Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: r8lZAK2Z1ZF21r7IpKWL6Wz64BeF88/QuPPWNK54WWc=
Subject key identifier: 65:AB:50:BB:5B:95:59:2B:C4:BE:2A:50:4D:5D:9A:CB:9C:EC:CA:23
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 0194BC7325446403B40667E119E5050C1229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 11F0
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: 41sVcrZ75b5jexSDkMmiemdZxQFNS8uhXpT43WbrTWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:44:64:03:b4:06:67:e1:19:e5:05:0c:12:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=65ab50bb5b95592bc4be2a504d5d9acb9cecca23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:fe:0b:4e:8e:7d:a7:d6:c3:6d:78:6b:8a:
28:83:2c:d3:40:4a:c2:ff:7a:90:7d:2b:4a:04:98:
ae:ab:21:f1:e0:2f:79:e4:be:d9:7f:2d:7f:0a:4f:
25:ac:60:ab:eb:d0:76:7c:f0:8a:ae:30:a3:6d:fc:
2e:3d:de:c4:4a:ae:36:1d:86:78:db:75:d0:06:28:
64:d6:b7:be:e3:40:7a:93:5c:fd:4a:c8:78:03:2e:
32:4f:b1:17:14:a2:6e:85:c5:39:48:b7:fb:d3:4d:
7c:49:97:7f:67:e5:ff:5d:0d:9f:c3:b1:d9:ff:34:
59:3d:8c:c7:33:96:cc:cf:d1:c4:e1:aa:e5:ce:7b:
f0:90:20:e7:8b:82:70:f4:c6:47:bd:27:5a:f2:95:
4e:d2:46:f0:9d:bb:bb:a9:35:d9:cf:69:4f:ca:a8:
c1:5b:9f:24:2a:f9:af:6d:1e:77:a2:08:79:ca:e3:
98:9a:7f:cb:a5:c4:62:04:5a:9e:72:78:42:8d:9b:
cd:f5:23:49:81:65:51:05:13:67:f4:40:53:fb:2b:
12:d9:4e:5d:0b:09:0c:c3:5e:5a:b9:20:e2:b3:f4:
d9:9e:71:2d:3c:f7:72:6a:8f:38:f5:07:d6:99:7f:
54:22:77:79:8e:ac:2b:cb:f3:d3:e9:9c:d3:f4:a4:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:50:BB:5B:95:59:2B:C4:BE:2A:50:4D:5D:9A:CB:9C:EC:CA:23
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:06:99:a2:a3:97:0b:7c:79:b9:2e:1b:b6:32:5c:e1:cc:de:
35:19:41:e7:da:77:ce:ff:cf:15:86:70:93:13:b1:fe:75:6f:
d6:02:00:e6:ba:d8:2b:c1:8e:d0:da:a4:2d:56:1c:47:d4:88:
28:8b:0a:40:00:f9:00:43:94:d5:eb:c8:8b:98:16:53:fd:06:
05:c2:28:6f:d4:36:c4:8b:5c:03:67:c6:13:e9:1c:58:8f:c8:
2c:d6:e9:3a:0c:e7:1b:ef:99:76:eb:90:17:70:24:12:fb:a9:
62:10:63:5a:e3:35:ea:7d:de:97:49:6c:a6:69:38:c9:35:02:
2c:23:10:16:21:bd:96:2d:b3:30:e6:76:47:f0:93:e1:9a:bf:
26:0b:f0:d5:50:a6:32:cf:67:7a:db:88:6a:09:14:29:40:ac:
63:14:b1:f4:08:40:7c:5b:67:53:25:5b:cc:c7:6b:c3:5a:cd:
20:94:77:8f:ab:c1:34:6a:62:80:55:fe:02:ce:60:04:18:06:
cc:01:81:01:5f:ea:66:61:02:3e:e0:3a:3a:07:de:de:66:d3:
19:51:fb:93:75:ec:88:e0:39:f3:8e:13:f8:bf:0d:7e:c6:7f:
41:1a:df:bb:bf:c1:c6:b2:09:0a:ac:ee:0f:bd:4f:c7:f8:5f:
ee:3d:37:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyVEZAO0BmfhGeUFDBIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYmM4ZGRiODAzMmUxODRjOTJiZmUyMDZlMzI4ZjJjMDVk
NzhlNGIwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
Eyg2NWFiNTBiYjViOTU1OTJiYzRiZTJhNTA0ZDVkOWFjYjljZWNjYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ET+C06OfafWw214a4oogyzTQErC
/3qQfStKBJiuqyHx4C955L7Zfy1/Ck8lrGCr69B2fPCKrjCjbfwuPd7ESq42HYZ4
23XQBihk1re+40B6k1z9Ssh4Ay4yT7EXFKJuhcU5SLf70018SZd/Z+X/XQ2fw7HZ
/zRZPYzHM5bMz9HE4arlznvwkCDni4Jw9MZHvSda8pVO0kbwnbu7qTXZz2lPyqjB
W58kKvmvbR53ogh5yuOYmn/LpcRiBFqecnhCjZvN9SNJgWVRBRNn9EBT+ysS2U5d
CwkMw15auSDis/TZnnEtPPdyao849QfWmX9UInd5jqwry/PT6ZzT9KSIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWrULtblVkrxL4qUE1dmsuc7MojMB8GA1UdIwQY
MBaAFJO8jduAMuGEySv+IG4yjywF145LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEt
YjkxNjc3NDhhOGEzLzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEtYjkxNjc3NDhhOGEz
LzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQaZoqOX
C3x5uS4btjJc4czeNRlB59p3zv/PFYZwkxOx/nVv1gIA5rrYK8GO0NqkLVYcR9SI
KIsKQAD5AEOU1evIi5gWU/0GBcIob9Q2xItcA2fGE+kcWI/ILNbpOgznG++ZduuQ
F3AkEvupYhBjWuM16n3el0lspmk4yTUCLCMQFiG9li2zMOZ2R/CT4Zq/Jgvw1VCm
Ms9netuIagkUKUCsYxSx9AhAfFtnUyVbzMdrw1rNIJR3j6vBNGpigFX+As5gBBgG
zAGBAV/qZmECPuA6Ogfe3mbTGVH7k3XsiOA5844T+L8NfsZ/QRrfu7/BxrIJCqzu
D71Px/hf7j03QA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:51 2025 by rpki-client