Mar 2025 11:01:20 +0000
Manifest this update: Sat 29 Mar 2025 11:01:20 +0000
Manifest next update: Sun 30 Mar 2025 11:01:20 +0000
Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: hwgbAyuYWycYaCWbFSwesC8o2EbLCt9JPCt/WJcg2AQ=)
2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:3c:6e:03:dd:a7:76:3c:ac:e6:6e:e7:43:ac:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Mar 29 11:01:20 2025 GMT
Not After : Mar 30 11:01:20 2025 GMT
Subject: CN=fdfdd77a8f0e7a97ecd5d0e1ef4834f1b025e0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:ec:f9:35:af:f0:78:81:4d:16:63:9f:5e:
c6:fb:98:ef:bf:96:b0:58:88:9d:ff:c0:7d:85:58:
d6:5a:60:93:ba:45:87:2c:0a:f2:7d:2e:d9:72:7a:
1e:cb:a2:e2:82:7d:89:c2:53:ef:c2:5a:84:ed:6d:
b9:da:3b:5e:ad:b7:65:7f:f0:0e:8f:94:13:85:c3:
ba:8c:57:3d:a8:5d:7d:73:9b:e7:4b:08:19:e6:6d:
b8:ac:12:1c:fe:db:6f:fc:65:9f:d7:0b:a6:1b:28:
97:2e:83:0a:9c:5c:bc:35:e6:e9:a8:66:1e:f2:ff:
fc:42:2e:35:66:b9:cf:52:c6:21:5a:c3:99:01:a4:
2c:8d:5e:cc:26:2c:e5:0a:2e:70:77:d7:62:5c:a4:
f7:e1:cc:38:23:f6:28:2f:d7:5e:3a:8d:ef:14:27:
62:d5:81:e4:8c:ef:0d:e0:1a:02:99:66:9f:8f:2e:
5f:75:a0:d1:c2:a0:24:22:95:4b:e7:37:ca:9e:bc:
99:b2:8a:69:c6:6d:79:74:94:e6:97:77:13:f5:24:
83:88:2c:9b:aa:d7:a3:be:a2:55:d4:2e:07:cf:75:
d0:3a:36:c6:ae:d2:53:77:be:68:78:fb:a0:c5:85:
87:37:be:ca:80:d7:8b:a4:28:c8:4e:f6:48:51:3b:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:D7:7A:8F:0E:7A:97:EC:D5:D0:E1:EF:48:34:F1:B0:25:E0:F7
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:23:89:5a:43:62:ff:cd:c3:4c:ae:c0:bc:7a:9b:2c:62:30:
e6:0b:6f:fb:ab:7a:d6:b6:2c:8e:b1:54:57:9f:42:af:87:72:
ee:15:06:26:dd:e3:e5:d0:2d:5f:54:5c:71:75:cc:54:42:5f:
0d:d3:13:97:12:54:6f:99:2f:77:0e:60:ef:d7:37:37:a8:f5:
4b:d4:41:19:f1:60:09:02:3a:9e:11:e4:f8:7a:9a:ff:5d:f8:
78:f9:1f:7f:8d:04:54:b2:e7:67:18:6c:b0:f5:a0:23:74:57:
5b:c0:63:3c:5f:bf:46:47:06:2e:a7:7c:07:d0:1c:2e:ff:5e:
2f:7f:d0:43:11:f9:69:42:2e:ef:f3:a7:c2:79:1c:d7:6d:85:
59:b9:a9:6b:e0:bc:9a:fe:f5:97:e3:31:6c:88:45:e8:06:41:
b2:53:b3:af:c6:a4:77:91:c4:de:3a:59:4b:58:2a:de:9a:a8:
56:1d:d9:d2:b7:d5:63:fe:2d:2e:18:a3:71:64:25:ca:73:f6:
3d:c3:6a:8f:a1:3f:97:0d:28:b8:b4:c2:9c:49:11:20:a5:c5:
a2:81:a9:d7:8c:6a:9f:51:11:f8:7e:04:59:b4:18:da:c3:b2:
fd:6f:07:82:6a:7b:3b:d2:22:29:0c:60:a8:d9:b0:e6:71:23:
0b:de:2f:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkDxuA92ndjys5m7nQ6wSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy
NTIxYzcwHhcNMjUwMzI5MTEwMTIwWhcNMjUwMzMwMTEwMTIwWjAzMTEwLwYDVQQD
EyhmZGZkZDc3YThmMGU3YTk3ZWNkNWQwZTFlZjQ4MzRmMWIwMjVlMGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylzs+TWv8HiBTRZjn17G+5jvv5aw
WIid/8B9hVjWWmCTukWHLAryfS7Zcnoey6Lign2JwlPvwlqE7W252jterbdlf/AO
j5QThcO6jFc9qF19c5vnSwgZ5m24rBIc/ttv/GWf1wumGyiXLoMKnFy8NebpqGYe
8v/8Qi41ZrnPUsYhWsOZAaQsjV7MJizlCi5wd9diXKT34cw4I/YoL9deOo3vFCdi
1YHkjO8N4BoCmWafjy5fdaDRwqAkIpVL5zfKnryZsoppxm15dJTml3cT9SSDiCyb
qtejvqJV1C4Hz3XQOjbGrtJTd75oePugxYWHN77KgNeLpCjITvZIUTvsvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3913qPDnqX7NXQ4e9INPGwJeD3MB8GA1UdIwQY
MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt
ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx
LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyOJWkNi
/83DTK7AvHqbLGIw5gtv+6t61rYsjrFUV59Cr4dy7hUGJt3j5dAtX1RccXXMVEJf
DdMTlxJUb5kvdw5g79c3N6j1S9RBGfFgCQI6nhHk+Hqa/134ePkff40EVLLnZxhs
sPWgI3RXW8BjPF+/RkcGLqd8B9AcLv9eL3/QQxH5aUIu7/Onwnkc122FWbmpa+C8
mv71l+MxbIhF6AZBslOzr8akd5HE3jpZS1gq3pqoVh3Z0rfVY/4tLhijcWQlynP2
PcNqj6E/lw0ouLTCnEkRIKXFooGp14xqn1ER+H4EWbQY2sOy/W8Hgmp7O9IiKQxg
qNmw5nEjC94vvw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:11 2025 by rpki-client