Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
File: kiUzU7pknevuknmYugLIYUOZ-WE.mft (raw, json)
Hash identifier: 1s3Pv7/UA7GZzKat+A8TobKvNfibNJ9wIdh9EXf7MGE=
Subject key identifier: EB:E4:58:66:BC:1A:11:0B:5B:5E:6C:15:A9:A4:EB:91:57:AE:97:23
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Certificate issuer: /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial: 0194BD17528D11E4DF3807D3CEEED3C45C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
Manifest number: 0387
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: IRskINg41VtTIRpf8KUQyejfOZ4.roa (hash: gqvze0bjn5WFe15kL+WtLc59rxWgOyihFu31fqipvOk=)
2: kiUzU7pknevuknmYugLIYUOZ-WE.crl (hash: xPZpUFqt0OHw7g9vm0uRDEaNZ25zPW8nJQVWSTzvEfQ=)
3: l8L6M193NRwOqknRUwjUMCL_3js.roa (hash: ZJE5lHxeiMDM24dTZ0outFe8poOxQlVnbOZwmTZc8Kw=)
4: wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa (hash: pKpy02tSACF4gXXOnC0pf4UqBhrOt1/BvJq4Baa5gaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:8d:11:e4:df:38:07:d3:ce:ee:d3:c4:5c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92253353ba649debee927998ba02c8614399f961
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=ebe45866bc1a110b5b5e6c15a9a4eb9157ae9723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:d5:be:ba:7e:eb:d4:c3:f0:eb:32:6e:35:
d6:12:95:cc:28:5f:5b:bf:28:7e:4d:b1:6d:57:d0:
5d:9a:5b:72:7f:40:1a:5b:0d:2c:6b:42:12:17:ee:
23:5c:98:94:49:3e:5d:06:09:8b:7f:03:3d:ea:53:
88:9d:11:dd:f6:8d:60:4a:fc:92:29:1c:0f:a6:2e:
b5:33:fd:62:81:fa:e7:f8:9c:5e:e6:4f:2d:f7:5b:
b5:6a:67:3e:e3:df:f0:0b:0d:d2:74:e1:16:37:95:
e4:16:2b:e5:86:54:64:61:52:f9:79:df:74:85:70:
9a:a5:23:ea:f5:3e:ab:c7:96:e4:f2:d2:c3:7c:d8:
bf:4a:08:8f:5a:02:ab:55:8b:2f:ae:e1:95:b4:44:
6a:fb:65:ab:ef:45:d7:fb:b7:c7:a7:1f:29:b1:4c:
1b:fa:e9:42:44:25:e7:72:d9:ba:f1:09:d8:17:c2:
1a:c3:51:f5:b5:2c:7a:b0:81:fe:41:7a:81:bb:b8:
a2:18:be:0a:95:81:ca:55:83:96:cd:b7:42:af:dd:
4c:4c:a0:f3:5a:43:89:e7:e4:dd:50:6f:ba:fe:3e:
a7:27:34:1d:41:0b:29:ce:64:62:eb:fb:20:30:08:
41:81:52:af:61:6c:19:a5:4a:0a:10:2d:32:67:fc:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E4:58:66:BC:1A:11:0B:5B:5E:6C:15:A9:A4:EB:91:57:AE:97:23
X509v3 Authority Key Identifier:
keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cb:9b:25:a5:36:7c:55:f6:bf:29:13:5f:54:72:7a:d7:65:
84:b4:db:6d:9d:1a:b8:11:91:46:2b:70:b5:48:7d:53:60:4f:
4e:90:67:31:42:f2:11:f7:0e:e7:0e:04:a2:b5:c4:70:29:69:
4c:27:0d:3c:25:10:8f:23:57:9e:b9:8e:84:db:1d:df:74:6d:
35:36:45:8b:62:da:b7:1d:16:60:4d:21:3c:f1:d5:8b:f8:23:
04:78:e3:91:eb:91:69:93:d8:90:3b:3d:ae:ac:52:4c:91:a0:
79:64:cf:85:03:2d:54:12:61:df:c6:9a:83:87:6f:cc:78:9e:
56:82:a1:06:20:2b:f8:e2:c3:80:45:ad:6f:34:af:70:b7:34:
17:dc:ce:f5:20:2b:00:fa:0b:c8:4c:94:b6:b9:15:a1:63:98:
bc:c2:bb:21:61:8d:8b:6d:3f:9a:d9:b7:cb:e8:5a:fd:4c:45:
27:20:ef:17:95:ec:d3:a8:6b:dd:e0:6c:6f:04:82:dd:37:bd:
19:2d:9c:f1:d2:ad:ee:78:4e:ec:9c:20:fb:f3:f4:d9:89:ac:
aa:85:b5:ad:a7:67:18:c8:7c:fb:ff:3a:08:af:27:88:b6:4a:
7e:5e:1d:3d:96:78:48:ea:62:f0:68:4d:c6:3f:5f:b9:71:89:
f3:2e:b9:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1KNEeTfOAfTzu7TxFyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjUzMzUzYmE2NDlkZWJlZTkyNzk5OGJhMDJjODYxNDM5
OWY5NjEwHhcNMjUwMTMxMTYwMDA5WhcNMjUwMjAxMTYwMDA5WjAzMTEwLwYDVQQD
EyhlYmU0NTg2NmJjMWExMTBiNWI1ZTZjMTVhOWE0ZWI5MTU3YWU5NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgfVvrp+69TD8OsybjXWEpXMKF9b
vyh+TbFtV9Bdmltyf0AaWw0sa0ISF+4jXJiUST5dBgmLfwM96lOInRHd9o1gSvyS
KRwPpi61M/1igfrn+Jxe5k8t91u1amc+49/wCw3SdOEWN5XkFivlhlRkYVL5ed90
hXCapSPq9T6rx5bk8tLDfNi/SgiPWgKrVYsvruGVtERq+2Wr70XX+7fHpx8psUwb
+ulCRCXnctm68QnYF8Iaw1H1tSx6sIH+QXqBu7iiGL4KlYHKVYOWzbdCr91MTKDz
WkOJ5+TdUG+6/j6nJzQdQQspzmRi6/sgMAhBgVKvYWwZpUoKEC0yZ/xIyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvkWGa8GhELW15sFamk65FXrpcjMB8GA1UdIwQY
MBaAFJIlM1O6ZJ3r7pJ5mLoCyGFDmflhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lVelU3cGtuZXZ1a25tWXVnTElZVU9aLVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80NTNhZTMtZjIyNy00ZTBkLWJkMDYt
Njk5N2IyNTc5YTM0LzEva2lVelU3cGtuZXZ1a25tWXVnTElZVU9aLVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80NTNhZTMtZjIyNy00ZTBkLWJkMDYtNjk5N2IyNTc5YTM0
LzEva2lVelU3cGtuZXZ1a25tWXVnTElZVU9aLVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8ubJaU2
fFX2vykTX1RyetdlhLTbbZ0auBGRRitwtUh9U2BPTpBnMULyEfcO5w4EorXEcClp
TCcNPCUQjyNXnrmOhNsd33RtNTZFi2Latx0WYE0hPPHVi/gjBHjjkeuRaZPYkDs9
rqxSTJGgeWTPhQMtVBJh38aag4dvzHieVoKhBiAr+OLDgEWtbzSvcLc0F9zO9SAr
APoLyEyUtrkVoWOYvMK7IWGNi20/mtm3y+ha/UxFJyDvF5Xs06hr3eBsbwSC3Te9
GS2c8dKt7nhO7Jwg+/P02YmsqoW1radnGMh8+/86CK8niLZKfl4dPZZ4SOpi8GhN
xj9fuXGJ8y65Gg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:05 2025 by rpki-client