Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: KhCkyROKWYmhEPoaHDo6nUefAR5cK5AUR2KER4N538o=
Subject key identifier: 0C:C9:75:3C:9F:74:32:BA:60:AD:BD:1C:21:0B:BA:39:80:E4:D7:3A
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0194BCE0DE7B2CDEE0171189C99C361B36A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: 6lMvLgCSnQ1X2c5A5KJGOPCHAJIEKB/ItnXsMWp5xBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:7b:2c:de:e0:17:11:89:c9:9c:36:1b:36:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=0cc9753c9f7432ba60adbd1c210bba3980e4d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:ee:0b:bf:80:dc:7c:b2:20:f1:1e:17:01:
99:63:73:b1:5c:ff:67:24:a0:6a:55:95:78:8c:7a:
a7:dc:60:ce:b4:0f:b9:98:a7:29:d0:33:be:62:fa:
c2:93:6b:ac:3a:d7:83:5e:be:0f:ff:c7:49:be:0c:
43:00:b6:dc:51:68:41:b5:12:1e:88:22:97:da:b4:
00:09:34:f0:09:c9:01:61:57:58:1a:79:05:28:27:
5a:61:08:ba:d8:f5:ed:69:77:4f:5c:d6:3b:1b:a4:
a8:0f:5e:8f:fa:51:77:2a:98:1b:e9:95:da:d8:77:
3d:3a:e6:9f:f5:c6:b2:30:3a:d6:f1:41:62:e1:63:
f6:02:ac:30:52:fa:cd:2d:7a:89:e0:a1:73:34:42:
7d:61:e2:22:9d:da:e9:94:b9:ba:f1:59:a5:ab:e1:
b6:dd:27:e7:8f:93:14:ce:00:bf:38:a3:00:ca:a6:
f5:6a:fe:0d:bd:00:2f:a4:af:99:b8:7b:96:2f:33:
c1:ec:f5:6d:38:95:5c:e4:db:35:9b:b3:47:cd:b9:
cf:4d:da:e9:60:a7:26:bf:a4:00:11:34:41:84:bf:
5f:d1:a3:83:ff:73:b1:20:9d:be:ae:45:66:cc:ae:
02:ed:65:e9:0f:90:47:7a:52:f5:30:84:28:c0:5a:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C9:75:3C:9F:74:32:BA:60:AD:BD:1C:21:0B:BA:39:80:E4:D7:3A
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b1:c9:a5:d1:6a:07:ac:8f:ce:38:97:c8:e1:d6:02:f9:69:
26:7f:05:fd:8e:c8:3b:d3:c9:4e:c2:e0:9e:ac:9c:a2:8a:46:
c8:08:c2:e7:b8:be:f5:77:3b:3c:fd:15:66:f7:67:9e:3b:5d:
ce:12:03:e5:0e:ff:1a:2d:59:ce:9b:49:e3:67:de:7e:43:48:
23:82:5e:5d:b2:c1:0c:2e:31:3f:4b:62:4e:5d:f1:c7:86:13:
ea:83:f1:35:09:ef:5f:03:a8:17:bf:7c:88:b1:f2:39:d1:2b:
1a:bd:0b:74:01:cd:fc:36:39:e4:73:70:b9:68:50:70:2f:b8:
d1:fb:96:f1:5a:4e:fb:a5:81:42:48:c7:1d:16:91:c8:cf:8b:
aa:7e:1d:f4:8e:b2:1a:05:6e:8d:92:9e:3b:9a:15:c5:5b:e9:
1d:e0:07:68:52:fe:e9:b5:5c:2a:c3:d7:29:d9:58:3e:d8:53:
7a:f0:67:b6:c6:a8:7b:8e:ba:fa:aa:77:9e:11:bf:5a:f5:b3:
e7:36:16:cb:6b:f1:2f:74:e8:d6:d6:2e:c0:11:97:2b:88:20:
55:ac:45:ee:38:e1:2c:af:94:f9:fe:8c:f8:42:02:f1:a1:04:
dc:e8:96:f2:83:34:ec:cf:8c:0b:13:80:d8:d0:96:b2:8a:87:
27:45:74:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N57LN7gFxGJyZw2GzakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0
MjIwOTYwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
EygwY2M5NzUzYzlmNzQzMmJhNjBhZGJkMWMyMTBiYmEzOTgwZTRkNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojruC7+A3HyyIPEeFwGZY3OxXP9n
JKBqVZV4jHqn3GDOtA+5mKcp0DO+YvrCk2usOteDXr4P/8dJvgxDALbcUWhBtRIe
iCKX2rQACTTwCckBYVdYGnkFKCdaYQi62PXtaXdPXNY7G6SoD16P+lF3Kpgb6ZXa
2Hc9Ouaf9cayMDrW8UFi4WP2AqwwUvrNLXqJ4KFzNEJ9YeIindrplLm68Vmlq+G2
3Sfnj5MUzgC/OKMAyqb1av4NvQAvpK+ZuHuWLzPB7PVtOJVc5Ns1m7NHzbnPTdrp
YKcmv6QAETRBhL9f0aOD/3OxIJ2+rkVmzK4C7WXpD5BHelL1MIQowFroywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzJdTyfdDK6YK29HCELujmA5Nc6MB8GA1UdIwQY
MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt
MzY1MzQ3ZjQxNmMwLzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw
LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLHJpdFq
B6yPzjiXyOHWAvlpJn8F/Y7IO9PJTsLgnqycoopGyAjC57i+9Xc7PP0VZvdnnjtd
zhID5Q7/Gi1ZzptJ42fefkNII4JeXbLBDC4xP0tiTl3xx4YT6oPxNQnvXwOoF798
iLHyOdErGr0LdAHN/DY55HNwuWhQcC+40fuW8VpO+6WBQkjHHRaRyM+Lqn4d9I6y
GgVujZKeO5oVxVvpHeAHaFL+6bVcKsPXKdlYPthTevBntsaoe466+qp3nhG/WvWz
5zYWy2vxL3To1tYuwBGXK4ggVaxF7jjhLK+U+f6M+EIC8aEE3OiW8oM07M+MCxOA
2NCWsoqHJ0V08g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:25 2025 by rpki-client