Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File: zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier: 1jlbToerTmcM0TbeoROhmHI7r1uA7556a8Qy/jKnRw8=
Subject key identifier: 28:69:E7:64:BB:AB:82:39:CC:A8:DA:79:E2:B4:AF:4D:14:B8:61:0B
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 0195E12219845331FDA3D2B6865D71092579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number: 14CF
Signing time: Sat 29 Mar 2025 09:01:03 +0000
Manifest this update: Sat 29 Mar 2025 09:01:03 +0000
Manifest next update: Sun 30 Mar 2025 09:01:03 +0000
Files and hashes: 1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
3: BKzk8PEv4C-K-dAjelZ2PQmBLbk.roa (hash: 0eLcFnn58Q6bI77SyMiyrXborE81MoDtpAJ0qlI9pZA=)
4: XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa (hash: fWbd0EX3ziv/6uF5wR8i+XeMR7zd9h8m0bOvPg7RJi0=)
5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: tJU/zD4xk7iVShbdphmJCOVYMQ7SG1LMPrBLd0Vc44Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:19:84:53:31:fd:a3:d2:b6:86:5d:71:09:25:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Mar 29 09:01:03 2025 GMT
Not After : Mar 30 09:01:03 2025 GMT
Subject: CN=2869e764bbab8239cca8da79e2b4af4d14b8610b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:e3:ab:b6:d8:14:78:28:fe:b1:88:97:8c:
7e:19:79:26:9d:3a:69:3d:95:25:ad:f0:ff:85:71:
47:e8:73:d4:dd:37:5f:ee:9c:f4:27:cf:01:12:85:
5f:d9:5f:70:15:db:c6:2a:3a:34:3f:3c:11:77:dc:
a8:34:56:d6:3d:da:cb:b9:68:f0:b2:47:49:d7:6e:
0f:da:2d:99:5b:f3:10:9f:2e:ca:fc:b6:c8:5e:97:
54:d8:37:bd:b8:38:27:d2:76:3e:dd:6b:c6:1a:5f:
98:75:ce:12:79:4a:ce:1d:a0:9a:62:3c:86:e0:45:
0c:21:9d:e3:6b:31:83:fc:68:e8:55:ee:d5:4f:4d:
88:5e:8b:bf:8a:f3:60:2a:a1:62:9c:4b:c6:82:d6:
38:d1:d9:0f:3b:04:7d:2d:d9:6f:61:64:20:73:6d:
3a:3e:4c:b6:7c:87:70:aa:e8:b9:fd:69:85:77:76:
04:b2:e1:96:1b:25:47:0c:c9:fa:56:75:99:28:fa:
a1:f9:1a:da:84:47:71:d9:c6:a3:f6:af:6b:2c:a3:
a0:f3:54:81:e0:04:1e:00:6e:5b:aa:c9:5d:5d:2b:
f0:b4:8a:5a:6a:6b:4b:e5:d3:55:1c:85:ee:61:e9:
ee:15:1b:b2:77:dc:54:53:f6:49:16:2b:13:1a:8f:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:E7:64:BB:AB:82:39:CC:A8:DA:79:E2:B4:AF:4D:14:B8:61:0B
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:51:d6:ff:50:da:ee:e8:0b:e6:cf:ee:e8:36:94:11:21:a0:
10:55:a2:ac:0d:08:a7:f7:40:77:0e:fb:56:ba:43:5e:89:30:
2d:fb:56:dd:74:d7:7e:05:48:9c:2e:69:b3:e5:1f:0c:9d:70:
33:e7:5e:8d:8a:cf:78:9c:da:95:f7:d7:ea:a1:9e:d2:89:1b:
f9:01:00:13:69:f8:ff:65:7a:0c:5a:44:c1:e8:49:93:20:5d:
70:a6:34:1e:4d:09:91:54:fa:20:45:8c:30:0f:4b:62:76:66:
56:b3:1d:42:8e:86:87:f7:99:dd:82:20:b3:1b:5d:e3:ec:a4:
6e:52:70:c7:42:f3:a4:00:ca:9d:72:e0:e6:83:5a:cc:0e:22:
9d:10:9f:4f:e3:de:2f:e2:e8:54:a4:18:14:59:24:c8:8c:8f:
b1:9d:7e:5d:a0:0a:f6:00:c4:37:f4:ce:90:52:b9:59:cf:af:
f5:55:0a:45:88:69:db:85:cb:c4:f0:f3:a9:5e:07:d3:2c:28:
d9:bf:c9:94:eb:a9:40:80:a5:f1:c5:32:a8:09:9f:5c:0e:f3:
4d:ed:d4:c9:82:60:d4:9a:ae:b6:09:c7:22:82:f9:fe:f7:c5:
d4:e6:74:e5:19:95:4e:cb:4e:fd:86:28:74:07:83:22:69:24:
9d:ae:25:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIhmEUzH9o9K2hl1xCSV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx
ODA1MTYwHhcNMjUwMzI5MDkwMTAzWhcNMjUwMzMwMDkwMTAzWjAzMTEwLwYDVQQD
EygyODY5ZTc2NGJiYWI4MjM5Y2NhOGRhNzllMmI0YWY0ZDE0Yjg2MTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GLjq7bYFHgo/rGIl4x+GXkmnTpp
PZUlrfD/hXFH6HPU3Tdf7pz0J88BEoVf2V9wFdvGKjo0PzwRd9yoNFbWPdrLuWjw
skdJ124P2i2ZW/MQny7K/LbIXpdU2De9uDgn0nY+3WvGGl+Ydc4SeUrOHaCaYjyG
4EUMIZ3jazGD/GjoVe7VT02IXou/ivNgKqFinEvGgtY40dkPOwR9LdlvYWQgc206
Pky2fIdwqui5/WmFd3YEsuGWGyVHDMn6VnWZKPqh+RrahEdx2caj9q9rLKOg81SB
4AQeAG5bqsldXSvwtIpaamtL5dNVHIXuYenuFRuyd9xUU/ZJFisTGo/7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChp52S7q4I5zKjaeeK0r00UuGELMB8GA1UdIwQY
MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt
ZjFmODAyZTY2MTNiLzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi
LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlHW/1Da
7ugL5s/u6DaUESGgEFWirA0Ip/dAdw77VrpDXokwLftW3XTXfgVInC5ps+UfDJ1w
M+dejYrPeJzalffX6qGe0okb+QEAE2n4/2V6DFpEwehJkyBdcKY0Hk0JkVT6IEWM
MA9LYnZmVrMdQo6Gh/eZ3YIgsxtd4+ykblJwx0LzpADKnXLg5oNazA4inRCfT+Pe
L+LoVKQYFFkkyIyPsZ1+XaAK9gDEN/TOkFK5Wc+v9VUKRYhp24XLxPDzqV4H0ywo
2b/JlOupQICl8cUyqAmfXA7zTe3UyYJg1JqutgnHIoL5/vfF1OZ05RmVTstO/YYo
dAeDImkkna4lBw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:35 2025 by rpki-client