Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: WOaJI6ayAG5DPy64VEhR/vSVcA1AEnqhQAQMLvIWVio=
Subject key identifier: C0:9E:B9:57:19:51:A6:56:F9:8C:03:A5:52:F6:66:E8:A7:9E:3D:A2
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 0194BD17C244DAC3E4BEC9151B8BE25144E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: umwTKu9MOXg1mhX4XFsRnUjKOHz5roccdRMfT4cetGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:44:da:c3:e4:be:c9:15:1b:8b:e2:51:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=c09eb9571951a656f98c03a552f666e8a79e3da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:00:cd:d6:e9:78:21:65:5a:37:29:44:ee:
4f:8c:41:c9:18:f5:94:6d:34:75:03:19:e1:86:35:
69:55:82:08:4a:2e:27:b0:36:32:6e:cd:ea:bd:b2:
73:47:1c:44:27:99:56:c6:59:7f:d6:c9:d8:76:de:
d6:bc:7a:b9:87:a6:26:6a:bb:61:60:34:7c:e5:70:
f3:83:0c:8e:98:f2:86:c6:71:20:35:24:00:6e:c0:
5a:af:35:39:b9:2d:0e:5f:e8:58:43:07:e1:11:67:
b3:1a:0a:02:72:d0:95:80:a5:db:bf:9c:0c:ac:a2:
49:e0:ca:f7:51:04:a5:2a:32:bf:62:85:20:5f:7f:
0d:af:a3:81:67:89:25:c0:b3:23:8c:75:e7:67:2b:
cc:ce:22:6f:05:54:88:8f:9e:cd:e6:33:8b:a6:19:
4c:f3:74:a0:b7:58:b8:7c:17:29:09:38:4f:9c:06:
5c:66:9f:57:11:96:88:1c:68:9e:c3:0b:97:32:d7:
54:f6:83:53:00:85:5c:7f:4a:ea:ca:e3:65:66:7f:
64:58:2c:38:c7:36:f2:3b:6b:75:ad:56:fa:e9:ba:
d6:61:de:e0:f3:2d:91:0c:13:8f:fd:b1:b8:52:81:
ff:04:bd:92:b2:ef:7a:9e:4d:17:fc:6c:db:3c:2d:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:B9:57:19:51:A6:56:F9:8C:03:A5:52:F6:66:E8:A7:9E:3D:A2
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ce:90:d5:a0:06:bb:b5:35:09:2b:1c:e7:e4:06:39:fe:4a:
76:52:37:66:4f:a2:f4:96:b8:cc:59:d4:c9:0e:ac:de:16:dc:
0c:60:79:7f:05:b5:6e:0c:e8:cd:ad:18:26:8c:97:27:64:dd:
ff:d8:e2:d7:92:c8:3a:a1:bb:27:71:50:1b:72:5c:a0:30:df:
73:f5:8f:87:f8:16:74:91:b8:86:64:5d:8b:17:3f:9b:e2:b5:
4b:84:e6:de:04:8c:e8:42:12:cf:b2:a8:8e:01:eb:09:80:19:
cd:9e:b8:4a:01:ba:fb:81:6c:42:21:7f:a0:08:21:fa:26:97:
6f:65:52:68:3d:ce:f4:c7:da:94:11:91:7e:0e:4c:54:44:ae:
99:8f:27:2e:7c:aa:de:4b:7e:c4:6d:b1:99:14:49:34:56:5a:
a9:21:11:9e:00:c4:05:e1:3a:61:bd:69:4b:b1:42:5c:78:03:
fb:37:57:54:c0:cf:8f:58:5c:d5:ad:47:63:f2:47:7e:2f:ef:
ae:73:09:1e:af:02:94:63:35:4e:9d:6e:0b:40:37:fd:43:28:
e5:c1:bf:16:ce:a5:83:72:6d:f4:f8:0b:f7:3d:1b:56:2b:dc:
74:ee:d7:58:d2:77:08:34:7b:54:86:bc:b5:52:20:1c:3b:c9:
1f:7c:91:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8JE2sPkvskVG4viUUTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz
MWViMGUwHhcNMjUwMTMxMTYwMDM4WhcNMjUwMjAxMTYwMDM4WjAzMTEwLwYDVQQD
EyhjMDllYjk1NzE5NTFhNjU2Zjk4YzAzYTU1MmY2NjZlOGE3OWUzZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwMAzdbpeCFlWjcpRO5PjEHJGPWU
bTR1AxnhhjVpVYIISi4nsDYybs3qvbJzRxxEJ5lWxll/1snYdt7WvHq5h6Ymarth
YDR85XDzgwyOmPKGxnEgNSQAbsBarzU5uS0OX+hYQwfhEWezGgoCctCVgKXbv5wM
rKJJ4Mr3UQSlKjK/YoUgX38Nr6OBZ4klwLMjjHXnZyvMziJvBVSIj57N5jOLphlM
83Sgt1i4fBcpCThPnAZcZp9XEZaIHGiewwuXMtdU9oNTAIVcf0rqyuNlZn9kWCw4
xzbyO2t1rVb66brWYd7g8y2RDBOP/bG4UoH/BL2Ssu96nk0X/GzbPC3gPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCeuVcZUaZW+YwDpVL2Zuinnj2iMB8GA1UdIwQY
MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt
ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0
LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ86Q1aAG
u7U1CSsc5+QGOf5KdlI3Zk+i9Ja4zFnUyQ6s3hbcDGB5fwW1bgzoza0YJoyXJ2Td
/9ji15LIOqG7J3FQG3JcoDDfc/WPh/gWdJG4hmRdixc/m+K1S4Tm3gSM6EISz7Ko
jgHrCYAZzZ64SgG6+4FsQiF/oAgh+iaXb2VSaD3O9MfalBGRfg5MVESumY8nLnyq
3kt+xG2xmRRJNFZaqSERngDEBeE6Yb1pS7FCXHgD+zdXVMDPj1hc1a1HY/JHfi/v
rnMJHq8ClGM1Tp1uC0A3/UMo5cG/Fs6lg3Jt9PgL9z0bVivcdO7XWNJ3CDR7VIa8
tVIgHDvJH3yRdg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:22 2025 by rpki-client