Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: rgOKjZAuHlyaZ7RBqsof5Tui56UreHqnZGUzzGIMY2M=
Subject key identifier: BA:68:5D:E3:17:39:4E:29:8E:51:AE:88:C9:F5:E3:AF:3F:6E:BE:90
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 0194BC3C02157084738FCFD275CC75502A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: 2FfQ+xsOHZg33cQN8DFxbqZWkKYFETqENVpha3I5C4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:15:70:84:73:8f:cf:d2:75:cc:75:50:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=ba685de317394e298e51ae88c9f5e3af3f6ebe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:d0:7c:04:d9:20:f7:c2:a2:47:9f:f8:3f:
2a:ef:fa:c1:1c:ba:93:06:69:a8:35:70:9b:e2:7d:
9f:17:69:17:0c:c3:40:b4:3b:60:ac:0d:ab:3a:60:
e7:2f:a6:72:49:8b:8d:5f:c8:c8:0c:86:e7:d1:0a:
20:8e:9d:c5:60:53:fa:82:30:5a:5b:86:69:29:e2:
e2:69:b5:e1:cb:1d:f8:cd:89:ee:d3:03:3a:e3:e5:
ef:89:65:eb:13:ff:3a:ab:c0:9f:01:cc:92:5a:33:
c8:ae:91:57:43:fc:13:38:9c:0a:04:7a:e4:b2:06:
4c:b9:b9:97:2a:4f:ce:41:d3:ed:9b:6b:64:c7:ac:
b0:80:b3:52:8c:c0:f0:03:f9:44:3d:16:38:56:04:
c3:30:77:ab:82:06:75:f0:a8:a8:68:fc:91:76:96:
11:48:ee:b4:98:ea:e4:65:f6:35:6b:36:7e:55:06:
6b:c3:5e:ac:b9:42:fc:f8:57:76:6c:39:0a:0c:0c:
49:d9:76:a5:c1:ef:7c:22:c3:4d:f1:2e:f9:da:49:
d5:05:55:c4:de:ce:00:09:81:46:bd:18:58:c3:bc:
8f:b3:33:ae:3f:00:c2:cb:c2:c1:d1:d1:2a:bc:32:
8f:5e:ef:2b:b5:3c:11:28:79:51:57:77:20:90:ef:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:5D:E3:17:39:4E:29:8E:51:AE:88:C9:F5:E3:AF:3F:6E:BE:90
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:2a:92:f9:9f:b4:10:e8:cb:30:a2:bf:e1:d1:69:c9:f7:
b9:51:22:83:ba:6a:85:76:fe:93:8a:2a:bf:f5:e8:6a:91:2e:
3d:04:8b:ce:ca:ee:fc:4c:67:18:48:9e:1b:67:90:f4:59:1f:
cd:17:b2:02:f3:29:70:79:c3:ad:a0:93:3a:b5:b9:f8:15:b9:
a2:d9:d2:5d:4d:bf:c5:32:b4:71:0b:5c:3a:32:31:6d:4f:29:
52:33:14:34:83:69:5f:d8:5e:e8:be:21:6d:bd:df:4b:10:9c:
93:b6:bd:89:6c:25:64:45:ae:7c:0a:9f:92:6b:d5:eb:1e:a6:
34:96:c0:35:c3:e7:fe:db:ab:e8:5e:da:ef:eb:e3:8d:f5:9a:
78:fb:68:23:96:c2:f4:af:4d:34:f5:64:dd:63:70:00:3f:51:
52:f2:1a:45:62:a6:a8:93:82:10:79:ce:6b:1f:1f:f2:dc:cc:
b6:e9:cc:ff:d4:0a:da:fd:46:5e:85:73:05:82:6a:15:dc:90:
8d:ec:d9:0a:b3:0f:95:ed:c1:9a:bc:87:26:86:85:35:21:0a:
d8:d0:ea:30:7b:02:d1:26:e0:a6:6a:60:12:35:e8:8a:13:de:
67:3b:d2:22:44:4f:0a:20:c0:1a:d8:c7:c5:2a:e1:3d:aa:40:
35:32:52:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAIVcIRzj8/Sdcx1UCobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTBjMjQ3MGViMGE2OWI0ZWZhNTg1YjljYjJjMDY3NjEy
YjM3OWUwHhcNMjUwMTMxMTIwMDM2WhcNMjUwMjAxMTIwMDM2WjAzMTEwLwYDVQQD
EyhiYTY4NWRlMzE3Mzk0ZTI5OGU1MWFlODhjOWY1ZTNhZjNmNmViZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU7QfATZIPfCokef+D8q7/rBHLqT
BmmoNXCb4n2fF2kXDMNAtDtgrA2rOmDnL6ZySYuNX8jIDIbn0Qogjp3FYFP6gjBa
W4ZpKeLiabXhyx34zYnu0wM64+XviWXrE/86q8CfAcySWjPIrpFXQ/wTOJwKBHrk
sgZMubmXKk/OQdPtm2tkx6ywgLNSjMDwA/lEPRY4VgTDMHerggZ18KioaPyRdpYR
SO60mOrkZfY1azZ+VQZrw16suUL8+Fd2bDkKDAxJ2Xalwe98IsNN8S752knVBVXE
3s4ACYFGvRhYw7yPszOuPwDCy8LB0dEqvDKPXu8rtTwRKHlRV3cgkO9ZtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpoXeMXOU4pjlGuiMn1468/br6QMB8GA1UdIwQY
MBaAFJLgwkcOsKabTvpYW5yywGdhKzeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3Mjkt
YjMwZmUwNThkMTYyLzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3MjktYjMwZmUwNThkMTYy
LzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXj0qkvmf
tBDoyzCiv+HRacn3uVEig7pqhXb+k4oqv/XoapEuPQSLzsru/ExnGEieG2eQ9Fkf
zReyAvMpcHnDraCTOrW5+BW5otnSXU2/xTK0cQtcOjIxbU8pUjMUNINpX9he6L4h
bb3fSxCck7a9iWwlZEWufAqfkmvV6x6mNJbANcPn/tur6F7a7+vjjfWaePtoI5bC
9K9NNPVk3WNwAD9RUvIaRWKmqJOCEHnOax8f8tzMtunM/9QK2v1GXoVzBYJqFdyQ
jezZCrMPle3BmryHJoaFNSEK2NDqMHsC0SbgpmpgEjXoihPeZzvSIkRPCiDAGtjH
xSrhPapANTJSsw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:08 2025 by rpki-client