Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: 1uqep9ttJ0+kttDeiKGMtp7LOuTXEcoqtZMV9uwc87o=
Subject key identifier: AE:97:02:CE:42:C1:5E:B9:34:7C:2D:98:5A:41:EC:C6:E7:5C:8A:04
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 0194BC0520F956B050A21D89D41E87057BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 065B
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
2: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
3: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: dUc8uFwxW/Bx/hbeyFtl51IzsZNYlSy5viEPFG43WWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:20:f9:56:b0:50:a2:1d:89:d4:1e:87:05:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=ae9702ce42c15eb9347c2d985a41ecc6e75c8a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:fd:27:6b:88:42:7f:18:b7:a5:2c:bb:f0:
f8:37:b6:01:20:b0:80:98:47:85:27:01:ef:83:63:
16:2d:bd:30:df:5f:05:d1:e7:df:8e:47:14:88:9e:
ed:1a:c0:50:48:69:d6:99:f2:f6:4e:79:9e:91:f8:
4b:21:0f:fe:47:a5:5b:be:e9:a1:c8:5c:71:0f:a9:
c8:5f:72:54:2d:2b:0f:23:46:af:75:9d:62:eb:89:
af:e0:e8:c4:b3:d5:ab:e5:39:20:44:ae:e1:4f:62:
4c:17:ae:8d:52:5f:54:c5:24:5d:a1:f0:85:9f:7a:
f6:0d:fb:ec:23:99:fc:26:8c:80:f4:89:01:bd:b9:
42:0c:e2:88:cf:4f:bb:df:9c:b1:59:84:92:c7:d0:
5f:a9:e3:8e:8e:a7:f1:3e:61:9c:73:67:a7:5d:81:
78:68:ea:63:5d:16:f3:58:06:6b:9d:d7:5b:b8:d1:
96:92:ad:4d:d2:af:ef:ae:71:03:70:e0:b9:76:26:
7c:19:c1:7e:9e:31:36:85:ad:97:51:16:e9:7d:86:
5e:03:e3:53:dd:1f:66:aa:07:df:fe:74:fd:f9:8a:
09:98:f8:26:7c:5d:d3:0d:c0:8d:0b:d8:f3:49:ad:
0b:17:e8:95:17:4d:fc:53:d3:c2:cc:43:85:f2:b2:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:02:CE:42:C1:5E:B9:34:7C:2D:98:5A:41:EC:C6:E7:5C:8A:04
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4d:13:89:3e:66:9e:54:01:34:30:c7:f4:4b:a7:b5:d9:c6:
85:78:02:00:27:5f:7f:94:e8:7e:da:fd:39:87:cb:ae:ff:ef:
26:ab:44:b8:e7:37:5a:84:05:ed:f5:fb:d2:44:b4:67:9d:34:
e4:bc:76:3b:cc:4f:67:f0:6a:02:f7:5b:cb:78:f8:f4:51:05:
23:c9:11:18:e6:02:79:92:fc:40:6f:4d:25:43:f4:d7:66:52:
0f:12:39:98:9e:d0:34:67:47:e3:75:64:ae:1d:c9:9c:80:bf:
90:a1:47:14:96:0d:5a:d7:ff:14:23:f7:19:28:66:f2:7f:72:
ac:18:14:38:97:f9:67:e6:10:bf:9f:6c:60:77:02:66:07:98:
0c:c5:ec:b1:7e:5f:55:44:a2:a2:97:a7:e0:1b:4a:61:bc:3a:
42:30:a7:4a:c1:96:1e:a1:6c:3a:f9:3f:88:dc:99:6e:b7:31:
4b:37:8a:62:27:52:34:ce:7e:9b:a4:6d:39:3a:15:51:d1:00:
22:77:9d:73:7a:31:9e:f6:f9:2f:13:c9:d8:3a:75:d7:20:d6:
6a:66:72:1e:a2:3c:27:43:8f:b8:d5:b6:ba:3e:fe:ed:26:06:
9c:13:4e:b9:5f:48:ce:96:5d:08:80:47:50:2b:9d:00:b0:de:
b4:05:ee:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSD5VrBQoh2J1B6HBXusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODE0ZGQzOWRkMzkyNWNmZjg4YmYzNGQ0MzA3ZmQ2YzYy
MTY1ZWIwHhcNMjUwMTMxMTEwMDQwWhcNMjUwMjAxMTEwMDQwWjAzMTEwLwYDVQQD
EyhhZTk3MDJjZTQyYzE1ZWI5MzQ3YzJkOTg1YTQxZWNjNmU3NWM4YTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ff9J2uIQn8Yt6Usu/D4N7YBILCA
mEeFJwHvg2MWLb0w318F0effjkcUiJ7tGsBQSGnWmfL2TnmekfhLIQ/+R6Vbvumh
yFxxD6nIX3JULSsPI0avdZ1i64mv4OjEs9Wr5TkgRK7hT2JMF66NUl9UxSRdofCF
n3r2DfvsI5n8JoyA9IkBvblCDOKIz0+735yxWYSSx9BfqeOOjqfxPmGcc2enXYF4
aOpjXRbzWAZrnddbuNGWkq1N0q/vrnEDcOC5diZ8GcF+njE2ha2XURbpfYZeA+NT
3R9mqgff/nT9+YoJmPgmfF3TDcCNC9jzSa0LF+iVF038U9PCzEOF8rIOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6XAs5CwV65NHwtmFpB7MbnXIoEMB8GA1UdIwQY
MBaAFJCBTdOd05Jc/4i/NNQwf9bGIWXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjkt
OTQwYWU0NTRjYjg1LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjktOTQwYWU0NTRjYjg1
LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU0TiT5m
nlQBNDDH9EuntdnGhXgCACdff5Toftr9OYfLrv/vJqtEuOc3WoQF7fX70kS0Z500
5Lx2O8xPZ/BqAvdby3j49FEFI8kRGOYCeZL8QG9NJUP012ZSDxI5mJ7QNGdH43Vk
rh3JnIC/kKFHFJYNWtf/FCP3GShm8n9yrBgUOJf5Z+YQv59sYHcCZgeYDMXssX5f
VUSiopen4BtKYbw6QjCnSsGWHqFsOvk/iNyZbrcxSzeKYidSNM5+m6RtOToVUdEA
Inedc3oxnvb5LxPJ2Dp11yDWamZyHqI8J0OPuNW2uj7+7SYGnBNOuV9IzpZdCIBH
UCudALDetAXuQA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client