
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier: N5/odbGcsu4waYHnZHxiP0d0+vD4wFoTHa1FDdiFFNY=
Subject key identifier: E7:FB:08:3D:BA:D5:43:C7:30:5C:23:7B:E6:B3:9C:3B:CE:01:14:C5
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 0195E0464BF0038EF7DF716ABC812929A40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 05:00:58 +0000
Manifest this update: Sat 29 Mar 2025 05:00:58 +0000
Manifest next update: Sun 30 Mar 2025 05:00:58 +0000
Files and hashes: 1: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: T+A41+WDMDPxqXMO4VVNIcp4IVBE19n/kJqJPZANKo0=)
2: ckxfsidkq0zDgn8HR-xIWsqm2AQ.roa (hash: WdjOIbcaJnLXbL/Nx00pV5xdwXgfnCo9JLmJy57TSjE=)
3: rS8McXzCkBbcVb5uezFTBLPdaiQ.roa (hash: KC6Lr4AJ8lP/HwGwdQX+pnrzkPDHp47sMoI3Dyq3FbM=)
4: uYm5oYNq-JACxgzZxNgku-KZuSg.roa (hash: mMvblRec/LXUeEQXaAaSvKQKI7NqUb/x663S4SMp3Ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:4b:f0:03:8e:f7:df:71:6a:bc:81:29:29:a4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Mar 29 05:00:58 2025 GMT
Not After : Mar 30 05:00:58 2025 GMT
Subject: CN=e7fb083dbad543c7305c237be6b39c3bce0114c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:08:76:0a:ca:ed:69:e4:9b:4b:a2:43:57:
aa:39:61:28:1f:a3:ae:da:bb:2c:f3:12:d5:a4:a3:
0c:71:c3:11:45:0e:79:39:34:5d:39:da:51:f5:cd:
b7:d2:7e:14:b8:fd:4c:b6:94:50:dd:69:fa:f1:de:
7e:4b:e8:3a:00:a0:93:f1:4a:54:3e:db:58:fb:45:
0c:8c:de:5e:d9:7a:45:05:ee:cb:59:07:dc:49:df:
33:76:b9:c4:74:3a:c3:44:3b:2b:ce:27:b4:c6:ef:
59:9b:01:5a:8b:e1:6b:1b:6b:af:9e:ec:79:3e:95:
dd:e9:78:04:5e:fb:49:bc:13:b6:a6:5e:ea:4e:a3:
91:7d:2a:96:af:d1:a7:15:8f:4d:19:7f:d4:35:22:
a2:9d:17:3e:59:4b:f3:f5:5e:6d:ca:63:bf:80:f7:
30:81:a8:1f:6b:41:a5:34:28:06:39:61:48:af:cc:
77:aa:21:35:50:ad:54:37:4b:e0:d8:94:a8:a7:80:
9c:84:ae:a3:f5:22:b2:48:b9:1e:48:58:d5:ae:1a:
16:bc:1f:4d:be:ab:7a:16:ff:b8:31:7b:a0:31:f2:
74:fb:63:16:f7:50:7e:cc:cf:9a:1e:5e:54:aa:7a:
60:a3:81:3f:1a:f0:a4:3a:a6:4e:3a:f2:dd:4c:02:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:08:3D:BA:D5:43:C7:30:5C:23:7B:E6:B3:9C:3B:CE:01:14:C5
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ae:3f:6e:66:03:35:42:d2:37:7d:cb:67:0a:f5:23:6a:e0:
ef:12:e4:7f:76:ea:85:d4:11:15:b6:b5:8e:db:aa:fa:56:3b:
bd:4c:3f:cc:cf:67:92:a8:26:e0:28:7c:0a:43:20:75:8f:3f:
5a:36:82:3a:d8:06:a2:0f:df:75:c6:f8:2e:7c:1c:b6:59:24:
b1:8b:af:45:44:bd:2f:53:41:d8:9f:50:92:39:e1:1f:81:9c:
ed:24:8b:04:0c:05:32:0a:6a:7a:2b:66:23:2f:5d:8d:f3:1e:
2a:f0:95:48:a7:21:df:30:80:17:cc:2f:6b:4d:40:4c:3f:6a:
a7:fe:06:68:02:32:11:0c:4e:74:92:f5:e1:05:be:82:73:91:
b1:73:7a:57:00:22:c8:45:cb:6f:e3:18:0c:c6:d5:80:3b:78:
80:0f:23:1c:42:2c:8b:1f:e1:1b:38:17:ab:2d:dd:d1:ee:99:
e7:95:b5:1d:63:59:e9:ab:9b:d7:c4:0b:bf:1a:f3:d8:a0:ef:
be:68:3e:d0:f4:55:d2:f8:03:66:f0:0b:09:c8:f4:04:25:ff:
c8:22:af:bb:34:09:d7:e8:36:2e:57:65:82:6b:cc:21:9f:56:
d5:9f:56:02:96:bf:2f:ad:9f:6e:0c:8c:61:29:c1:69:39:4e:
02:61:65:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRkvwA47333FqvIEpKaQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTFjZTVlMmY1M2I3YmI4Y2FjOGYzOWUyOTRlODlhNDVi
MjAwMjkwHhcNMjUwMzI5MDUwMDU4WhcNMjUwMzMwMDUwMDU4WjAzMTEwLwYDVQQD
EyhlN2ZiMDgzZGJhZDU0M2M3MzA1YzIzN2JlNmIzOWMzYmNlMDExNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE8IdgrK7Wnkm0uiQ1eqOWEoH6Ou
2rss8xLVpKMMccMRRQ55OTRdOdpR9c230n4UuP1MtpRQ3Wn68d5+S+g6AKCT8UpU
PttY+0UMjN5e2XpFBe7LWQfcSd8zdrnEdDrDRDsrzie0xu9ZmwFai+FrG2uvnux5
PpXd6XgEXvtJvBO2pl7qTqORfSqWr9GnFY9NGX/UNSKinRc+WUvz9V5tymO/gPcw
gagfa0GlNCgGOWFIr8x3qiE1UK1UN0vg2JSop4CchK6j9SKySLkeSFjVrhoWvB9N
vqt6Fv+4MXugMfJ0+2MW91B+zM+aHl5Uqnpgo4E/GvCkOqZOOvLdTAISLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf7CD261UPHMFwje+aznDvOARTFMB8GA1UdIwQY
MBaAFGURzl4vU7e7jKyPOeKU6JpFsgApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYt
NWNiOTM0YTU1YjBkLzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYtNWNiOTM0YTU1YjBk
LzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABK4/bmYD
NULSN33LZwr1I2rg7xLkf3bqhdQRFba1jtuq+lY7vUw/zM9nkqgm4Ch8CkMgdY8/
WjaCOtgGog/fdcb4LnwctlkksYuvRUS9L1NB2J9QkjnhH4Gc7SSLBAwFMgpqeitm
Iy9djfMeKvCVSKch3zCAF8wva01ATD9qp/4GaAIyEQxOdJL14QW+gnORsXN6VwAi
yEXLb+MYDMbVgDt4gA8jHEIsix/hGzgXqy3d0e6Z55W1HWNZ6aub18QLvxrz2KDv
vmg+0PRV0vgDZvALCcj0BCX/yCKvuzQJ1+g2LldlgmvMIZ9W1Z9WApa/L62fbgyM
YSnBaTlOAmFlrg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:52 2025 by rpki-client