Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: 27G+K0L8f3+Ty2sNd9LvS/+kKu2038x8NA3b666lsSo=
Subject key identifier: CB:0E:1E:FB:E6:FC:EC:B7:43:A8:A4:EF:AD:D1:F8:07:D9:B6:78:1A
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 0194BC0500C6C0E0088CCD4CE36291E62010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 9B
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: /bkygn7qa44VMN080v7+7GmPaND7IrH4PEzofpex+sY=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:00:c6:c0:e0:08:8c:cd:4c:e3:62:91:e6:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=cb0e1efbe6fcecb743a8a4efadd1f807d9b6781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:64:9e:fa:48:e9:62:51:e3:7c:26:26:78:
59:d6:f8:48:48:3f:92:17:78:86:48:0b:5c:23:bc:
67:f3:22:0f:b4:ee:94:6b:cc:09:b2:67:3d:04:00:
c2:97:3e:65:d6:ee:d7:0f:32:c7:c6:e1:11:66:ee:
20:c7:d9:b8:36:65:a8:ce:e0:b0:50:14:d1:66:bd:
5d:7e:87:67:7a:d9:d6:c5:12:c9:34:be:77:c1:3e:
4b:46:ee:65:12:a8:5e:8e:84:59:7c:f4:56:b9:7f:
56:72:3b:d8:a8:38:71:df:9d:ef:e9:2b:95:4b:5b:
9b:3e:54:11:1e:fb:9f:ca:44:f3:00:e7:e0:b8:38:
fd:41:da:e6:ac:5b:41:94:0b:b1:7f:1e:3b:51:8a:
8f:c5:cd:e6:e1:00:25:49:99:ae:6b:9c:b5:8a:c2:
92:9e:bc:da:be:19:cc:a8:68:e7:02:80:30:3b:c8:
94:d6:76:da:c6:83:15:67:dc:00:ec:60:0c:0d:f7:
32:a6:eb:11:e8:84:50:88:d4:5c:31:ca:e3:1e:38:
da:07:cf:c9:6c:3b:70:24:72:89:fe:72:22:c7:aa:
65:5a:f5:3e:18:31:87:d9:14:f6:10:dc:51:61:3b:
b8:1a:cd:f2:ea:41:8b:72:b6:c0:39:15:97:9b:80:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:1E:FB:E6:FC:EC:B7:43:A8:A4:EF:AD:D1:F8:07:D9:B6:78:1A
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9a:0f:e1:f8:18:bb:fd:bd:cf:2e:51:05:b8:ef:56:27:e1:
03:4d:7e:e8:79:a0:8b:cd:ad:ba:66:c7:d4:5c:19:d4:ce:49:
77:67:55:d6:6e:ba:5a:16:10:8a:62:68:3a:82:a9:33:f5:81:
35:b2:8b:47:ea:14:44:e4:a4:32:77:72:d8:72:fa:14:4e:40:
57:55:e2:2f:f7:91:2a:4d:4a:ea:33:39:03:ab:16:05:c6:3e:
9b:af:5d:64:23:24:aa:be:7c:ba:05:ff:f9:b7:a4:bc:59:aa:
3b:d5:0e:e3:00:3b:9f:04:ec:0e:bb:82:a4:81:9d:3e:29:e0:
9c:90:44:95:2a:76:f5:27:ff:6f:34:71:3e:ce:53:3e:8f:c2:
f8:d3:68:1e:3e:2a:5d:87:13:46:d3:b4:cf:5a:81:4a:80:cf:
a2:8e:12:98:c7:e0:63:25:18:ab:c8:57:74:af:d5:f3:30:1e:
53:e2:7a:85:4d:8a:1a:19:7e:b9:13:06:ab:54:5d:bd:d3:25:
9e:5c:11:39:6d:42:76:88:56:91:2f:e2:da:56:62:b3:a9:52:
e0:18:50:b1:c7:84:0e:20:b6:f8:b1:07:3d:2e:ac:f9:24:d9:
f4:93:e6:d9:69:ed:2d:3c:a4:f8:18:3a:d5:04:a9:c5:8d:d3:
78:b2:bd:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQDGwOAIjM1M42KR5iAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzhjZGNhMTYxNmMzYzZiNWYxOTFmYzMzYTkzNDc4OWIx
MmMwNjkwHhcNMjUwMTMxMTEwMDMxWhcNMjUwMjAxMTEwMDMxWjAzMTEwLwYDVQQD
EyhjYjBlMWVmYmU2ZmNlY2I3NDNhOGE0ZWZhZGQxZjgwN2Q5YjY3ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaxknvpI6WJR43wmJnhZ1vhISD+S
F3iGSAtcI7xn8yIPtO6Ua8wJsmc9BADClz5l1u7XDzLHxuERZu4gx9m4NmWozuCw
UBTRZr1dfodnetnWxRLJNL53wT5LRu5lEqhejoRZfPRWuX9WcjvYqDhx353v6SuV
S1ubPlQRHvufykTzAOfguDj9QdrmrFtBlAuxfx47UYqPxc3m4QAlSZmua5y1isKS
nrzavhnMqGjnAoAwO8iU1nbaxoMVZ9wA7GAMDfcypusR6IRQiNRcMcrjHjjaB8/J
bDtwJHKJ/nIix6plWvU+GDGH2RT2ENxRYTu4Gs3y6kGLcrbAORWXm4C5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsOHvvm/Oy3Q6ik763R+AfZtngaMB8GA1UdIwQY
MBaAFCt4zcoWFsPGtfGR/DOpNHibEsBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEt
M2VhYTAzNGE4OTc4LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEtM2VhYTAzNGE4OTc4
LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppoP4fgY
u/29zy5RBbjvVifhA01+6Hmgi82tumbH1FwZ1M5Jd2dV1m66WhYQimJoOoKpM/WB
NbKLR+oUROSkMndy2HL6FE5AV1XiL/eRKk1K6jM5A6sWBcY+m69dZCMkqr58ugX/
+bekvFmqO9UO4wA7nwTsDruCpIGdPingnJBElSp29Sf/bzRxPs5TPo/C+NNoHj4q
XYcTRtO0z1qBSoDPoo4SmMfgYyUYq8hXdK/V8zAeU+J6hU2KGhl+uRMGq1RdvdMl
nlwROW1CdohWkS/i2lZis6lS4BhQsceEDiC2+LEHPS6s+STZ9JPm2WntLTyk+Bg6
1QSpxY3TeLK9hw==
-----END CERTIFICATE-----
Generated at Thu May 1 07:19:12 2025 by rpki-client