Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
File: Rzmd24xw_jNP6cKHtpJpRihRjGk.mft (raw, json)
Hash identifier: nW1PsAykgUEMSDaMfUVGEO57//c787WMhEmLZfWS//c=
Subject key identifier: 8C:85:6E:B6:8C:91:1D:1F:AD:69:4A:59:53:9B:A6:94:3A:C2:89:D1
Authority key identifier: 47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
Certificate issuer: /CN=47399ddb8c70fe334fe9c287b692694628518c69
Certificate serial: 019569D3CD5CAEE8126392E167FA9B2443D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
Manifest number: 0791
Signing time: Thu 06 Mar 2025 05:00:43 +0000
Manifest this update: Thu 06 Mar 2025 05:00:43 +0000
Manifest next update: Fri 07 Mar 2025 05:00:43 +0000
Files and hashes: 1: QtxEQGYqA7zt6kbo76L4Elg-1BE.roa (hash: BDm7256ve39MMR4Mv9LtNp15OMRgK9Ec6rAqIR1Wgck=)
2: Rzmd24xw_jNP6cKHtpJpRihRjGk.crl (hash: YSlKWoF/SeRiIKlbE2pW7ratSazeKcqbI9UHBnYLZlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:d3:cd:5c:ae:e8:12:63:92:e1:67:fa:9b:24:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47399ddb8c70fe334fe9c287b692694628518c69
Validity
Not Before: Mar 6 05:00:43 2025 GMT
Not After : Mar 7 05:00:43 2025 GMT
Subject: CN=8c856eb68c911d1fad694a59539ba6943ac289d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:5f:33:da:d9:bb:98:bf:78:dc:c8:6c:33:
4d:c0:b2:5d:20:f7:32:4f:d9:0a:f8:a1:e6:3f:3f:
60:9f:51:5c:28:3d:cb:7f:f6:42:6d:89:dd:24:9e:
11:c8:18:ab:cf:b7:3d:bb:20:f1:65:9c:94:9f:fc:
0a:37:ee:f9:6f:60:30:08:63:f3:a2:43:99:d4:3e:
15:7e:64:06:27:22:7c:b4:cd:2b:f9:95:c8:19:f0:
d5:61:1b:cc:78:c2:ee:ef:7d:0f:86:bc:50:ea:2e:
f0:fe:4f:2e:d7:11:39:09:c1:1c:ff:c4:a3:aa:7c:
f1:f0:58:67:ed:ae:93:19:fc:6c:9e:27:ce:1d:c8:
74:d4:33:0c:cc:19:b4:68:ab:de:55:a3:ec:96:a4:
65:93:7f:96:35:ab:8a:f5:41:6c:a0:d2:2c:34:e9:
cc:85:70:7d:d5:80:d8:18:d2:a8:4c:db:eb:65:fa:
ad:a3:d3:8c:6b:c2:42:d1:c6:89:7b:98:1e:24:64:
f0:53:cf:c5:2d:5a:df:ca:65:c3:fa:16:79:67:d6:
33:f4:f0:12:e1:86:db:80:f3:e6:78:2e:8d:e3:3c:
cf:25:35:c5:72:55:38:83:21:c1:51:b1:9d:f9:01:
fc:ef:10:fc:5b:d1:51:1b:50:0a:77:26:61:41:fb:
2a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:6E:B6:8C:91:1D:1F:AD:69:4A:59:53:9B:A6:94:3A:C2:89:D1
X509v3 Authority Key Identifier:
keyid:47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:62:c8:a3:9b:ae:4f:2b:e6:4d:75:b1:1d:49:66:f8:d2:ba:
70:2c:c5:59:b3:8f:c2:91:aa:fc:1f:de:4b:0b:1d:f7:ec:65:
8d:16:52:c1:ec:0d:e0:95:33:de:e6:eb:d9:29:23:c8:cc:c2:
b0:f1:7f:90:c0:29:80:e9:e0:3f:9c:36:10:e0:9c:b5:fb:93:
b4:f3:0d:c2:45:c5:f1:de:04:d4:31:2f:f3:37:7d:5c:cd:bc:
07:7d:0e:80:52:cf:cf:a5:87:a4:0b:cc:05:af:5c:85:4f:c2:
b6:b6:bd:5b:d2:2e:63:c8:e7:78:b8:b1:96:cc:66:dc:dd:64:
7a:c2:28:e0:4a:71:10:33:a3:1e:e5:29:f3:20:07:de:3f:8e:
14:a5:e5:c9:56:72:5f:06:f4:92:76:33:d3:aa:82:ad:30:9e:
93:ce:29:00:cd:ef:65:69:35:eb:b0:e1:9d:a5:8c:e9:cc:70:
18:7f:2f:2d:49:bb:fd:dc:fa:5e:00:8b:64:77:45:ec:42:d0:
8e:79:e6:5e:09:ec:8f:10:a8:a3:1e:a1:b8:77:77:71:35:de:
9c:5e:f1:f0:22:c7:70:18:e4:18:87:5c:eb:7b:32:a1:a2:fe:
63:f1:87:98:9d:a0:57:b8:c2:93:0a:6e:6d:35:7e:ad:d0:28:
bd:79:9e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVp081crugSY5LhZ/qbJEPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Mzk5ZGRiOGM3MGZlMzM0ZmU5YzI4N2I2OTI2OTQ2Mjg1
MThjNjkwHhcNMjUwMzA2MDUwMDQzWhcNMjUwMzA3MDUwMDQzWjAzMTEwLwYDVQQD
Eyg4Yzg1NmViNjhjOTExZDFmYWQ2OTRhNTk1MzliYTY5NDNhYzI4OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbVfM9rZu5i/eNzIbDNNwLJdIPcy
T9kK+KHmPz9gn1FcKD3Lf/ZCbYndJJ4RyBirz7c9uyDxZZyUn/wKN+75b2AwCGPz
okOZ1D4VfmQGJyJ8tM0r+ZXIGfDVYRvMeMLu730PhrxQ6i7w/k8u1xE5CcEc/8Sj
qnzx8Fhn7a6TGfxsnifOHch01DMMzBm0aKveVaPslqRlk3+WNauK9UFsoNIsNOnM
hXB91YDYGNKoTNvrZfqto9OMa8JC0caJe5geJGTwU8/FLVrfymXD+hZ5Z9Yz9PAS
4YbbgPPmeC6N4zzPJTXFclU4gyHBUbGd+QH87xD8W9FRG1AKdyZhQfsqVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyFbraMkR0frWlKWVObppQ6wonRMB8GA1UdIwQY
MBaAFEc5nduMcP4zT+nCh7aSaUYoUYxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnptZDI0eHdfak5QNmNLSHRwSnBSaWhSakdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni81MTI3OTUtN2VkNC00ZjMxLTk4YTQt
NGU1OTg4NTQ4MDEzLzEvUnptZDI0eHdfak5QNmNLSHRwSnBSaWhSakdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni81MTI3OTUtN2VkNC00ZjMxLTk4YTQtNGU1OTg4NTQ4MDEz
LzEvUnptZDI0eHdfak5QNmNLSHRwSnBSaWhSakdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2LIo5uu
TyvmTXWxHUlm+NK6cCzFWbOPwpGq/B/eSwsd9+xljRZSwewN4JUz3ubr2SkjyMzC
sPF/kMApgOngP5w2EOCctfuTtPMNwkXF8d4E1DEv8zd9XM28B30OgFLPz6WHpAvM
Ba9chU/Ctra9W9IuY8jneLixlsxm3N1kesIo4EpxEDOjHuUp8yAH3j+OFKXlyVZy
Xwb0knYz06qCrTCek84pAM3vZWk167DhnaWM6cxwGH8vLUm7/dz6XgCLZHdF7ELQ
jnnmXgnsjxCoox6huHd3cTXenF7x8CLHcBjkGIdc63syoaL+Y/GHmJ2gV7jCkwpu
bTV+rdAovXmeHQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 09:21:33 2025 by rpki-client