Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: mVXI6ehBT7RhY6ahzXUf9q6zoFRMmu2F4mZptyPZC/c=
Subject key identifier: 94:BB:32:98:71:9D:77:F5:62:69:FA:45:1D:2A:51:C6:48:FB:8A:2F
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 0195E0B44EA780D386FCE7153950C52BF68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 07:01:07 +0000
Manifest this update: Sat 29 Mar 2025 07:01:07 +0000
Manifest next update: Sun 30 Mar 2025 07:01:07 +0000
Files and hashes: 1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: 4jYjZXjlmzqJWeKfotk7XAyNXnqKdOhpVQhNFuu7RNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:4e:a7:80:d3:86:fc:e7:15:39:50:c5:2b:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Mar 29 07:01:07 2025 GMT
Not After : Mar 30 07:01:07 2025 GMT
Subject: CN=94bb3298719d77f56269fa451d2a51c648fb8a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:0a:78:89:23:fb:65:c4:2b:05:5d:b7:eb:
52:b5:58:16:b1:ed:73:32:7a:cf:1b:37:dc:77:22:
39:a9:57:15:a3:35:58:5d:b1:cd:c5:6f:a5:a9:af:
5c:7e:22:da:32:da:4a:af:71:43:5f:0a:c9:29:db:
bc:7b:df:4a:11:89:6a:a1:04:59:b4:8b:0e:d9:b8:
12:81:90:9f:b8:c5:b6:af:fe:80:a3:09:e9:46:6b:
02:1a:53:1c:60:e8:fd:3a:28:78:03:c4:eb:47:70:
c4:fc:6d:76:05:f1:a4:d5:78:76:eb:a8:03:e4:e5:
fc:18:44:11:31:22:a0:fc:b6:09:25:01:21:8e:34:
0f:cb:34:be:5d:04:1e:82:0a:33:8d:64:27:82:a9:
90:52:2e:7d:78:9f:f8:86:0c:f7:69:08:34:3c:8f:
c8:d7:17:fd:39:b5:b1:b0:38:85:87:26:04:95:53:
78:3d:96:da:0d:49:1c:20:4f:44:2d:c1:56:31:2c:
bd:c0:d9:0e:38:a8:af:6c:51:e2:a9:f6:a4:96:2b:
c1:a8:a5:f1:f8:23:8f:0d:1e:9c:0f:64:df:30:3d:
f1:a8:df:fc:0f:11:0f:d2:64:b2:e8:cb:24:01:79:
40:79:00:06:9f:ca:de:97:69:0d:2e:72:96:a9:61:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:32:98:71:9D:77:F5:62:69:FA:45:1D:2A:51:C6:48:FB:8A:2F
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bb:15:e7:0d:13:9b:32:1e:db:f5:f2:48:a3:84:42:fe:cf:
69:e2:20:4a:78:46:81:94:b0:21:95:9f:ce:cf:b3:c6:a3:75:
a7:a7:c7:fb:94:47:9b:0c:9a:02:e5:3d:7f:63:8d:26:86:83:
39:78:8d:11:74:b6:dc:28:8d:a5:d0:5d:d0:9c:45:f7:28:3c:
cc:1d:7a:89:55:2c:63:e6:77:a5:8b:1c:c3:05:31:cb:0e:25:
f2:83:41:f5:9c:6e:d5:10:76:ab:d9:86:15:f3:be:f1:1b:fd:
19:ae:13:e5:78:2c:a4:a6:b5:0c:9f:8b:8e:e4:1b:82:0d:b9:
17:ba:17:f6:b9:96:97:5e:09:12:de:b3:b9:21:6d:39:01:70:
85:41:2c:86:dc:a0:f1:3a:e4:04:e8:3e:67:11:30:9d:1f:c6:
ff:46:c3:d9:c1:af:28:a4:8e:bf:81:67:9e:65:5f:2c:e3:26:
6b:26:3f:51:cb:c6:a6:9e:be:7a:a2:77:74:56:b8:ba:69:ae:
73:b0:cd:b7:5a:3d:54:49:ad:6e:9c:6f:5a:e3:2b:f4:3d:32:
aa:2f:fa:bc:83:be:96:c1:27:0b:20:6c:ce:e9:e8:5b:ca:e4:
63:d9:0e:d4:59:1b:08:31:69:74:c1:46:16:71:70:51:11:fb:
8a:9d:63:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtE6ngNOG/OcVOVDFK/aOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5
MTJkZTYwHhcNMjUwMzI5MDcwMTA3WhcNMjUwMzMwMDcwMTA3WjAzMTEwLwYDVQQD
Eyg5NGJiMzI5ODcxOWQ3N2Y1NjI2OWZhNDUxZDJhNTFjNjQ4ZmI4YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo18KeIkj+2XEKwVdt+tStVgWse1z
MnrPGzfcdyI5qVcVozVYXbHNxW+lqa9cfiLaMtpKr3FDXwrJKdu8e99KEYlqoQRZ
tIsO2bgSgZCfuMW2r/6AownpRmsCGlMcYOj9Oih4A8TrR3DE/G12BfGk1Xh266gD
5OX8GEQRMSKg/LYJJQEhjjQPyzS+XQQeggozjWQngqmQUi59eJ/4hgz3aQg0PI/I
1xf9ObWxsDiFhyYElVN4PZbaDUkcIE9ELcFWMSy9wNkOOKivbFHiqfaklivBqKXx
+COPDR6cD2TfMD3xqN/8DxEP0mSy6MskAXlAeQAGn8rel2kNLnKWqWFyNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS7MphxnXf1Ymn6RR0qUcZI+4ovMB8GA1UdIwQY
MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt
OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2
LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrsV5w0T
mzIe2/XySKOEQv7PaeIgSnhGgZSwIZWfzs+zxqN1p6fH+5RHmwyaAuU9f2ONJoaD
OXiNEXS23CiNpdBd0JxF9yg8zB16iVUsY+Z3pYscwwUxyw4l8oNB9Zxu1RB2q9mG
FfO+8Rv9Ga4T5XgspKa1DJ+LjuQbgg25F7oX9rmWl14JEt6zuSFtOQFwhUEshtyg
8TrkBOg+ZxEwnR/G/0bD2cGvKKSOv4FnnmVfLOMmayY/UcvGpp6+eqJ3dFa4ummu
c7DNt1o9VEmtbpxvWuMr9D0yqi/6vIO+lsEnCyBszunoW8rkY9kO1FkbCDFpdMFG
FnFwURH7ip1j+A==
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:36:56 2025 by rpki-client