Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/zeijNtIlZ5USEihSNOA41YTHOoI.mft
File: zeijNtIlZ5USEihSNOA41YTHOoI.mft (raw, json)
Hash identifier: 84EYPFkWLFusYB/BV77vi+1G9gjMRXsiSuF+e3DRNCE=
Subject key identifier: 53:A2:A9:48:95:53:EE:59:02:A8:DB:21:F5:EF:C0:8C:13:B0:CB:AE
Authority key identifier: CD:E8:A3:36:D2:25:67:95:12:12:28:52:34:E0:38:D5:84:C7:3A:82
Certificate issuer: /CN=cde8a336d22567951212285234e038d584c73a82
Certificate serial: 018947FBE9ABB6B2597714E26D815D55415A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeijNtIlZ5USEihSNOA41YTHOoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/zeijNtIlZ5USEihSNOA41YTHOoI.mft
Manifest number: 0E2C
Signing time: Wed 12 Jul 2023 02:43:58 +0000
Manifest this update: Wed 12 Jul 2023 02:43:58 +0000
Manifest next update: Thu 13 Jul 2023 02:43:58 +0000
Files and hashes: 1: tybZ-BB82i_vUsjL98G7wPPKy8M.roa (hash: GKJUrgxPZkJ+uYCwmmVmt/0k2mcsNUL0J1SuRA3T7+8=)
2: zeijNtIlZ5USEihSNOA41YTHOoI.crl (hash: SElczjJtFmM9l2wRkpq+xBcqhpyM80R6QPjdDTIJhdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:47:fb:e9:ab:b6:b2:59:77:14:e2:6d:81:5d:55:41:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8a336d22567951212285234e038d584c73a82
Validity
Not Before: Jul 12 02:43:58 2023 GMT
Not After : Jul 13 02:43:58 2023 GMT
Subject: CN=53a2a9489553ee5902a8db21f5efc08c13b0cbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:4e:87:ec:c3:30:3b:7a:9b:bc:00:b3:74:
b4:a5:bf:3f:24:87:ed:57:d4:ee:85:3e:8d:df:ba:
7e:a8:74:2c:6b:74:92:65:b9:2c:5c:d2:1d:a5:e5:
fe:72:16:50:80:15:08:3f:7a:06:7e:44:b2:bb:ef:
5a:ab:f6:ae:5f:3a:6f:c4:b6:c1:96:1f:66:50:41:
7d:76:14:6b:b7:f8:5d:ef:40:bc:bf:b5:d1:7e:f5:
99:1b:81:a8:4c:5a:75:5f:5e:21:2e:5b:2e:09:b4:
3d:ef:e6:35:05:7f:7f:b5:1a:35:9a:de:23:b7:f9:
20:c5:58:68:87:80:ce:de:a6:17:a2:69:0d:c3:3c:
e9:00:8e:a4:b5:d9:10:d9:68:65:5a:e3:82:6c:39:
b6:3b:31:2b:c7:3d:0c:2b:74:fb:eb:08:75:d3:55:
5f:22:ff:f5:98:ef:67:20:4f:58:e0:a4:78:5e:6e:
05:b3:3d:ec:cc:68:52:a8:a6:f8:3c:8a:16:43:14:
78:34:fb:fa:22:82:11:02:7a:7d:f0:f9:d3:54:a5:
cc:df:3a:df:00:dc:91:38:6c:d4:28:bf:3d:d8:97:
f2:48:6e:67:77:35:0f:0d:d9:9b:b5:74:e2:e1:a4:
35:be:22:41:7b:63:09:65:87:9c:cd:8f:55:f1:d8:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:A9:48:95:53:EE:59:02:A8:DB:21:F5:EF:C0:8C:13:B0:CB:AE
X509v3 Authority Key Identifier:
keyid:CD:E8:A3:36:D2:25:67:95:12:12:28:52:34:E0:38:D5:84:C7:3A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeijNtIlZ5USEihSNOA41YTHOoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/zeijNtIlZ5USEihSNOA41YTHOoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/zeijNtIlZ5USEihSNOA41YTHOoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2f:3e:16:18:ce:90:ec:1c:4a:15:dd:42:88:c0:73:db:15:
39:08:81:ba:51:9c:69:f0:a7:f9:3c:02:bb:dd:e9:27:e3:21:
ef:a7:d6:8d:26:8f:09:a1:e3:b3:99:bd:84:d7:66:2a:8d:96:
e4:77:5b:56:19:e5:16:16:47:28:9a:4f:44:1f:17:1c:33:02:
48:f6:ff:9f:52:ea:db:40:e1:cc:bf:87:27:59:9c:63:8c:be:
9d:38:27:89:a3:be:cc:30:93:2b:bb:97:d2:e6:88:09:b5:b4:
ad:69:c1:e4:53:2f:44:27:8b:01:43:86:27:37:18:ae:e0:ea:
9f:d4:ee:e2:ba:51:2a:43:21:eb:d7:54:df:f9:44:de:0e:71:
8d:a0:10:b9:84:04:dc:a8:59:e1:cf:8e:8b:59:1e:ae:01:c3:
75:a5:b4:af:1b:7b:17:ee:b4:c8:f7:45:d4:a5:f1:83:5b:a5:
fc:44:33:50:16:1e:14:14:09:a9:a6:bf:fb:17:c7:a0:a4:0d:
5c:5c:1b:f3:c3:2f:de:13:7c:55:7a:e3:78:72:b1:44:06:ec:
63:ed:e7:19:88:56:0f:5e:48:30:2c:c0:bf:6c:53:73:c5:bc:
2a:29:05:8d:d4:e9:5a:12:59:02:8c:7e:5c:b7:cd:f8:a3:8d:
fa:49:74:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYlH++mrtrJZdxTibYFdVUFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZThhMzM2ZDIyNTY3OTUxMjEyMjg1MjM0ZTAzOGQ1ODRj
NzNhODIwHhcNMjMwNzEyMDI0MzU4WhcNMjMwNzEzMDI0MzU4WjAzMTEwLwYDVQQD
Eyg1M2EyYTk0ODk1NTNlZTU5MDJhOGRiMjFmNWVmYzA4YzEzYjBjYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg25Oh+zDMDt6m7wAs3S0pb8/JIft
V9TuhT6N37p+qHQsa3SSZbksXNIdpeX+chZQgBUIP3oGfkSyu+9aq/auXzpvxLbB
lh9mUEF9dhRrt/hd70C8v7XRfvWZG4GoTFp1X14hLlsuCbQ97+Y1BX9/tRo1mt4j
t/kgxVhoh4DO3qYXomkNwzzpAI6ktdkQ2WhlWuOCbDm2OzErxz0MK3T76wh101Vf
Iv/1mO9nIE9Y4KR4Xm4Fsz3szGhSqKb4PIoWQxR4NPv6IoIRAnp98PnTVKXM3zrf
ANyROGzUKL892JfySG5ndzUPDdmbtXTi4aQ1viJBe2MJZYeczY9V8dgBcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOiqUiVU+5ZAqjbIfXvwIwTsMuuMB8GA1UdIwQY
MBaAFM3oozbSJWeVEhIoUjTgONWExzqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVpak50SWxaNVVTRWloU05PQTQxWVRIT29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iNjk0YWUtZWQwMi00N2EzLWI3NTkt
NGUyZWUyNjgyNTg2LzEvemVpak50SWxaNVVTRWloU05PQTQxWVRIT29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iNjk0YWUtZWQwMi00N2EzLWI3NTktNGUyZWUyNjgyNTg2
LzEvemVpak50SWxaNVVTRWloU05PQTQxWVRIT29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS8+FhjO
kOwcShXdQojAc9sVOQiBulGcafCn+TwCu93pJ+Mh76fWjSaPCaHjs5m9hNdmKo2W
5HdbVhnlFhZHKJpPRB8XHDMCSPb/n1Lq20DhzL+HJ1mcY4y+nTgniaO+zDCTK7uX
0uaICbW0rWnB5FMvRCeLAUOGJzcYruDqn9Tu4rpRKkMh69dU3/lE3g5xjaAQuYQE
3KhZ4c+Oi1kergHDdaW0rxt7F+60yPdF1KXxg1ul/EQzUBYeFBQJqaa/+xfHoKQN
XFwb88Mv3hN8VXrjeHKxRAbsY+3nGYhWD15IMCzAv2xTc8W8KikFjdTpWhJZAox+
XLfN+KON+kl0+g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:38:48 2025 by rpki-client