Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: TXqiSyRKVXQ0nuHUZSyHcl0IsSQ+Z/wp0425A7JCSRY=
Subject key identifier: EC:3F:7E:2D:75:F0:12:07:77:FF:E2:1C:B3:53:7A:1B:08:78:68:49
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 0194BC72C0F9D831DFA2AAE8C8F56E957E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 0D39
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
2: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
3: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: 0T72EU670uQGU5sfBy+DpqCThzJABdASck9IVPsKbkA=)
4: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
5: shTn7GqCkQHNe5th-DoeAc9YFfk.roa (hash: aySq0BgEVOrK/vhv+t0wKgyn8II5kEUij+WlbV5t6wE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:f9:d8:31:df:a2:aa:e8:c8:f5:6e:95:7e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=ec3f7e2d75f0120777ffe21cb3537a1b08786849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:37:7d:e7:2c:ee:01:20:23:05:24:3d:e2:
70:2e:8d:70:d0:89:17:fc:78:31:ee:9b:8b:ec:2e:
9c:54:0d:71:0a:68:ed:35:c7:9a:4d:b3:c6:1d:fa:
d0:a2:08:cd:bf:24:c7:d3:e3:a1:5f:66:45:cf:ac:
18:54:04:0e:7a:45:c8:eb:b0:bc:59:9d:14:85:41:
80:df:67:5b:18:39:38:48:8c:87:ee:df:b0:eb:2f:
0b:fc:c4:9c:52:ce:56:b6:1d:a8:6c:02:fe:6a:e5:
db:70:d8:31:52:9f:2d:2a:70:9e:26:e8:59:b6:84:
80:c0:94:00:d4:f1:44:af:4d:90:96:14:28:f0:49:
c9:16:6b:9c:a2:cb:b8:40:b4:ca:d0:d0:f7:f9:f3:
bc:fa:92:aa:9d:03:5b:78:3a:b3:dc:a9:d4:7e:00:
23:87:b8:82:c8:b1:1f:02:94:39:8e:45:0d:68:a6:
93:c8:7d:60:3e:1f:03:c7:de:a6:17:70:57:2b:9b:
75:43:3b:db:ae:7d:6f:86:cf:32:51:a0:a6:7b:48:
fb:ba:45:aa:0c:1f:01:43:34:f5:29:f0:22:dc:19:
76:bc:57:9a:79:a8:49:dc:1a:b7:41:83:99:cd:a4:
d5:af:50:50:4c:a4:59:f0:9a:27:c9:77:7f:98:25:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:7E:2D:75:F0:12:07:77:FF:E2:1C:B3:53:7A:1B:08:78:68:49
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:34:e3:6c:64:82:96:0d:67:75:8f:a7:2a:63:c8:ec:f2:
a2:41:68:87:02:36:76:d2:eb:06:de:ec:d6:8a:3b:3d:5b:db:
4f:df:1a:be:f2:67:ad:57:b8:5e:3a:aa:76:4e:0e:fd:f1:69:
e6:22:bc:67:b7:f1:f7:17:e7:15:2d:ad:31:19:95:ff:6a:f6:
c8:e7:8b:78:4e:0d:5e:65:fe:a0:cc:0d:6d:67:09:d3:cc:7b:
74:6a:52:fc:00:ac:4c:64:b0:74:1a:e7:0e:ec:3b:b5:6e:63:
de:53:54:66:42:52:52:33:de:30:10:e1:ad:45:bd:f6:2f:73:
fc:3c:e1:42:52:08:58:64:2d:8a:a4:c7:61:32:61:c3:3b:85:
73:5f:83:b1:c5:06:f0:99:7c:71:b8:93:e3:dc:58:1b:63:e5:
b3:e8:4b:97:b7:78:b3:fc:f9:d6:49:8c:13:40:b7:f9:fa:c5:
7a:3e:87:41:7d:60:47:ab:81:ce:3b:d3:4a:78:04:87:50:ec:
87:fd:45:00:d7:7e:c3:81:96:79:c6:dc:d5:76:46:84:28:43:
17:2b:41:b7:45:ea:d5:37:72:da:85:de:46:15:41:6c:0c:0b:
83:98:82:c9:1c:13:64:c8:d1:82:93:15:fe:4f:ec:7e:7d:89:
f9:01:b4:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csD52DHfoqroyPVulX4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODkwMTY2MmE4ZWM1ZmY0ZDNmNDhkMjkwOTkyMzBhMDU3
NWVjOGEwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
EyhlYzNmN2UyZDc1ZjAxMjA3NzdmZmUyMWNiMzUzN2ExYjA4Nzg2ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WY3fecs7gEgIwUkPeJwLo1w0IkX
/Hgx7puL7C6cVA1xCmjtNceaTbPGHfrQogjNvyTH0+OhX2ZFz6wYVAQOekXI67C8
WZ0UhUGA32dbGDk4SIyH7t+w6y8L/MScUs5Wth2obAL+auXbcNgxUp8tKnCeJuhZ
toSAwJQA1PFEr02QlhQo8EnJFmucosu4QLTK0ND3+fO8+pKqnQNbeDqz3KnUfgAj
h7iCyLEfApQ5jkUNaKaTyH1gPh8Dx96mF3BXK5t1Qzvbrn1vhs8yUaCme0j7ukWq
DB8BQzT1KfAi3Bl2vFeaeahJ3Bq3QYOZzaTVr1BQTKRZ8JonyXd/mCXN0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOw/fi118BIHd//iHLNTehsIeGhJMB8GA1UdIwQY
MBaAFJGJAWYqjsX/TT9I0pCZIwoFdeyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQt
ZTgxMWUyM2MxODA0LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQtZTgxMWUyM2MxODA0
LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaM0042xk
gpYNZ3WPpypjyOzyokFohwI2dtLrBt7s1oo7PVvbT98avvJnrVe4Xjqqdk4O/fFp
5iK8Z7fx9xfnFS2tMRmV/2r2yOeLeE4NXmX+oMwNbWcJ08x7dGpS/ACsTGSwdBrn
Duw7tW5j3lNUZkJSUjPeMBDhrUW99i9z/DzhQlIIWGQtiqTHYTJhwzuFc1+DscUG
8Jl8cbiT49xYG2Pls+hLl7d4s/z51kmME0C3+frFej6HQX1gR6uBzjvTSngEh1Ds
h/1FANd+w4GWecbc1XZGhChDFytBt0Xq1Tdy2oXeRhVBbAwLg5iCyRwTZMjRgpMV
/k/sfn2J+QG01A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:12 2025 by rpki-client