Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
File: KaA5l7KPWbCAMciYQH3V5RN93bE.mft (raw, json)
Hash identifier: 6aXUyk0GoZWpVvLFU4FH1nvnh4OSx9YWlArtfEa5mB4=
Subject key identifier: AA:F3:0D:8F:F9:74:F5:23:EA:E2:95:F3:30:28:1D:D9:8E:F8:0F:45
Authority key identifier: 29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
Certificate issuer: /CN=29a03997b28f59b08031c898407dd5e5137dddb1
Certificate serial: 0194BCA9E0155EF7453E2B2E4F7E0E3F1C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
Manifest number: 1116
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: KaA5l7KPWbCAMciYQH3V5RN93bE.crl (hash: qApAzBMwc7D0JvwfAX11PoxJwPnt7CzXjNG/20waH+A=)
2: TFGcxJc1hz5sSLNvCaBuhb3JcFY.roa (hash: IVGRn6jYdKaVvVkrmcrSKzMRsOoEhE2vOI0riR6WQTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:15:5e:f7:45:3e:2b:2e:4f:7e:0e:3f:1c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a03997b28f59b08031c898407dd5e5137dddb1
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=aaf30d8ff974f523eae295f330281dd98ef80f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:1d:a6:10:ed:f4:96:7b:17:9a:fd:b2:53:
d0:70:a3:1b:6c:de:95:2c:57:16:77:c6:2f:c3:8d:
7e:ee:92:2f:b5:01:4a:e1:25:66:f2:84:a2:f4:65:
fb:58:0e:68:89:cd:bf:2a:c0:f0:9a:67:ad:03:12:
de:0b:64:bf:ce:9b:49:c1:a4:3e:c3:c7:78:2f:f6:
a9:73:ce:d8:5a:25:3c:02:5b:a4:d9:e2:ae:f8:3d:
3f:9e:0d:0f:7d:7b:59:60:f6:b8:51:3c:93:f8:8f:
46:56:3d:f2:0a:a2:e2:ea:90:74:9e:a4:31:86:e4:
66:14:e1:5e:be:a4:e8:e6:c0:ee:ab:6e:ef:ed:3e:
99:38:b6:50:63:9b:e8:8f:6e:5d:33:c1:27:7d:f6:
bc:b7:40:1b:64:bb:ed:ab:da:4a:9e:4e:db:ba:98:
c3:46:8f:fd:a4:a0:80:2c:4a:6c:12:3f:f3:1e:bb:
4e:03:d0:03:14:f2:50:5d:b4:f6:e7:23:ce:5d:0e:
29:c9:82:1b:85:f2:70:95:00:d5:00:2c:87:c9:1b:
40:5c:6e:4b:0a:54:fe:f3:19:8a:bb:47:47:15:02:
aa:ce:ad:bc:94:39:ec:e2:29:a7:a1:f1:80:63:ff:
db:72:e8:5a:05:94:65:5b:9f:bf:75:71:9b:9f:ba:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:0D:8F:F9:74:F5:23:EA:E2:95:F3:30:28:1D:D9:8E:F8:0F:45
X509v3 Authority Key Identifier:
keyid:29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:ff:a2:58:0d:d3:d1:b2:85:67:29:52:ab:38:de:3a:e2:
92:bd:3e:20:13:3a:f0:d8:57:ad:7c:a0:0c:fb:82:a8:1e:8a:
2a:98:d9:ef:2d:e9:90:7c:dd:74:ef:48:3c:9f:f6:a5:ef:91:
75:ae:76:0d:59:4a:7d:a4:6e:ee:04:7f:2f:10:b5:0f:d8:69:
a3:0a:fb:1b:82:63:c7:9c:49:15:67:42:87:c7:94:44:69:73:
73:89:70:dc:dc:d8:df:66:14:52:97:d0:57:01:66:ff:85:cc:
67:61:07:59:a4:20:61:48:c5:c8:20:3c:6d:f2:88:e5:1d:8a:
c1:24:a7:7d:c3:c2:37:be:b5:a1:4d:d4:a9:20:82:cb:74:ba:
f1:61:94:9c:df:d1:13:4b:ce:66:05:65:26:63:15:44:dd:ec:
77:6c:1a:5b:f4:61:fc:2b:34:8b:1d:1b:51:fb:c4:3d:15:aa:
14:11:22:fd:a9:6a:83:e7:28:45:45:ec:2b:58:7e:38:22:c3:
12:0b:4f:17:98:66:3b:e2:fe:d4:00:9a:37:87:41:35:82:95:
c2:4d:df:48:9b:15:52:d7:22:b1:a8:e3:2f:96:c4:04:16:5c:
ee:a5:de:01:86:0e:66:81:a7:b6:24:8a:f6:54:44:83:f9:51:
51:72:54:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeAVXvdFPisuT34OPxw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTAzOTk3YjI4ZjU5YjA4MDMxYzg5ODQwN2RkNWU1MTM3
ZGRkYjEwHhcNMjUwMTMxMTQwMDM3WhcNMjUwMjAxMTQwMDM3WjAzMTEwLwYDVQQD
EyhhYWYzMGQ4ZmY5NzRmNTIzZWFlMjk1ZjMzMDI4MWRkOThlZjgwZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPgdphDt9JZ7F5r9slPQcKMbbN6V
LFcWd8Yvw41+7pIvtQFK4SVm8oSi9GX7WA5oic2/KsDwmmetAxLeC2S/zptJwaQ+
w8d4L/apc87YWiU8Aluk2eKu+D0/ng0PfXtZYPa4UTyT+I9GVj3yCqLi6pB0nqQx
huRmFOFevqTo5sDuq27v7T6ZOLZQY5voj25dM8Enffa8t0AbZLvtq9pKnk7bupjD
Ro/9pKCALEpsEj/zHrtOA9ADFPJQXbT25yPOXQ4pyYIbhfJwlQDVACyHyRtAXG5L
ClT+8xmKu0dHFQKqzq28lDns4imnofGAY//bcuhaBZRlW5+/dXGbn7p+BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrzDY/5dPUj6uKV8zAoHdmO+A9FMB8GA1UdIwQY
MBaAFCmgOZeyj1mwgDHImEB91eUTfd2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FBNWw3S1BXYkNBTWNpWVFIM1Y1Uk45M2JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMTliZTItMzk2Zi00MjdmLTk0MmMt
MWY4ZTUyMjQwOGE1LzEvS2FBNWw3S1BXYkNBTWNpWVFIM1Y1Uk45M2JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yMTliZTItMzk2Zi00MjdmLTk0MmMtMWY4ZTUyMjQwOGE1
LzEvS2FBNWw3S1BXYkNBTWNpWVFIM1Y1Uk45M2JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATof/olgN
09GyhWcpUqs43jrikr0+IBM68NhXrXygDPuCqB6KKpjZ7y3pkHzddO9IPJ/2pe+R
da52DVlKfaRu7gR/LxC1D9hpowr7G4Jjx5xJFWdCh8eURGlzc4lw3NzY32YUUpfQ
VwFm/4XMZ2EHWaQgYUjFyCA8bfKI5R2KwSSnfcPCN761oU3UqSCCy3S68WGUnN/R
E0vOZgVlJmMVRN3sd2waW/Rh/Cs0ix0bUfvEPRWqFBEi/alqg+coRUXsK1h+OCLD
EgtPF5hmO+L+1ACaN4dBNYKVwk3fSJsVUtcisajjL5bEBBZc7qXeAYYOZoGntiSK
9lREg/lRUXJUSw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:07:00 2025 by rpki-client