Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: vj3p8VB7IVzYwIWAXE6568Xvfogb2V4nYdBESsiFVU8=
Subject key identifier: 76:8F:58:31:70:3D:3F:45:24:95:4E:C4:66:09:DC:20:79:95:B0:0A
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 0194BBCDBDBBFFF021A85E0AC9F5F40A0569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: ismUe7YWug7yRXPLsIFg19jsitPvVWEhc8osdMRK/oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:bb:ff:f0:21:a8:5e:0a:c9:f5:f4:0a:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=768f5831703d3f4524954ec46609dc207995b00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:e1:13:80:38:78:2e:9e:da:3f:12:5d:9f:
a4:b7:80:e1:60:e4:45:e8:9c:f9:9f:89:eb:03:15:
b5:fa:b9:25:eb:3f:d6:d6:10:f8:0f:60:b3:eb:42:
01:d4:b0:f4:5c:12:ce:c3:67:cc:42:f4:5a:e2:38:
ad:ce:d0:53:ff:72:47:5e:2f:35:e8:8b:93:d7:8a:
e2:05:41:f7:31:89:75:d4:92:59:84:af:01:93:db:
fc:8b:64:10:43:dc:ca:3f:da:a1:dc:29:c8:61:7a:
5c:0e:e1:24:50:5d:14:88:22:71:a7:d7:14:e8:09:
52:ea:ca:d7:90:07:22:c9:94:6d:19:c9:e0:79:bb:
25:d2:61:3f:9b:89:86:ad:af:3b:1f:cd:a9:81:fe:
f1:fc:23:de:93:cf:47:f6:21:0e:41:e9:c1:b5:db:
15:75:a9:5c:51:13:5a:fd:4f:64:bc:8a:de:61:0a:
d4:93:29:b4:86:54:9d:b5:30:08:9c:7c:89:68:d7:
1f:a0:5f:b3:60:72:ef:c4:66:71:75:0b:b9:2c:b4:
86:29:06:b9:71:09:5b:8e:f7:2e:a7:03:6d:c7:d0:
d8:9e:2c:66:14:ee:2f:0a:9f:bb:39:77:cf:e4:b0:
99:7a:d9:4e:6c:5a:c8:c2:d8:ba:c1:74:69:cf:ca:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:58:31:70:3D:3F:45:24:95:4E:C4:66:09:DC:20:79:95:B0:0A
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:50:61:09:3b:82:94:f8:10:50:b3:ee:2b:a8:80:9c:df:
69:42:65:06:26:9e:45:e4:74:7d:8e:0a:79:6b:9d:cd:ba:95:
fc:82:0a:04:8b:7d:7e:ff:ae:b3:7f:20:9a:3d:b1:7f:83:77:
f4:fd:4b:5d:03:6f:a6:47:0d:31:6c:93:75:bd:09:5c:08:b5:
fd:43:2f:39:1e:d6:cb:73:39:ae:7c:b8:15:55:40:d9:07:ff:
9e:f1:79:10:b2:1e:2f:06:c0:b5:0c:c1:54:6f:9a:27:1f:c2:
36:ef:a2:6f:0e:8a:28:6f:fb:bd:a2:73:11:99:06:0b:c4:c6:
71:7c:87:78:13:0e:ed:ed:b7:83:e0:e6:bc:a9:cc:15:ad:64:
17:9f:e7:72:64:d8:35:ab:97:07:72:cc:d6:30:90:6e:b9:01:
96:90:18:a5:0e:b0:cf:04:78:07:11:a0:a7:37:1a:6b:0b:bc:
a8:0e:c3:46:5b:12:b5:4b:be:0f:36:0f:2a:cf:e5:ab:c1:92:
aa:41:b4:a0:16:d8:8e:0e:11:1e:a0:37:ee:09:61:d4:6e:4b:
1f:35:b9:7b:79:b6:de:74:9b:4a:a4:34:3c:20:15:33:28:22:
0e:41:c4:7c:a7:af:71:00:41:6e:99:c7:53:89:c3:8a:66:e6:
2c:93:c2:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb27//AhqF4KyfX0CgVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzU4ZjkyYTdmZDczNTliYTI4NDgxMjVhODRkZmNjNDJk
MTRiNmMwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
Eyg3NjhmNTgzMTcwM2QzZjQ1MjQ5NTRlYzQ2NjA5ZGMyMDc5OTViMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ThE4A4eC6e2j8SXZ+kt4DhYORF
6Jz5n4nrAxW1+rkl6z/W1hD4D2Cz60IB1LD0XBLOw2fMQvRa4jitztBT/3JHXi81
6IuT14riBUH3MYl11JJZhK8Bk9v8i2QQQ9zKP9qh3CnIYXpcDuEkUF0UiCJxp9cU
6AlS6srXkAciyZRtGcngebsl0mE/m4mGra87H82pgf7x/CPek89H9iEOQenBtdsV
dalcURNa/U9kvIreYQrUkym0hlSdtTAInHyJaNcfoF+zYHLvxGZxdQu5LLSGKQa5
cQlbjvcupwNtx9DYnixmFO4vCp+7OXfP5LCZetlObFrIwti6wXRpz8qXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaPWDFwPT9FJJVOxGYJ3CB5lbAKMB8GA1UdIwQY
MBaAFJN1j5Kn/XNZuihIElqE38xC0UtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEt
ZTE0M2ZhYWEwYjgyLzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEtZTE0M2ZhYWEwYjgy
LzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEstQYQk7
gpT4EFCz7iuogJzfaUJlBiaeReR0fY4KeWudzbqV/IIKBIt9fv+us38gmj2xf4N3
9P1LXQNvpkcNMWyTdb0JXAi1/UMvOR7Wy3M5rny4FVVA2Qf/nvF5ELIeLwbAtQzB
VG+aJx/CNu+ibw6KKG/7vaJzEZkGC8TGcXyHeBMO7e23g+DmvKnMFa1kF5/ncmTY
NauXB3LM1jCQbrkBlpAYpQ6wzwR4BxGgpzcaawu8qA7DRlsStUu+DzYPKs/lq8GS
qkG0oBbYjg4RHqA37glh1G5LHzW5e3m23nSbSqQ0PCAVMygiDkHEfKevcQBBbpnH
U4nDimbmLJPCrg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:16 2025 by rpki-client