Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: DIywJgBcRLP1MELomhgHiq8b08LjAgKovBkuSk2Lf4I=
Subject key identifier: 4F:10:AB:AF:58:40:47:8F:09:42:E2:B1:09:D1:98:75:BF:A4:8D:FE
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 0194BBCE85C284AF42C6F4F17275C91615A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: belQRA428auTQNsKliK3sA8dBBFHbSRUx2T/P1aWzdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:c2:84:af:42:c6:f4:f1:72:75:c9:16:15:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=4f10abaf5840478f0942e2b109d19875bfa48dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:f3:9c:c7:11:b0:14:46:70:34:86:88:02:
7d:85:54:b5:f1:5c:cc:93:8f:7e:40:0c:79:dd:f9:
25:e7:d0:fd:62:f4:73:2a:3e:cc:80:75:59:7f:df:
f6:2a:6e:a3:6d:29:f3:60:4f:79:ae:57:ff:68:66:
2d:4b:8d:51:1f:70:24:94:78:6a:fc:05:65:d9:5e:
e9:64:75:8e:64:d1:19:83:a5:d7:cb:80:ff:da:36:
da:4e:de:fe:14:99:a4:47:a4:af:2e:74:12:69:72:
15:5d:bd:30:a0:01:cf:32:08:3f:fa:16:f8:15:c7:
d0:bf:51:78:7e:e0:2b:a7:14:12:f7:a8:68:1a:70:
34:32:71:a2:d0:a4:70:12:e8:db:3b:4e:db:37:c4:
07:7c:13:fa:18:24:89:f7:4d:67:12:5a:3d:5f:96:
02:d1:38:a4:58:75:bc:a5:9c:46:e3:f5:7c:06:af:
d9:99:3f:dc:04:60:ad:35:a2:1c:ba:8a:b2:61:80:
87:67:74:b3:89:1d:00:06:a7:0c:4f:1b:ae:03:18:
58:6f:91:50:d5:30:a1:52:58:7b:53:c3:dc:f7:94:
29:df:34:c0:d4:ae:02:8a:fe:79:bd:ee:6a:1a:c7:
14:cc:68:7e:39:17:a4:6a:ff:07:11:44:37:7b:b9:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:10:AB:AF:58:40:47:8F:09:42:E2:B1:09:D1:98:75:BF:A4:8D:FE
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:81:37:85:88:f7:91:b8:52:45:fc:17:9a:2f:09:ad:2a:ac:
e3:44:83:9d:9c:1e:e6:03:ca:63:ff:60:58:7c:b9:ff:ce:8a:
33:1c:91:01:57:51:db:f3:8f:91:d5:fd:47:e7:a6:5e:0e:62:
95:d4:30:0e:77:cb:09:85:44:86:c4:8e:0b:50:3a:a7:50:10:
6c:15:2a:35:aa:db:6b:2b:df:7e:71:98:33:76:6b:54:b9:90:
74:cd:e8:bb:c6:7a:2f:67:0d:9c:dc:44:a4:c6:a6:5c:f3:e3:
e5:a7:c4:d1:c2:b3:52:ab:0c:ff:1c:1f:5b:ec:93:c3:6f:8b:
39:1d:61:73:6b:6d:9b:c7:7e:33:b6:43:ff:44:08:17:2c:74:
c7:29:04:33:e9:8f:6b:0c:90:f7:40:2d:46:0c:0d:00:a8:ce:
e0:1e:72:9f:f1:81:76:2c:30:6a:55:bb:9f:aa:aa:31:b0:03:
26:53:e1:b4:76:1b:b0:fb:94:17:58:e2:3f:af:84:fc:89:ef:
5e:d1:4a:b5:67:5d:a5:cb:84:49:d9:8a:4b:c3:2f:cf:5c:1e:
fd:ec:b1:f9:53:2c:84:5c:ad:05:d3:a4:39:0d:52:8f:59:f4:
1f:03:40:be:cb:72:93:a6:68:18:42:13:89:e9:c3:b4:4a:a5:
13:b9:f1:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoXChK9CxvTxcnXJFhWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk
N2YzNjYwHhcNMjUwMTMxMTAwMTAxWhcNMjUwMjAxMTAwMTAxWjAzMTEwLwYDVQQD
Eyg0ZjEwYWJhZjU4NDA0NzhmMDk0MmUyYjEwOWQxOTg3NWJmYTQ4ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJzznMcRsBRGcDSGiAJ9hVS18VzM
k49+QAx53fkl59D9YvRzKj7MgHVZf9/2Km6jbSnzYE95rlf/aGYtS41RH3AklHhq
/AVl2V7pZHWOZNEZg6XXy4D/2jbaTt7+FJmkR6SvLnQSaXIVXb0woAHPMgg/+hb4
FcfQv1F4fuArpxQS96hoGnA0MnGi0KRwEujbO07bN8QHfBP6GCSJ901nElo9X5YC
0TikWHW8pZxG4/V8Bq/ZmT/cBGCtNaIcuoqyYYCHZ3SziR0ABqcMTxuuAxhYb5FQ
1TChUlh7U8Pc95Qp3zTA1K4Civ55ve5qGscUzGh+ORekav8HEUQ3e7m/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8Qq69YQEePCULisQnRmHW/pI3+MB8GA1UdIwQY
MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt
ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz
LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIE3hYj3
kbhSRfwXmi8JrSqs40SDnZwe5gPKY/9gWHy5/86KMxyRAVdR2/OPkdX9R+emXg5i
ldQwDnfLCYVEhsSOC1A6p1AQbBUqNarbayvffnGYM3ZrVLmQdM3ou8Z6L2cNnNxE
pMamXPPj5afE0cKzUqsM/xwfW+yTw2+LOR1hc2ttm8d+M7ZD/0QIFyx0xykEM+mP
awyQ90AtRgwNAKjO4B5yn/GBdiwwalW7n6qqMbADJlPhtHYbsPuUF1jiP6+E/Inv
XtFKtWddpcuESdmKS8Mvz1we/eyx+VMshFytBdOkOQ1Sj1n0HwNAvstyk6ZoGEIT
ienDtEqlE7nxvg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:31 2025 by rpki-client