Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: +O3WcyVsbJ9jc1D6y7Nfgb3Af8tygkDS29TsICfcuAQ=
Subject key identifier: F2:15:EB:E1:78:CC:1C:F1:96:5F:A3:78:22:DD:7D:20:3D:67:76:1E
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 0194BC72FB36C2BDD29708B97C2473458DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 103A
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (hash: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=)
2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: D+FQm/3cespuaJhQyyZlWxnyeujBNTnVJ4khCRH1QP0=)
4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fb:36:c2:bd:d2:97:08:b9:7c:24:73:45:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=f215ebe178cc1cf1965fa37822dd7d203d67761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:82:cf:4d:7a:13:27:8f:25:f1:22:c9:c8:
fd:2d:ae:8b:04:c7:08:b6:e0:40:6d:61:a0:cc:70:
76:13:78:00:90:47:60:05:f5:fb:89:67:a1:5e:fe:
3a:c2:02:f0:e5:86:9f:f5:c5:60:af:d5:d1:0a:33:
1a:9c:f7:3f:28:c8:4c:1f:ae:ae:e2:95:0d:2a:7f:
15:46:a1:d3:3b:bf:62:cb:e6:f8:85:6b:18:2f:d4:
46:d6:ea:1a:a1:c6:d5:70:66:78:55:3a:24:8b:8d:
e4:36:11:2e:05:c3:46:88:2d:8f:55:ec:33:18:52:
d0:2f:9c:91:b1:23:74:29:36:5d:7e:0a:fc:58:e7:
56:41:32:ac:aa:9c:11:1e:65:19:de:13:c6:8a:6d:
94:74:e8:66:fd:32:45:7d:44:96:52:82:9b:7a:94:
44:86:70:fd:02:d2:b4:7c:cc:c5:cf:19:ff:eb:5b:
15:f2:54:b8:23:8c:0c:ac:0c:ca:fa:d5:64:ff:b8:
51:44:ea:52:1f:00:cb:59:1c:a3:9a:a0:6b:f8:de:
7d:75:c0:b4:a4:18:e7:b5:7c:e8:83:aa:ab:48:73:
2f:21:e7:36:8c:ac:b5:96:34:0b:09:91:ba:29:77:
29:68:48:dc:58:c7:c8:3e:8d:51:fc:ce:40:a1:73:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:EB:E1:78:CC:1C:F1:96:5F:A3:78:22:DD:7D:20:3D:67:76:1E
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:19:29:43:9b:2c:6f:80:ed:68:07:c3:77:2e:69:ab:bb:d4:
1d:8c:c5:3f:2c:f3:01:10:4d:c0:d0:8f:ed:df:93:12:aa:36:
93:3a:36:a4:df:21:26:d2:0e:fa:fd:90:56:96:e6:3f:fc:80:
3e:3d:4b:93:7b:01:a7:97:3e:71:7a:95:8b:b7:25:db:22:db:
b0:c4:7f:03:27:61:79:24:37:72:48:98:3f:96:7b:7f:54:6f:
53:d0:35:44:7b:8b:6a:b0:db:9b:6b:0a:e3:5c:17:fc:f1:95:
4f:61:4c:f4:b9:f0:7f:63:3d:00:37:b4:de:dc:38:ae:9d:1c:
1c:2b:55:6e:6f:f9:b7:b7:b7:00:8b:c0:bd:7e:80:03:39:9d:
32:9e:48:94:07:a2:06:c6:99:24:35:d6:85:68:92:bc:d1:ad:
ba:00:83:b7:9b:b3:42:31:e5:4c:a3:4f:c2:98:86:56:2c:c2:
9b:ba:7a:ec:ff:29:40:f1:26:77:77:d8:f8:9f:f7:6d:af:52:
84:dc:22:e5:32:c2:07:61:76:55:8a:b9:86:44:46:90:c4:5f:
c8:b8:c4:58:b8:48:ec:f6:1d:c3:dc:56:88:64:e0:eb:f5:ba:
a3:cb:da:ad:f9:b7:3c:73:a5:4f:91:71:f1:24:22:de:43:8e:
fb:39:b3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvs2wr3Slwi5fCRzRY3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmI4ZmExMGRmZjM0NzNlNjUzZGJmNjFjOWE4NjQzMjE4
MGE1YzcwHhcNMjUwMTMxMTMwMDM5WhcNMjUwMjAxMTMwMDM5WjAzMTEwLwYDVQQD
EyhmMjE1ZWJlMTc4Y2MxY2YxOTY1ZmEzNzgyMmRkN2QyMDNkNjc3NjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqCCz016EyePJfEiycj9La6LBMcI
tuBAbWGgzHB2E3gAkEdgBfX7iWehXv46wgLw5Yaf9cVgr9XRCjManPc/KMhMH66u
4pUNKn8VRqHTO79iy+b4hWsYL9RG1uoaocbVcGZ4VToki43kNhEuBcNGiC2PVewz
GFLQL5yRsSN0KTZdfgr8WOdWQTKsqpwRHmUZ3hPGim2UdOhm/TJFfUSWUoKbepRE
hnD9AtK0fMzFzxn/61sV8lS4I4wMrAzK+tVk/7hRROpSHwDLWRyjmqBr+N59dcC0
pBjntXzog6qrSHMvIec2jKy1ljQLCZG6KXcpaEjcWMfIPo1R/M5AoXM3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIV6+F4zBzxll+jeCLdfSA9Z3YeMB8GA1UdIwQY
MBaAFJL7j6EN/zRz5lPb9hyahkMhgKXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDct
MjkzZjYxMjJhMTlkLzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDctMjkzZjYxMjJhMTlk
LzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxkpQ5ss
b4DtaAfDdy5pq7vUHYzFPyzzARBNwNCP7d+TEqo2kzo2pN8hJtIO+v2QVpbmP/yA
Pj1Lk3sBp5c+cXqVi7cl2yLbsMR/AydheSQ3ckiYP5Z7f1RvU9A1RHuLarDbm2sK
41wX/PGVT2FM9Lnwf2M9ADe03tw4rp0cHCtVbm/5t7e3AIvAvX6AAzmdMp5IlAei
BsaZJDXWhWiSvNGtugCDt5uzQjHlTKNPwpiGVizCm7p67P8pQPEmd3fY+J/3ba9S
hNwi5TLCB2F2VYq5hkRGkMRfyLjEWLhI7PYdw9xWiGTg6/W6o8varfm3PHOlT5Fx
8SQi3kOO+zmz6Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:34 2025 by rpki-client