Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: BPXMOXzdDsRReJ5PzEB4xpIYWGoB/qddVitjK+tkQn8=
Subject key identifier: 3B:09:06:54:DE:E9:E0:AB:70:FA:26:B0:C4:2A:29:DE:47:82:CB:54
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 0194BD17F34BA444F55E53AC40B38F04A9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 5LrcP7QN9f/TVcePJmtDl58YjnmmJKa6VadwEknTF4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f3:4b:a4:44:f5:5e:53:ac:40:b3:8f:04:a9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=3b090654dee9e0ab70fa26b0c42a29de4782cb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:58:6b:ce:5e:c9:1f:ac:09:fb:59:e6:ed:
08:1b:5a:7d:6d:d2:24:e9:6c:3a:39:12:03:f0:68:
0e:12:b2:b7:17:57:7a:ff:72:69:6a:a3:0d:5a:e9:
c9:39:77:43:19:2c:57:c3:ea:17:c6:e5:34:85:c3:
2a:42:e7:e3:3c:a1:3b:2e:0f:dd:82:11:a9:b9:ef:
95:f4:b2:8c:9f:23:88:bc:8f:60:20:95:15:97:61:
5b:e6:0b:ea:28:8c:48:1a:80:e2:91:ea:3c:02:fd:
ff:a0:bb:e1:c1:22:53:78:9d:2e:4a:07:48:42:4b:
ba:f1:65:33:22:ce:3f:3f:fa:af:f9:15:36:da:cb:
7b:bc:0a:af:f6:48:24:6b:9a:44:fd:92:19:ef:00:
29:b3:96:28:76:05:c7:0f:9e:6d:82:d7:f2:89:67:
fa:c9:57:4f:a6:0f:31:cf:1a:79:33:60:01:70:21:
8d:98:2b:35:58:19:e2:c0:9a:be:87:f1:03:20:12:
24:fe:ed:3b:e6:d4:81:02:c4:37:0a:4d:27:db:0b:
12:51:7f:f5:37:a0:0a:50:b1:f5:50:16:dd:9c:b4:
b9:b0:35:d4:1b:ba:7d:92:d3:da:c1:7d:cf:99:a0:
e1:47:1d:5d:45:aa:35:8f:a6:51:f8:cb:5c:ce:01:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:06:54:DE:E9:E0:AB:70:FA:26:B0:C4:2A:29:DE:47:82:CB:54
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6c:4d:87:10:89:48:10:f1:b5:f3:87:67:34:2d:5c:a5:72:
c3:3f:4f:86:7e:22:9e:d8:e8:fe:3d:f9:83:ef:30:ba:cb:6b:
f8:4f:85:ad:b9:f4:b9:d7:60:7e:7c:1a:41:e8:a4:14:6c:20:
1f:3e:9e:3f:39:68:07:47:3e:44:b3:80:59:37:d0:5f:1f:12:
b6:02:81:c3:4d:27:7b:6b:cb:ce:d3:a8:f2:8a:c3:78:fd:dd:
9a:b3:13:02:49:25:bb:e9:0e:d5:c0:81:a2:93:c2:8f:ae:26:
18:ae:22:98:72:fa:ee:8d:eb:52:b1:60:37:b4:5d:77:44:d7:
a4:cb:51:35:d3:2e:67:85:7b:60:11:a8:fe:3a:bc:2c:c4:9a:
1a:61:60:47:6f:31:eb:1b:12:58:c3:93:a4:68:a3:10:7b:7d:
2c:25:51:c0:10:fa:3e:2c:24:67:66:40:22:a9:63:42:29:3e:
8f:02:a7:e8:45:75:01:7b:fa:fb:f1:40:41:f7:8d:3e:fd:a1:
bb:c1:7a:8b:aa:74:b0:f2:af:81:57:be:d2:3d:86:19:b1:0b:
3a:79:9d:b3:60:8b:8f:54:ef:b8:db:1d:89:da:50:98:c9:40:
36:76:46:62:16:a0:34:b8:a8:cc:bf:3c:9e:28:98:28:07:d2:
ca:2e:8c:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/NLpET1XlOsQLOPBKm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk
ZTcwNDgwHhcNMjUwMTMxMTYwMDUwWhcNMjUwMjAxMTYwMDUwWjAzMTEwLwYDVQQD
EygzYjA5MDY1NGRlZTllMGFiNzBmYTI2YjBjNDJhMjlkZTQ3ODJjYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEhYa85eyR+sCftZ5u0IG1p9bdIk
6Ww6ORID8GgOErK3F1d6/3JpaqMNWunJOXdDGSxXw+oXxuU0hcMqQufjPKE7Lg/d
ghGpue+V9LKMnyOIvI9gIJUVl2Fb5gvqKIxIGoDikeo8Av3/oLvhwSJTeJ0uSgdI
Qku68WUzIs4/P/qv+RU22st7vAqv9kgka5pE/ZIZ7wAps5YodgXHD55tgtfyiWf6
yVdPpg8xzxp5M2ABcCGNmCs1WBniwJq+h/EDIBIk/u075tSBAsQ3Ck0n2wsSUX/1
N6AKULH1UBbdnLS5sDXUG7p9ktPawX3PmaDhRx1dRao1j6ZR+MtczgEpmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsJBlTe6eCrcPomsMQqKd5HgstUMB8GA1UdIwQY
MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt
MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi
LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2xNhxCJ
SBDxtfOHZzQtXKVywz9Phn4intjo/j35g+8wustr+E+Frbn0uddgfnwaQeikFGwg
Hz6ePzloB0c+RLOAWTfQXx8StgKBw00ne2vLztOo8orDeP3dmrMTAkklu+kO1cCB
opPCj64mGK4imHL67o3rUrFgN7Rdd0TXpMtRNdMuZ4V7YBGo/jq8LMSaGmFgR28x
6xsSWMOTpGijEHt9LCVRwBD6PiwkZ2ZAIqljQik+jwKn6EV1AXv6+/FAQfeNPv2h
u8F6i6p0sPKvgVe+0j2GGbELOnmds2CLj1TvuNsdidpQmMlANnZGYhagNLiozL88
niiYKAfSyi6Mpg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:32:41 2025 by rpki-client