Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: Z/QoDldeNJEvE2mtO+Iy9Z/E/BmCLAg49lMCQQak/2o=
Subject key identifier: BE:4A:EB:45:90:B4:C1:6A:BB:99:23:C2:46:6D:55:79:A9:C1:9B:30
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 0194BC3BD1A3201F6B43A85D28F8B7366D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=)
2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: VZjqssLT4/CCkxMawsC6LUCodNQKywwZiXekHGTUxDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:a3:20:1f:6b:43:a8:5d:28:f8:b7:36:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=be4aeb4590b4c16abb9923c2466d5579a9c19b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:e5:af:67:e3:69:80:6d:95:aa:c0:e3:e7:
42:55:f6:c7:b2:5a:1a:30:dc:a8:46:61:ca:05:1e:
fe:80:be:3f:2d:a9:b5:15:c4:8d:e3:d2:48:36:69:
83:5f:6f:7b:10:f5:12:64:70:5d:14:ed:2b:a5:aa:
d2:91:b7:b3:2c:3a:5c:3a:4c:d2:38:24:e7:5d:53:
c3:58:94:ed:f4:39:b5:fd:a4:0c:b9:ab:41:a9:36:
61:a7:e4:0e:22:61:ac:80:91:b4:52:65:0e:fd:30:
c2:1f:bb:a4:df:c5:4d:b8:8e:56:a0:d3:f0:08:5a:
78:72:23:73:69:bb:3c:0d:67:f6:60:af:72:fb:29:
b9:48:47:83:aa:9b:ba:8d:f7:12:0a:f8:d0:50:d7:
99:2f:c6:90:13:d1:98:8e:ea:f0:80:e4:90:48:4a:
7f:98:17:90:87:ce:07:9e:2c:cc:35:2e:ed:d4:ca:
68:14:c7:aa:5c:de:5a:04:62:39:ce:4c:f8:36:29:
ca:d4:cf:76:6f:ad:f6:8f:26:5c:23:8a:db:9c:d8:
1f:d2:86:b1:2e:eb:6d:f9:22:a2:6f:a5:e0:e9:56:
32:8c:46:d9:aa:b5:c6:60:98:33:c1:42:33:eb:8f:
22:3d:28:2e:30:d1:e7:67:7c:38:34:7d:b4:de:40:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:EB:45:90:B4:C1:6A:BB:99:23:C2:46:6D:55:79:A9:C1:9B:30
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:af:09:96:58:5b:df:0d:ef:71:85:40:f0:96:6f:a7:c7:41:
71:f4:99:19:f6:b7:bb:54:66:0c:6e:0c:f7:25:35:c9:01:27:
10:40:90:90:9a:ab:18:d3:2c:24:9f:6c:05:6b:c4:d0:cc:ca:
d7:45:d7:58:ce:1a:e3:35:c0:20:0e:1e:aa:6b:96:b1:4b:a0:
71:86:54:05:e8:f1:e7:8f:c0:55:62:13:a6:ec:51:dd:3d:67:
5a:27:44:0e:8f:07:6b:b3:c3:25:21:5d:82:0b:49:06:17:b4:
67:ea:4c:e8:b2:98:99:88:fa:78:24:5d:b6:4e:7e:a5:e1:cc:
ea:10:4f:18:16:42:e9:54:45:c8:3d:83:b7:24:62:24:be:6c:
1f:ca:cd:19:ed:dd:76:04:f1:39:5c:f5:b6:4d:b8:d1:26:12:
59:c6:71:98:37:c0:e0:86:1b:1f:63:8c:ea:62:ff:61:75:6a:
82:4a:19:bd:6b:38:42:70:dc:fb:c4:b7:9e:69:cf:b9:0f:7b:
61:e5:f8:54:d9:84:ef:91:d1:b8:6f:3b:b6:80:b5:2a:7b:db:
2c:13:cd:af:e7:ec:82:d5:4c:18:24:af:1f:95:60:56:06:c5:
8b:9f:73:07:4c:2a:2b:a5:a4:d9:88:5a:02:65:19:b3:b4:9d:
b9:bc:a3:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9GjIB9rQ6hdKPi3Nm01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk
NDBlMWQwHhcNMjUwMTMxMTIwMDI0WhcNMjUwMjAxMTIwMDI0WjAzMTEwLwYDVQQD
EyhiZTRhZWI0NTkwYjRjMTZhYmI5OTIzYzI0NjZkNTU3OWE5YzE5YjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NPlr2fjaYBtlarA4+dCVfbHsloa
MNyoRmHKBR7+gL4/Lam1FcSN49JINmmDX297EPUSZHBdFO0rparSkbezLDpcOkzS
OCTnXVPDWJTt9Dm1/aQMuatBqTZhp+QOImGsgJG0UmUO/TDCH7uk38VNuI5WoNPw
CFp4ciNzabs8DWf2YK9y+ym5SEeDqpu6jfcSCvjQUNeZL8aQE9GYjurwgOSQSEp/
mBeQh84HnizMNS7t1MpoFMeqXN5aBGI5zkz4NinK1M92b632jyZcI4rbnNgf0oax
Lutt+SKib6Xg6VYyjEbZqrXGYJgzwUIz648iPSguMNHnZ3w4NH203kD6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5K60WQtMFqu5kjwkZtVXmpwZswMB8GA1UdIwQY
MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt
NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl
LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK8Jllhb
3w3vcYVA8JZvp8dBcfSZGfa3u1RmDG4M9yU1yQEnEECQkJqrGNMsJJ9sBWvE0MzK
10XXWM4a4zXAIA4eqmuWsUugcYZUBejx54/AVWITpuxR3T1nWidEDo8Ha7PDJSFd
ggtJBhe0Z+pM6LKYmYj6eCRdtk5+peHM6hBPGBZC6VRFyD2DtyRiJL5sH8rNGe3d
dgTxOVz1tk240SYSWcZxmDfA4IYbH2OM6mL/YXVqgkoZvWs4QnDc+8S3nmnPuQ97
YeX4VNmE75HRuG87toC1KnvbLBPNr+fsgtVMGCSvH5VgVgbFi59zB0wqK6Wk2Yha
AmUZs7SdubyjAA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:49 2025 by rpki-client