Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: CPoUVGT2zPNA9eFd2mo92EUySUbnqqT+whmPcVJyAec=
Subject key identifier: 4B:E9:B1:4E:F3:F3:26:9E:4F:77:44:59:10:DB:7D:73:E4:85:10:D5
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 0195E122482C70F2952B68AE576F8A6DC971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 09:01:14 +0000
Manifest this update: Sat 29 Mar 2025 09:01:14 +0000
Manifest next update: Sun 30 Mar 2025 09:01:14 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: 9e8VZKxgGx5TjhXQC2A/lu92cvful3tjzCRCtFTBVUw=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:48:2c:70:f2:95:2b:68:ae:57:6f:8a:6d:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Mar 29 09:01:14 2025 GMT
Not After : Mar 30 09:01:14 2025 GMT
Subject: CN=4be9b14ef3f3269e4f77445910db7d73e48510d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:bb:47:eb:c8:47:5d:9a:d0:57:18:ab:50:
9a:cf:ea:cc:7d:58:2c:dc:44:c7:a4:fe:7d:6d:64:
6e:41:b7:5b:02:12:c9:1c:2b:f0:4b:94:1e:68:7e:
61:e2:fd:d0:9a:16:39:03:93:2b:fd:0d:29:33:b2:
8a:01:40:ce:92:7d:6f:12:84:e1:4e:3c:36:47:75:
65:fc:12:24:15:aa:cc:5c:07:65:d4:1c:21:c0:cc:
01:d2:d2:bd:2a:53:b9:d8:da:61:07:b3:4c:35:b1:
b2:43:da:ce:7a:b2:f7:bb:c4:0d:02:7f:17:0d:75:
f4:8d:ee:00:57:03:66:f0:1c:8e:b4:90:3f:89:aa:
8a:e2:dc:35:c6:c9:89:33:0f:89:4e:6d:99:8e:d6:
33:14:98:1a:8e:be:cd:13:83:27:58:a1:be:70:16:
ce:ee:3d:25:2e:c8:9d:e3:5d:77:91:28:f9:44:77:
ae:7b:bf:0e:9c:7a:88:5c:70:88:e6:f3:12:d4:52:
e3:2a:6f:d3:50:b7:29:8d:9f:c9:68:7c:03:67:58:
81:57:ea:9d:0c:bc:0c:15:be:2c:17:60:03:2d:a1:
04:a6:c7:b8:34:ea:26:e5:01:8c:5b:14:2e:61:28:
df:5b:42:b8:2a:8c:f3:d9:72:87:be:33:a1:79:17:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:B1:4E:F3:F3:26:9E:4F:77:44:59:10:DB:7D:73:E4:85:10:D5
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b4:d1:1e:9d:b2:52:cb:15:07:18:9a:c0:09:1a:08:7f:cb:
8f:37:39:1a:4a:dc:e2:97:22:b8:92:52:81:69:ed:9f:b0:12:
a5:ed:50:1d:d2:87:8c:fd:b9:b2:01:90:f3:8b:07:35:bb:88:
bc:5c:36:17:14:d2:c9:d4:b3:86:ae:7c:f0:3c:6c:14:8a:f4:
71:9b:ae:de:c4:be:27:9c:04:8d:79:c7:75:ac:b7:76:e1:41:
9e:bf:63:b1:9e:24:8c:57:0d:e0:7c:57:bb:5b:c1:a0:80:6e:
b9:b6:4a:26:37:ce:1b:eb:ce:7d:0e:e9:ad:c4:01:f4:60:4d:
63:7b:bd:ac:cf:39:ae:6b:89:73:35:4a:48:e7:59:b0:52:60:
f6:f9:65:c0:c3:e8:e7:a1:51:ef:26:75:cb:df:d7:ed:c1:8b:
43:25:32:77:fa:fc:70:7c:f5:d9:35:20:04:be:49:b1:58:c8:
16:81:68:1b:b9:cf:69:c9:2c:1a:70:55:16:1d:1a:4d:06:b1:
f8:c4:03:00:92:11:ae:78:22:e7:dd:47:45:e1:76:66:e8:8a:
61:96:56:54:bd:c3:7d:ba:3a:99:f1:94:7e:de:13:be:57:76:
00:2e:f5:cb:27:14:95:99:cf:bc:98:44:e9:83:13:77:fa:70:
09:e8:e4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIkgscPKVK2iuV2+KbclxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk
NmE2ZWIwHhcNMjUwMzI5MDkwMTE0WhcNMjUwMzMwMDkwMTE0WjAzMTEwLwYDVQQD
Eyg0YmU5YjE0ZWYzZjMyNjllNGY3NzQ0NTkxMGRiN2Q3M2U0ODUxMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHK7R+vIR12a0FcYq1Caz+rMfVgs
3ETHpP59bWRuQbdbAhLJHCvwS5QeaH5h4v3QmhY5A5Mr/Q0pM7KKAUDOkn1vEoTh
Tjw2R3Vl/BIkFarMXAdl1BwhwMwB0tK9KlO52NphB7NMNbGyQ9rOerL3u8QNAn8X
DXX0je4AVwNm8ByOtJA/iaqK4tw1xsmJMw+JTm2ZjtYzFJgajr7NE4MnWKG+cBbO
7j0lLsid4113kSj5RHeue78OnHqIXHCI5vMS1FLjKm/TULcpjZ/JaHwDZ1iBV+qd
DLwMFb4sF2ADLaEEpse4NOom5QGMWxQuYSjfW0K4Kozz2XKHvjOheRcwzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvpsU7z8yaeT3dEWRDbfXPkhRDVMB8GA1UdIwQY
MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt
ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy
LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrTRHp2y
UssVBxiawAkaCH/Ljzc5Gkrc4pciuJJSgWntn7ASpe1QHdKHjP25sgGQ84sHNbuI
vFw2FxTSydSzhq588DxsFIr0cZuu3sS+J5wEjXnHday3duFBnr9jsZ4kjFcN4HxX
u1vBoIBuubZKJjfOG+vOfQ7prcQB9GBNY3u9rM85rmuJczVKSOdZsFJg9vllwMPo
56FR7yZ1y9/X7cGLQyUyd/r8cHz12TUgBL5JsVjIFoFoG7nPacksGnBVFh0aTQax
+MQDAJIRrngi591HReF2ZuiKYZZWVL3Dfbo6mfGUft4Tvld2AC71yycUlZnPvJhE
6YMTd/pwCejkfg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:43 2025 by rpki-client