Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: LIDhI74QbXU9YPeIu5OI/mTvrBBh6YXaddgRSvCOvu4=
Subject key identifier: 4B:5E:EC:57:50:B7:80:91:D4:E1:1A:D2:98:C3:CE:42:95:93:24:AA
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 0194BCA99E500D79C6D373AA984E4871537C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: BDoLZ01xviOaHyNSYC1qwfOdE5X/vndOop87WCdKX1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:50:0d:79:c6:d3:73:aa:98:4e:48:71:53:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=4b5eec5750b78091d4e11ad298c3ce42959324aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:38:00:32:27:1b:4d:93:e4:36:0d:09:e6:
43:af:72:66:67:6d:38:2b:ed:82:94:b9:2c:4c:7e:
13:7b:00:0f:29:b6:38:17:7d:c4:5e:d9:b7:51:89:
12:dd:e2:20:43:8e:00:65:53:fa:6b:67:09:38:47:
f2:e7:42:24:36:54:7e:5c:15:24:68:d4:e5:fb:0f:
c9:f9:46:49:e1:2d:8c:ab:be:c8:31:c9:7d:db:99:
8f:f4:d2:bb:b7:bf:7a:1a:ab:fe:b0:9e:89:dc:d2:
85:e9:87:e5:e7:f4:ec:95:23:e1:3e:e2:88:24:fa:
e5:ff:d0:3c:04:ce:54:55:79:6b:3d:0a:bf:73:f8:
73:8b:5a:31:76:90:0d:fd:8e:2e:f4:78:56:27:53:
a1:4e:96:14:c5:94:dd:6f:3c:46:58:20:32:f6:ab:
4f:ee:8e:83:ba:9d:3c:24:2e:3d:47:df:bc:00:de:
b8:cf:b2:71:de:55:33:65:56:8f:ea:7c:5d:46:f0:
b7:9a:16:9a:50:73:e2:84:be:92:13:ca:bb:df:4b:
57:6d:ae:47:11:d3:0b:e4:b7:0e:43:93:d8:8d:46:
e9:77:16:9c:b4:d1:4b:37:16:8b:6b:96:65:71:25:
62:74:e1:df:67:fa:4b:b0:67:36:f8:dc:38:42:44:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:EC:57:50:B7:80:91:D4:E1:1A:D2:98:C3:CE:42:95:93:24:AA
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2e:90:10:3c:41:dc:fc:b5:d8:9c:0c:02:ce:72:bf:a4:fa:
8c:00:2d:3a:f2:7e:21:db:a1:3a:32:52:44:fb:de:09:47:1e:
cf:76:27:fc:e8:62:72:49:ce:18:c5:6f:e3:b0:4c:6c:c9:e8:
5c:b5:da:b1:6b:22:1e:d1:44:e0:d2:f5:bf:3a:69:2a:6e:1e:
31:55:8b:f7:5e:1e:77:29:e3:af:ec:ca:b9:cc:74:0e:b9:61:
8a:04:66:61:0c:cd:62:5f:66:24:96:4b:fe:e6:fd:0a:e7:6c:
e0:1c:59:26:e9:07:0b:37:69:dd:da:eb:c8:b8:8f:3e:f1:b7:
63:eb:35:49:53:bc:f8:56:1b:e5:63:ff:54:d4:38:30:12:f2:
11:ed:90:f9:83:48:10:5c:4e:d4:ad:ad:51:87:03:87:0f:4e:
85:6b:20:f2:3b:79:05:2f:c5:21:ff:40:ca:0b:dd:d6:e6:77:
e8:cb:d6:bd:8b:c0:b1:eb:4c:b0:02:32:f9:de:85:64:0c:db:
a1:3e:b6:bf:96:ae:14:ad:ca:57:3f:67:9f:56:fc:3f:c0:48:
d8:41:af:09:8a:0d:d2:69:fe:f2:21:4f:32:a3:b9:6e:b8:aa:
d7:e8:33:93:a5:4e:2c:cd:c3:ea:01:94:4b:45:46:95:6d:c8:
e4:fc:ba:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZ5QDXnG03OqmE5IcVN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5
OWM4ZTEwHhcNMjUwMTMxMTQwMDIwWhcNMjUwMjAxMTQwMDIwWjAzMTEwLwYDVQQD
Eyg0YjVlZWM1NzUwYjc4MDkxZDRlMTFhZDI5OGMzY2U0Mjk1OTMyNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RQ4ADInG02T5DYNCeZDr3JmZ204
K+2ClLksTH4TewAPKbY4F33EXtm3UYkS3eIgQ44AZVP6a2cJOEfy50IkNlR+XBUk
aNTl+w/J+UZJ4S2Mq77IMcl925mP9NK7t796Gqv+sJ6J3NKF6Yfl5/TslSPhPuKI
JPrl/9A8BM5UVXlrPQq/c/hzi1oxdpAN/Y4u9HhWJ1OhTpYUxZTdbzxGWCAy9qtP
7o6Dup08JC49R9+8AN64z7Jx3lUzZVaP6nxdRvC3mhaaUHPihL6SE8q730tXba5H
EdML5LcOQ5PYjUbpdxactNFLNxaLa5ZlcSVidOHfZ/pLsGc2+Nw4QkRvTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEte7FdQt4CR1OEa0pjDzkKVkySqMB8GA1UdIwQY
MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt
NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz
LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACC6QEDxB
3Py12JwMAs5yv6T6jAAtOvJ+IduhOjJSRPveCUcez3Yn/OhicknOGMVv47BMbMno
XLXasWsiHtFE4NL1vzppKm4eMVWL914edynjr+zKucx0DrlhigRmYQzNYl9mJJZL
/ub9Cuds4BxZJukHCzdp3drryLiPPvG3Y+s1SVO8+FYb5WP/VNQ4MBLyEe2Q+YNI
EFxO1K2tUYcDhw9OhWsg8jt5BS/FIf9Aygvd1uZ36MvWvYvAsetMsAIy+d6FZAzb
oT62v5auFK3KVz9nn1b8P8BI2EGvCYoN0mn+8iFPMqO5briq1+gzk6VOLM3D6gGU
S0VGlW3I5Py6/w==
-----END CERTIFICATE-----
Generated at Wed May 14 08:12:16 2025 by rpki-client