Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: 1h6fUoRII61RJgRTo1pmjdKHpY9OW9AtEqTMu7WeXgE=
Subject key identifier: B9:D9:CF:E2:49:19:6E:4D:A2:5B:7A:E5:C1:C6:01:35:BB:14:D8:1C
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 0194BCA9E8A67E4760E90ED2FA546BC4E015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: 3csahPS_wbV_Cdmexl1nUcqXKCs.roa (hash: bIzOWikibOXI8uzov3zH1ZZ4OwuzNl9gaDQiq7HSE2A=)
2: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: AxjTrpP9OmU6AekMFMIOPK+TK+h5oNGn0N3sNjaZJZE=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e8:a6:7e:47:60:e9:0e:d2:fa:54:6b:c4:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=b9d9cfe249196e4da25b7ae5c1c60135bb14d81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:f1:32:00:f6:2e:db:18:4f:da:0e:ea:39:
2e:05:66:48:d1:0b:69:94:20:9b:b4:b3:8d:6f:c1:
0b:1c:f6:7f:3d:82:54:76:01:e9:4f:3e:00:3e:74:
b6:00:68:8b:61:05:35:24:a0:9a:ab:ca:b1:a9:cc:
37:df:7c:1e:0e:b9:b2:79:17:d2:96:5b:58:d1:99:
f3:2b:06:5f:c3:79:46:aa:4c:50:ab:ea:22:a1:23:
d3:4b:16:2d:dd:92:78:ee:48:9f:ad:99:72:2e:3b:
5c:4a:49:eb:44:a5:6e:31:0d:2c:95:d3:5d:79:bd:
d4:bf:1d:81:35:bd:99:cb:98:a4:2e:0e:9b:67:0f:
17:b4:1b:16:6a:2a:fe:29:7b:09:a5:6f:e8:5b:26:
8e:f1:bc:1a:11:8b:f9:6e:09:a7:5d:90:d1:a2:83:
48:11:66:d9:37:ce:5d:8a:0d:5a:34:13:95:f7:c3:
49:1b:4f:a7:e6:21:48:96:fa:27:e1:3f:6c:19:44:
39:4c:7f:d4:98:1a:56:8d:c0:c0:6d:ef:de:ae:08:
20:85:6c:76:6a:2b:3b:d4:63:b0:01:a5:be:33:5f:
31:bb:a6:7f:c0:6e:2f:16:03:1f:b6:48:09:a1:0e:
9c:e3:c4:2d:1d:a9:d6:ed:e1:fc:e5:bc:4b:07:56:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:CF:E2:49:19:6E:4D:A2:5B:7A:E5:C1:C6:01:35:BB:14:D8:1C
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:fb:db:09:97:a1:ed:87:3f:e3:46:65:7d:0f:5f:26:b0:
89:f7:00:de:e9:b7:60:5c:b0:3b:b9:98:6d:3f:ad:3c:2f:83:
2c:76:b6:ff:09:f4:ad:f7:30:0c:0a:f0:69:9e:6b:ba:a2:17:
e3:00:b7:4f:87:da:4b:6e:8d:f0:14:a3:b7:8b:72:23:9d:82:
b5:6b:52:ff:f8:b4:72:6d:97:71:36:9d:b2:70:f2:e8:7b:aa:
07:9c:e8:31:92:cd:ff:8b:27:de:16:e7:86:0d:c2:a0:b1:13:
d8:fe:3a:7a:eb:63:97:1e:1a:f6:51:25:a5:30:cb:cf:05:ed:
42:d6:0b:14:7d:2e:1c:2c:d0:be:f1:be:76:a7:79:9e:2a:69:
8b:65:5b:4a:6e:37:d4:4a:a4:1e:5c:34:c1:b9:39:4b:3d:92:
0f:a8:8e:b6:2f:7a:d2:24:3f:86:e0:06:c3:65:9f:1d:c9:90:
30:48:b4:2e:b7:f7:3f:5f:77:b1:2d:1f:a5:ae:e3:51:62:4c:
96:eb:7e:70:81:15:cc:70:93:37:01:b7:9a:76:48:8a:6e:b0:
22:0d:9e:aa:db:80:5b:cb:7d:9b:97:86:60:58:16:5d:f4:08:
04:76:05:4e:44:1f:93:22:f4:13:79:51:f3:09:20:91:33:d3:
b1:f4:f6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeimfkdg6Q7S+lRrxOAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Q1ZGI5MDBlMDgxYjIxM2VhMWYwNzFlYzVjMDAzNDdh
NmZkOTUwHhcNMjUwMTMxMTQwMDM5WhcNMjUwMjAxMTQwMDM5WjAzMTEwLwYDVQQD
EyhiOWQ5Y2ZlMjQ5MTk2ZTRkYTI1YjdhZTVjMWM2MDEzNWJiMTRkODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeHxMgD2LtsYT9oO6jkuBWZI0Qtp
lCCbtLONb8ELHPZ/PYJUdgHpTz4APnS2AGiLYQU1JKCaq8qxqcw333weDrmyeRfS
lltY0ZnzKwZfw3lGqkxQq+oioSPTSxYt3ZJ47kifrZlyLjtcSknrRKVuMQ0sldNd
eb3Uvx2BNb2Zy5ikLg6bZw8XtBsWair+KXsJpW/oWyaO8bwaEYv5bgmnXZDRooNI
EWbZN85dig1aNBOV98NJG0+n5iFIlvon4T9sGUQ5TH/UmBpWjcDAbe/erggghWx2
ais71GOwAaW+M18xu6Z/wG4vFgMftkgJoQ6c48QtHanW7eH85bxLB1ZMFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnZz+JJGW5Nolt65cHGATW7FNgcMB8GA1UdIwQY
MBaAFCs9XbkA4IGyE+ofBx7FwANHpv2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEt
NDdkZDBjMDRiNTUwLzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEtNDdkZDBjMDRiNTUw
LzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6X72wmX
oe2HP+NGZX0PXyawifcA3um3YFywO7mYbT+tPC+DLHa2/wn0rfcwDArwaZ5ruqIX
4wC3T4faS26N8BSjt4tyI52CtWtS//i0cm2XcTadsnDy6HuqB5zoMZLN/4sn3hbn
hg3CoLET2P46eutjlx4a9lElpTDLzwXtQtYLFH0uHCzQvvG+dqd5nippi2VbSm43
1EqkHlw0wbk5Sz2SD6iOti960iQ/huAGw2WfHcmQMEi0Lrf3P193sS0fpa7jUWJM
lut+cIEVzHCTNwG3mnZIim6wIg2eqtuAW8t9m5eGYFgWXfQIBHYFTkQfkyL0E3lR
8wkgkTPTsfT2HA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client