Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: mUBzsktsmnIyIzKIIZOXhVYyhuSAYVFuTOeZ/gns/RY=
Subject key identifier: 9E:FC:FE:A2:2E:24:05:69:DB:50:C0:FD:C6:72:93:F2:DE:9E:46:D4
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 0194BBCE6BA83066A4D60D1B8EF452E86FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: C0
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: jOZUYryfotd3VTVGeBf6KTjWoz0.roa (hash: JyJSKW3JZ65ZSPqlG2CxfcAq5uNzQ++VbUTzOkT80MI=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: IqVB2wfS8xMjKYAnozX1CR/pe+9XcLIC9Tc4yKcnXDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6b:a8:30:66:a4:d6:0d:1b:8e:f4:52:e8:6f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=9efcfea22e240569db50c0fdc67293f2de9e46d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:36:b0:82:57:17:87:dc:21:79:af:30:94:
98:d5:9a:d5:92:24:48:82:d9:37:b8:21:49:1e:cb:
78:49:19:40:67:15:51:9f:58:d3:98:51:84:5c:4b:
cc:7a:41:22:c3:c5:ba:02:3f:83:c3:ec:84:f0:c9:
eb:91:20:92:1a:78:d7:cc:3a:46:3c:bd:01:d3:62:
41:bc:7c:c9:45:33:b3:d2:fa:04:e8:03:86:64:f2:
f5:bf:71:88:25:b8:1c:e4:6f:ea:99:c2:79:e3:ff:
45:f9:b8:34:b0:04:a9:75:a4:3d:d9:8d:b8:8c:d4:
3c:7e:52:81:b5:66:48:a7:e9:59:84:94:b7:eb:14:
04:a0:a3:1c:95:2e:51:a2:b6:4c:40:92:7d:0b:33:
35:92:16:0d:d5:36:7f:ae:3c:70:e3:00:59:0e:c8:
ad:78:53:63:72:6a:93:1b:5f:44:fc:bb:b8:fa:5f:
34:2c:49:93:58:f2:fb:f5:7b:3a:79:3c:dc:69:6d:
5c:a6:16:29:f4:79:66:7a:94:4a:ed:52:c0:6c:63:
13:aa:ce:6c:de:43:ac:65:41:5c:d8:91:2c:11:eb:
45:51:0f:36:8b:d3:7d:ef:ba:53:fd:ba:db:c1:cd:
7c:9a:7e:f3:b8:3c:c8:74:55:cf:3e:2e:8a:f6:07:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:FE:A2:2E:24:05:69:DB:50:C0:FD:C6:72:93:F2:DE:9E:46:D4
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fb:dc:80:80:bc:6e:79:7e:8d:45:51:bf:47:0e:50:70:ab:
f1:7a:b3:81:b2:de:60:ab:b7:69:1a:f5:62:b6:d2:56:fb:af:
ee:9e:16:35:d5:02:09:19:79:e7:1a:a1:e7:ab:fc:a5:34:8d:
f6:6d:3e:fa:23:07:30:46:14:01:c9:20:0a:50:d2:4d:b8:46:
f1:a2:de:50:b6:56:f8:13:7e:29:47:c9:b7:58:aa:13:9b:2b:
3c:f5:c0:65:11:3f:7c:b2:d4:f8:ab:4a:7b:79:78:86:28:fe:
8e:62:02:7a:c5:3e:9b:45:82:c8:cd:a1:29:77:6c:46:c9:6e:
f1:fb:95:08:c6:c6:5e:3f:c7:66:a2:d3:55:ee:24:6c:d8:52:
e2:7a:57:8e:d3:51:f6:b8:db:69:60:b9:4e:d4:f0:48:76:95:
f2:e6:66:bc:b5:2a:fd:18:99:24:ad:93:e5:ab:78:40:c1:e2:
0a:ea:4f:70:4b:51:c8:9f:8c:b8:03:df:27:a1:fa:71:5b:44:
74:26:9c:5d:b2:96:31:e6:5c:59:5c:5e:5a:df:5c:8b:b0:ac:
5b:eb:6f:7e:dc:9c:ac:fd:95:0f:06:6e:10:aa:5b:34:84:a5:
dd:a2:fc:cf:af:1d:d4:b6:d8:c7:1b:91:62:3a:d4:03:18:6a:
26:e7:79:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmuoMGak1g0bjvRS6G+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzQyNDg0ZDc1YWQ3YTQyN2RjZjYxYjVhYzlhYzU2NTQz
ZTlmMzMwHhcNMjUwMTMxMTAwMDU0WhcNMjUwMjAxMTAwMDU0WjAzMTEwLwYDVQQD
Eyg5ZWZjZmVhMjJlMjQwNTY5ZGI1MGMwZmRjNjcyOTNmMmRlOWU0NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJg2sIJXF4fcIXmvMJSY1ZrVkiRI
gtk3uCFJHst4SRlAZxVRn1jTmFGEXEvMekEiw8W6Aj+Dw+yE8MnrkSCSGnjXzDpG
PL0B02JBvHzJRTOz0voE6AOGZPL1v3GIJbgc5G/qmcJ54/9F+bg0sASpdaQ92Y24
jNQ8flKBtWZIp+lZhJS36xQEoKMclS5RorZMQJJ9CzM1khYN1TZ/rjxw4wBZDsit
eFNjcmqTG19E/Lu4+l80LEmTWPL79Xs6eTzcaW1cphYp9HlmepRK7VLAbGMTqs5s
3kOsZUFc2JEsEetFUQ82i9N977pT/brbwc18mn7zuDzIdFXPPi6K9gd3CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ78/qIuJAVp21DA/cZyk/LenkbUMB8GA1UdIwQY
MBaAFJLEJITXWtekJ9z2G1rJrFZUPp8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEt
MjkyZmVhZDEyZDU5LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEtMjkyZmVhZDEyZDU5
LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvvcgIC8
bnl+jUVRv0cOUHCr8XqzgbLeYKu3aRr1YrbSVvuv7p4WNdUCCRl55xqh56v8pTSN
9m0++iMHMEYUAckgClDSTbhG8aLeULZW+BN+KUfJt1iqE5srPPXAZRE/fLLU+KtK
e3l4hij+jmICesU+m0WCyM2hKXdsRslu8fuVCMbGXj/HZqLTVe4kbNhS4npXjtNR
9rjbaWC5TtTwSHaV8uZmvLUq/RiZJK2T5at4QMHiCupPcEtRyJ+MuAPfJ6H6cVtE
dCacXbKWMeZcWVxeWt9ci7CsW+tvftycrP2VDwZuEKpbNISl3aL8z68d1LbYxxuR
YjrUAxhqJud5KA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:56 2025 by rpki-client