Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File: 7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier: rbN+NAOl5nOUeRBqmeeGdDR/igfW5ROLKGk7JN3udK8=
Subject key identifier: AB:D5:FE:C5:70:1B:37:E8:C5:99:EF:B6:1F:72:6B:86:4C:13:A7:67
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 0194BBCDB2BE743B3B19F924281013CAA175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: TAp0A+2UXhdkFUHq6DzFd2dDyn5XLWQki7OCtcaUd8A=)
2: AKJNBvg_Wp6-g3QkU1hgfnYKS_I.roa (hash: 8/1gxZ5RhK3Xfc9FWx/YXavES1/BKptW13V8wouvEZc=)
3: NPvM3xVxkQ_LMP_9_lAVPXggEPY.roa (hash: WMRbhoyDgXHVdgSvk5Bk4s0agvzfv3IFLc0hFCDdwCk=)
4: R2R6Zwpm3C7mEGCf96myxK2TaP8.roa (hash: JHhhJ/hqneURZNBRt/i03bXTcRI7N5eSJkdKe9AFbQI=)
5: buWauLtfMC3GcFJJMi4SlwdwaoI.roa (hash: dGDi40pRAf4C2JEAwUiWsT7itHv7hqD0XOyXY8zr8H8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b2:be:74:3b:3b:19:f9:24:28:10:13:ca:a1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=abd5fec5701b37e8c599efb61f726b864c13a767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:88:bc:05:5f:72:df:1a:c4:b1:4c:46:94:
52:23:35:b8:b2:ba:2f:2f:01:15:25:3c:15:78:23:
46:2f:8f:50:a1:0f:73:20:d0:ab:ee:64:44:51:29:
48:53:74:f2:37:6d:b1:aa:01:96:81:32:9b:10:dc:
87:ee:ae:56:5c:29:84:c3:d2:05:50:86:73:20:bf:
c7:1f:9b:8b:9d:ac:7d:f7:0f:03:75:74:c6:cd:3a:
f2:a9:12:b3:e8:57:e2:61:f4:b0:10:56:99:20:ab:
b3:83:27:59:ef:e7:a9:74:b2:81:0d:7b:c6:ed:fc:
54:5d:96:bd:69:bd:2c:6f:f8:b1:66:78:d0:89:8c:
fc:ee:9b:5f:ab:09:02:34:8f:f1:e8:5f:30:2f:be:
6d:cf:8f:fd:a8:b3:a7:ed:53:fe:66:be:60:c1:d0:
7c:4f:98:23:8b:0e:31:fb:0c:e2:4b:34:7c:b9:c5:
00:9d:f3:5f:b1:28:8a:43:6c:50:ea:df:90:1e:92:
e2:5e:dd:16:fa:f8:22:f5:93:0f:9c:82:9d:54:fa:
3a:88:7b:73:80:11:f5:89:d0:5d:dd:20:b4:db:35:
de:37:d5:e8:b8:4f:73:b6:af:c9:9b:7a:2c:fb:a6:
cb:dc:cd:34:96:5c:1e:63:8a:5a:95:15:55:31:8d:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:FE:C5:70:1B:37:E8:C5:99:EF:B6:1F:72:6B:86:4C:13:A7:67
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:07:1c:d7:0b:b3:f2:f0:83:cd:f3:d9:7b:e9:e1:44:fa:b8:
0a:e9:c2:e3:2b:18:15:32:aa:46:55:6f:77:43:92:f2:b9:91:
99:7a:f6:94:b8:60:e4:63:ad:7a:42:18:b6:a7:dc:86:8b:da:
1b:6e:62:8e:3f:56:a0:55:2a:59:a6:8a:00:31:4d:a9:c9:5c:
c3:ab:fe:67:21:32:0d:bc:ac:44:2c:8b:4f:e2:26:57:8d:6b:
9f:82:fa:d0:b0:af:dd:f3:ab:8d:25:1a:5e:02:e7:88:f2:9d:
9e:cf:ec:6f:84:e0:11:30:67:25:df:6b:c9:79:64:f2:34:c4:
11:2d:57:71:29:77:b0:d0:f1:cb:b8:79:8b:92:f9:b2:ec:90:
1a:e4:15:5d:f3:cd:fa:98:e0:3a:7f:8e:57:73:1b:51:6b:2e:
c5:a9:3f:6e:1b:d6:32:00:2d:2b:06:1c:41:01:53:c4:33:d9:
9e:54:74:35:72:cd:e7:63:5f:bb:03:ac:e1:cb:19:96:28:5e:
09:4e:d3:44:14:83:89:b1:73:24:a3:35:46:6e:90:9b:66:f9:
70:f4:ae:a3:44:17:36:86:a3:11:2e:44:98:c0:60:bd:8b:39:
3c:db:1f:b6:b1:96:3e:ed:9d:fe:2c:2a:a9:d7:25:8b:d2:25:
c9:c7:d2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbK+dDs7GfkkKBATyqF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNGMzZmMwMTIyZDgzMWZiZWE4YWJiMjBhNGU5YjY1YzU0
MDM5YjIwHhcNMjUwMTMxMTAwMDA3WhcNMjUwMjAxMTAwMDA3WjAzMTEwLwYDVQQD
EyhhYmQ1ZmVjNTcwMWIzN2U4YzU5OWVmYjYxZjcyNmI4NjRjMTNhNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiymIvAVfct8axLFMRpRSIzW4srov
LwEVJTwVeCNGL49QoQ9zINCr7mREUSlIU3TyN22xqgGWgTKbENyH7q5WXCmEw9IF
UIZzIL/HH5uLnax99w8DdXTGzTryqRKz6FfiYfSwEFaZIKuzgydZ7+epdLKBDXvG
7fxUXZa9ab0sb/ixZnjQiYz87ptfqwkCNI/x6F8wL75tz4/9qLOn7VP+Zr5gwdB8
T5gjiw4x+wziSzR8ucUAnfNfsSiKQ2xQ6t+QHpLiXt0W+vgi9ZMPnIKdVPo6iHtz
gBH1idBd3SC02zXeN9XouE9ztq/Jm3os+6bL3M00llweY4palRVVMY12gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvV/sVwGzfoxZnvth9ya4ZME6dnMB8GA1UdIwQY
MBaAFO5MP8ASLYMfvqirsgpOm2XFQDmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjkt
M2FjN2Q5NjIzMjkxLzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjktM2FjN2Q5NjIzMjkx
LzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgcc1wuz
8vCDzfPZe+nhRPq4CunC4ysYFTKqRlVvd0OS8rmRmXr2lLhg5GOtekIYtqfchova
G25ijj9WoFUqWaaKADFNqclcw6v+ZyEyDbysRCyLT+ImV41rn4L60LCv3fOrjSUa
XgLniPKdns/sb4TgETBnJd9ryXlk8jTEES1XcSl3sNDxy7h5i5L5suyQGuQVXfPN
+pjgOn+OV3MbUWsuxak/bhvWMgAtKwYcQQFTxDPZnlR0NXLN52NfuwOs4csZlihe
CU7TRBSDibFzJKM1Rm6Qm2b5cPSuo0QXNoajES5EmMBgvYs5PNsftrGWPu2d/iwq
qdcli9IlycfSwQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:30 2025 by rpki-client