Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: tFgG3plEcUOd0jSzwvIUEXTHIFhiHcj++Xzz6hDP8aM=
Subject key identifier: 65:89:69:0E:8A:01:BC:B5:BB:F0:D3:CF:FE:99:B7:9D:DB:9A:DE:80
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 0195E046E4AE60C199B6CB948535B15DDEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 0D8B
Signing time: Sat 29 Mar 2025 05:01:37 +0000
Manifest this update: Sat 29 Mar 2025 05:01:37 +0000
Manifest next update: Sun 30 Mar 2025 05:01:37 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: n6B1tDpsVSJgbXN3p8vq/+f0A2YGBtUusfxXgVzoCw4=)
2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:e4:ae:60:c1:99:b6:cb:94:85:35:b1:5d:de:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Mar 29 05:01:37 2025 GMT
Not After : Mar 30 05:01:37 2025 GMT
Subject: CN=6589690e8a01bcb5bbf0d3cffe99b79ddb9ade80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:c0:96:ba:25:c4:49:f1:9c:94:59:d3:d2:
42:fb:62:f6:85:19:4e:12:ff:c7:cb:6b:5d:ce:8d:
28:f0:61:9c:55:27:cc:bd:4c:dc:7f:b0:37:7e:4c:
25:1c:5f:8d:8f:e0:2e:ce:6a:83:0c:4e:0f:a7:51:
7f:50:53:ae:9a:b1:28:ae:f3:55:b6:a3:de:10:79:
fc:92:19:34:da:1e:23:02:7a:89:84:51:32:f8:d3:
7f:29:3d:15:8b:95:a9:8e:fb:f2:ba:4f:5a:3c:95:
68:1c:26:64:b7:6f:bc:5c:dc:40:dd:34:2d:1a:a8:
00:8e:ea:cc:94:cb:d8:74:f4:22:c1:6e:e2:2c:c0:
3f:37:bc:cb:9c:46:7e:09:ab:49:b6:f8:a3:6a:34:
f2:6d:05:af:dd:d0:e8:5f:ae:7e:e2:ed:b9:4b:3b:
90:59:40:45:1a:34:56:f6:63:65:d1:1c:4b:89:97:
09:f7:e8:4b:73:f0:ad:6b:d2:07:b6:3f:df:75:4e:
47:77:73:42:df:7a:39:be:80:74:70:cd:be:43:8e:
56:d7:80:d0:f1:7f:a7:e6:f4:f4:c9:cc:42:a1:39:
66:d1:b8:ef:54:62:cf:8e:c8:a1:0b:21:5d:bb:ae:
01:4f:ea:fd:27:42:3d:fa:14:24:e5:ae:6d:e8:1a:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:69:0E:8A:01:BC:B5:BB:F0:D3:CF:FE:99:B7:9D:DB:9A:DE:80
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:5e:b0:30:e3:dd:c1:f5:6d:58:87:b4:87:7b:a6:cf:4d:
29:a0:ae:0c:7e:50:4f:d9:2b:1f:59:04:2e:0f:5a:78:8a:10:
c5:b2:98:9d:50:5a:aa:81:69:16:0e:5d:58:60:3d:13:8d:18:
b1:ca:5f:b9:47:b4:da:bb:39:6e:c2:6a:20:41:bd:3f:5a:52:
76:1a:ef:93:5a:e9:5f:27:a1:42:00:37:f6:7e:66:fe:98:8a:
c5:fe:45:b2:98:e6:b8:79:21:cb:ce:08:82:72:b4:aa:ca:23:
59:2e:29:a5:d5:65:b4:33:91:f5:44:53:0a:55:20:aa:5e:cc:
5d:cc:dd:53:8f:6a:5a:1e:fa:7d:01:da:fb:1a:c2:f9:dc:55:
64:38:57:ae:5a:65:06:61:2c:35:c5:56:71:eb:72:39:39:2e:
b2:1b:bf:83:e9:30:c5:aa:35:94:0b:0b:87:78:9d:99:c9:59:
1b:50:a5:b7:be:22:32:f8:04:43:08:c9:e0:e8:29:a2:26:25:
40:ef:c0:21:53:4a:ca:7c:60:b3:58:db:ef:34:c7:28:1b:a5:
53:26:8b:20:c0:cc:fc:83:f4:07:a2:d6:7c:ec:ba:2f:ab:44:
1b:a3:b3:0e:91:51:b8:57:83:c3:1c:c5:86:86:bc:6e:b3:f9:
15:01:59:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRuSuYMGZtsuUhTWxXd7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3
MTVkYzkwHhcNMjUwMzI5MDUwMTM3WhcNMjUwMzMwMDUwMTM3WjAzMTEwLwYDVQQD
Eyg2NTg5NjkwZThhMDFiY2I1YmJmMGQzY2ZmZTk5Yjc5ZGRiOWFkZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmPAlrolxEnxnJRZ09JC+2L2hRlO
Ev/Hy2tdzo0o8GGcVSfMvUzcf7A3fkwlHF+Nj+AuzmqDDE4Pp1F/UFOumrEorvNV
tqPeEHn8khk02h4jAnqJhFEy+NN/KT0Vi5Wpjvvyuk9aPJVoHCZkt2+8XNxA3TQt
GqgAjurMlMvYdPQiwW7iLMA/N7zLnEZ+CatJtvijajTybQWv3dDoX65+4u25SzuQ
WUBFGjRW9mNl0RxLiZcJ9+hLc/Cta9IHtj/fdU5Hd3NC33o5voB0cM2+Q45W14DQ
8X+n5vT0ycxCoTlm0bjvVGLPjsihCyFdu64BT+r9J0I9+hQk5a5t6Bp0FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWJaQ6KAby1u/DTz/6Zt53bmt6AMB8GA1UdIwQY
MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt
M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh
LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5ResDDj
3cH1bViHtId7ps9NKaCuDH5QT9krH1kELg9aeIoQxbKYnVBaqoFpFg5dWGA9E40Y
scpfuUe02rs5bsJqIEG9P1pSdhrvk1rpXyehQgA39n5m/piKxf5FspjmuHkhy84I
gnK0qsojWS4ppdVltDOR9URTClUgql7MXczdU49qWh76fQHa+xrC+dxVZDhXrlpl
BmEsNcVWcetyOTkushu/g+kwxao1lAsLh3idmclZG1Clt74iMvgEQwjJ4OgpoiYl
QO/AIVNKynxgs1jb7zTHKBulUyaLIMDM/IP0B6LWfOy6L6tEG6OzDpFRuFeDwxzF
hoa8brP5FQFZuA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:51 2025 by rpki-client