Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: FU3RoIzks5pDf/ak7fhvAET4c0o9itdhgCYpHan0jx8=
Subject key identifier: BA:64:01:60:A2:1C:F4:2A:C3:F0:91:D1:5D:95:A1:41:29:64:D9:E5
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 0194BBCE81D6B3DD704580E1203F39A02802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 0589
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: qZMVKyQDyykGmTvEmy3xIleju4b5/hOb5gQ/FFvP6mM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:81:d6:b3:dd:70:45:80:e1:20:3f:39:a0:28:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=ba640160a21cf42ac3f091d15d95a1412964d9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b1:f7:68:d4:92:51:bc:9c:4a:45:d1:04:7b:
55:aa:70:29:52:03:f7:52:d8:6a:0b:e8:b4:f4:2c:
3a:b7:b2:dc:d7:36:30:55:88:25:7e:b1:02:b5:01:
cd:b5:27:a9:26:22:3f:67:50:d1:a7:52:10:35:69:
1c:fb:97:f3:1c:b8:ec:3c:bc:44:90:48:d5:45:98:
1f:a7:9f:bc:66:e2:a2:d2:06:d9:0a:81:68:20:ba:
43:47:5e:9d:62:ce:b2:33:c3:8c:08:0a:1f:5b:0c:
eb:e2:2d:70:57:c3:9e:7a:fa:1c:39:b4:cd:3b:a7:
db:9a:75:62:a6:3b:1e:16:01:de:8c:6f:79:6b:d8:
2d:4a:48:18:9a:47:4d:3e:4b:44:23:7b:57:0d:50:
8f:49:4f:15:41:4b:f0:9c:70:b0:da:86:0e:74:bd:
82:35:00:36:09:43:c5:ef:91:06:b4:39:76:b1:2a:
34:8b:00:42:65:27:b8:49:87:86:28:5e:df:f3:00:
7b:86:ba:5b:d0:80:73:c9:1d:92:27:e8:d1:ee:8d:
c5:a6:2f:3a:71:fe:d0:8b:5d:e5:c5:85:79:b2:29:
0d:d8:a8:c0:1e:95:40:b2:24:c7:93:f6:47:21:60:
e1:3f:0c:fa:70:e9:14:6a:40:9c:1d:0d:35:ae:82:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:01:60:A2:1C:F4:2A:C3:F0:91:D1:5D:95:A1:41:29:64:D9:E5
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:b4:9a:7e:e7:25:df:f9:e6:c4:60:99:75:0d:2c:50:9b:
1f:22:67:a8:a3:6e:98:d4:b3:eb:76:f0:a5:6e:26:52:ec:8c:
05:cb:6f:de:eb:06:00:14:35:a1:47:8c:89:04:f5:39:54:66:
e1:7c:22:7d:eb:71:f1:10:b2:31:1c:dc:e7:93:29:d0:35:99:
79:ea:5c:18:cf:74:59:d0:22:82:f3:6d:66:0f:6d:51:e1:25:
a3:31:d5:ed:3c:b5:b0:c1:61:31:ee:97:48:0f:cd:d8:2e:7e:
60:d0:8e:62:6e:f2:0e:d8:7a:d0:15:d1:3c:53:ba:1e:21:8b:
5e:02:94:52:4d:33:61:d7:90:96:a2:0a:0f:67:74:67:b2:45:
90:d8:bd:11:07:53:91:26:3b:c0:d4:37:ea:46:18:3b:6d:62:
f2:af:e7:94:8c:02:0d:25:93:33:0b:94:1b:c5:56:7b:ba:4c:
62:4f:8e:07:fb:c4:69:56:96:38:a4:bb:1b:ac:6b:3e:ef:4c:
61:a9:e6:29:4c:66:db:73:2a:48:eb:f7:26:c2:c5:c5:96:b5:
08:50:63:41:4a:88:29:f8:d9:b3:fa:30:13:70:c8:2c:4f:af:
8f:9c:87:fb:72:9e:53:6c:10:58:3f:e5:de:9b:91:f6:b7:86:
de:e1:bb:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoHWs91wRYDhID85oCgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGEyZDcyZTc5MDI2ZjUyYmY1NjU3ZTk3ZmZkMWIxMWJl
ODg2NDEwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
EyhiYTY0MDE2MGEyMWNmNDJhYzNmMDkxZDE1ZDk1YTE0MTI5NjRkOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bH3aNSSUbycSkXRBHtVqnApUgP3
UthqC+i09Cw6t7Lc1zYwVYglfrECtQHNtSepJiI/Z1DRp1IQNWkc+5fzHLjsPLxE
kEjVRZgfp5+8ZuKi0gbZCoFoILpDR16dYs6yM8OMCAofWwzr4i1wV8OeevocObTN
O6fbmnVipjseFgHejG95a9gtSkgYmkdNPktEI3tXDVCPSU8VQUvwnHCw2oYOdL2C
NQA2CUPF75EGtDl2sSo0iwBCZSe4SYeGKF7f8wB7hrpb0IBzyR2SJ+jR7o3Fpi86
cf7Qi13lxYV5sikN2KjAHpVAsiTHk/ZHIWDhPwz6cOkUakCcHQ01roKeQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpkAWCiHPQqw/CR0V2VoUEpZNnlMB8GA1UdIwQY
MBaAFJOKLXLnkCb1K/Vlfpf/0bEb6IZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAt
YzM2OTc2MzYzOTY4LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAtYzM2OTc2MzYzOTY4
LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYG0mn7n
Jd/55sRgmXUNLFCbHyJnqKNumNSz63bwpW4mUuyMBctv3usGABQ1oUeMiQT1OVRm
4Xwifetx8RCyMRzc55Mp0DWZeepcGM90WdAigvNtZg9tUeElozHV7Ty1sMFhMe6X
SA/N2C5+YNCOYm7yDth60BXRPFO6HiGLXgKUUk0zYdeQlqIKD2d0Z7JFkNi9EQdT
kSY7wNQ36kYYO21i8q/nlIwCDSWTMwuUG8VWe7pMYk+OB/vEaVaWOKS7G6xrPu9M
YanmKUxm23MqSOv3JsLFxZa1CFBjQUqIKfjZs/owE3DILE+vj5yH+3KeU2wQWD/l
3puR9reG3uG7EQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:02 2025 by rpki-client