Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier: ytd/VZmgpUKguHT1UKTZLhYcMQro/w40qyDeWHEYUfU=
Subject key identifier: FB:33:40:24:50:EE:76:1F:6C:A9:26:3D:A9:EF:E3:9D:EC:4E:0B:FD
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 0194BBCDD0BF9BBBB84635BCB9FEF9BC990B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (hash: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=)
2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: ebSsNrhQ8da3rsfyVtYK2aVu9l4e5lFcCXOCYN6z120=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:bf:9b:bb:b8:46:35:bc:b9:fe:f9:bc:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=fb33402450ee761f6ca9263da9efe39dec4e0bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:0a:af:d7:32:10:1b:a6:dc:10:e4:22:f1:
47:02:5b:2d:20:8e:52:4e:2d:7f:95:2f:4d:1f:4f:
c7:80:15:2f:fe:d5:46:5d:70:bf:ad:a8:ee:46:68:
22:c9:b9:36:96:60:14:98:78:81:91:0d:8c:be:31:
90:11:7d:c6:b3:92:92:1b:95:f4:ad:94:86:e3:6c:
db:a3:d8:0d:7a:0f:91:27:23:94:f2:ba:ac:a2:41:
2f:0c:66:ad:fc:02:c3:04:41:f7:ae:5c:8b:8a:64:
2e:a3:98:04:ba:1a:19:4e:b1:43:45:0f:0e:cd:29:
b4:c5:39:30:88:aa:fd:0c:42:8d:e6:41:62:46:77:
94:08:b7:55:e4:93:0c:37:bd:f9:ba:87:82:95:a9:
b0:7d:1e:bf:24:d3:24:64:a3:51:b5:de:10:6e:6c:
bd:29:4f:14:fc:45:28:f1:e7:1c:eb:fe:e3:12:94:
d0:8c:10:6b:2f:09:27:96:f4:8a:53:63:c4:da:69:
f8:8f:af:e1:b1:28:6e:da:e0:f2:69:4f:14:a0:d7:
e8:66:b3:00:ca:62:1b:7d:f0:97:87:59:47:ab:da:
51:cb:d5:ab:86:3d:e0:c5:e7:d6:d5:3f:d4:74:7d:
ea:4d:b8:87:4a:6d:bf:0b:67:7e:e3:48:0c:e9:0a:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:33:40:24:50:EE:76:1F:6C:A9:26:3D:A9:EF:E3:9D:EC:4E:0B:FD
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0b:b8:3e:7f:ca:d8:56:76:7b:82:ae:e2:ca:e0:a9:31:50:
8a:0f:4a:ca:ef:e7:d5:15:96:54:14:ac:3c:d5:28:a1:7c:e0:
07:57:58:89:95:7d:85:33:95:b5:30:de:07:2d:b2:40:ca:82:
75:93:02:d1:a8:ff:8b:07:64:8f:3a:34:27:f8:fc:57:dc:92:
2e:83:27:0c:24:93:2d:cd:86:02:06:4a:57:c0:54:05:c0:f7:
c4:cb:66:dc:01:69:b6:c4:4e:7b:43:bc:a5:c4:14:ca:f2:cb:
3c:b3:57:4e:02:7e:02:53:a7:1f:8a:09:e6:36:50:ef:c4:f2:
63:1f:6a:c5:51:89:22:19:65:1a:05:3d:aa:c2:ed:63:64:48:
4f:50:cb:e8:80:6a:2d:43:fc:0a:cf:e6:a5:7a:d9:a0:08:07:
e8:47:08:14:9a:5d:d2:aa:03:2d:cc:79:ed:59:e3:2e:78:86:
6c:36:0a:41:89:0e:41:1a:08:55:d3:42:3d:7e:99:c0:ff:81:
4a:7d:47:8b:3f:99:d2:d7:39:ce:32:05:b5:ea:7e:34:0b:de:
51:63:ca:c3:c3:2b:75:64:2a:e5:39:d3:f5:da:f8:4a:60:66:
eb:89:47:83:8a:33:17:45:7c:e1:13:dd:3a:26:09:f1:32:d5:
89:c0:30:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdC/m7u4RjW8uf75vJkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzg4ZjRlYmI3NDFjMGMzNjlhMGZkMzA1OTRjZDAxMDFk
Yzc0NzYwHhcNMjUwMTMxMTAwMDE1WhcNMjUwMjAxMTAwMDE1WjAzMTEwLwYDVQQD
EyhmYjMzNDAyNDUwZWU3NjFmNmNhOTI2M2RhOWVmZTM5ZGVjNGUwYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCAKr9cyEBum3BDkIvFHAlstII5S
Ti1/lS9NH0/HgBUv/tVGXXC/rajuRmgiybk2lmAUmHiBkQ2MvjGQEX3Gs5KSG5X0
rZSG42zbo9gNeg+RJyOU8rqsokEvDGat/ALDBEH3rlyLimQuo5gEuhoZTrFDRQ8O
zSm0xTkwiKr9DEKN5kFiRneUCLdV5JMMN735uoeClamwfR6/JNMkZKNRtd4Qbmy9
KU8U/EUo8ecc6/7jEpTQjBBrLwknlvSKU2PE2mn4j6/hsShu2uDyaU8UoNfoZrMA
ymIbffCXh1lHq9pRy9Wrhj3gxefW1T/UdH3qTbiHSm2/C2d+40gM6QqiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPszQCRQ7nYfbKkmPanv453sTgv9MB8GA1UdIwQY
MBaAFJJ4j067dBwMNpoP0wWUzQEB3HR2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgt
ZGJmYWMwMGZiMGVmLzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgtZGJmYWMwMGZiMGVm
LzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAu4Pn/K
2FZ2e4Ku4srgqTFQig9Kyu/n1RWWVBSsPNUooXzgB1dYiZV9hTOVtTDeBy2yQMqC
dZMC0aj/iwdkjzo0J/j8V9ySLoMnDCSTLc2GAgZKV8BUBcD3xMtm3AFptsROe0O8
pcQUyvLLPLNXTgJ+AlOnH4oJ5jZQ78TyYx9qxVGJIhllGgU9qsLtY2RIT1DL6IBq
LUP8Cs/mpXrZoAgH6EcIFJpd0qoDLcx57VnjLniGbDYKQYkOQRoIVdNCPX6ZwP+B
Sn1Hiz+Z0tc5zjIFtep+NAveUWPKw8MrdWQq5TnT9dr4SmBm64lHg4ozF0V84RPd
OiYJ8TLVicAw1A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:15 2025 by rpki-client