Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier: US+YBVdvQhyxiHdeMpbQDjX/IwNZFKjwxtnkvhlxSW0=
Subject key identifier: 3A:9E:CD:F2:CC:7D:FF:5A:C0:BC:BB:23:95:BE:24:F2:70:5D:26:28
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 0194BD855831BE0DC27ED67C3B1FF461C6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: Sfkx0F4yo0++5b9d5hdet3sEsKGS3FKmM3uzjf9Lr4s=)
2: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (hash: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:31:be:0d:c2:7e:d6:7c:3b:1f:f4:61:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=3a9ecdf2cc7dff5ac0bcbb2395be24f2705d2628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:48:ee:95:71:b7:9f:de:99:fb:d0:9a:be:
42:29:ba:91:2e:f5:f7:f8:73:bd:04:2f:ff:fb:f3:
23:63:52:06:3c:37:17:f6:09:00:a1:26:e7:84:c4:
fe:15:e7:88:ef:53:a7:2a:5e:63:21:2c:c7:e1:4f:
01:65:a5:a5:4e:b9:b0:e6:fb:25:8e:b1:e5:04:95:
60:0f:c4:ae:60:b8:17:e3:cf:74:62:16:15:e5:3a:
98:4e:40:ea:a8:d3:ff:8a:1e:a0:7d:e4:45:bf:76:
b3:96:8e:5c:5a:3f:53:22:76:82:81:e9:6c:c7:98:
49:03:b2:73:06:22:c3:8c:3e:d0:fc:df:78:6a:7b:
14:c0:34:64:12:ee:4e:0b:b4:df:36:bc:c1:bd:fc:
f9:9e:ca:9f:3b:62:09:dd:ed:23:ff:37:ed:71:aa:
2f:3c:c7:48:61:7f:28:29:4e:86:5b:ad:50:78:da:
56:f1:6e:4d:96:f1:ff:65:de:80:7d:60:cd:36:52:
28:21:00:af:9d:0f:be:3a:9c:7d:95:ba:14:60:c7:
32:5c:bf:9f:af:c8:ac:3b:d0:73:0b:7c:c4:ff:e9:
68:63:90:7f:67:68:17:94:dc:1b:85:7b:47:2c:96:
ce:7a:59:22:2f:82:dc:f9:8d:90:6d:67:01:94:50:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:CD:F2:CC:7D:FF:5A:C0:BC:BB:23:95:BE:24:F2:70:5D:26:28
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a6:b0:6a:20:66:8a:9d:62:3f:46:4e:41:0b:12:c9:30:d2:
4c:71:18:ed:35:16:dc:e9:e4:37:ba:42:49:95:3f:21:27:a1:
8c:fe:c7:be:17:27:9a:41:8c:b4:1c:ab:dd:6d:57:79:db:76:
92:ab:d6:ae:7b:6a:f1:9c:8a:19:0a:14:a4:aa:33:09:9a:23:
7d:e1:2d:93:ff:2f:7c:37:b6:6d:7e:fe:a7:45:7b:a9:5c:df:
08:47:05:ca:45:81:99:ab:b8:a8:62:c4:3a:40:f6:9e:da:dd:
e2:cf:b9:96:b0:b9:a1:bc:ef:34:f0:99:ae:f2:d1:d0:83:ad:
26:97:2d:79:a8:ff:b9:f5:72:86:cb:e4:41:08:95:e5:f5:fa:
ca:55:34:de:68:5c:55:99:4d:28:2a:94:ad:bb:53:dc:2b:c7:
8f:9d:d8:b4:2b:b6:2d:f6:18:83:9c:5c:54:c0:7b:16:7d:48:
ef:48:50:ec:51:ae:d0:f6:41:de:47:87:ff:d5:13:96:b1:8a:
2b:d7:4a:6e:6c:ec:8a:e7:52:65:03:fd:4a:cd:b6:48:d9:3e:
25:00:1b:18:5e:38:63:ce:27:c8:18:2b:8c:34:a8:91:f8:6c:
a2:47:35:01:e1:98:7e:31:44:56:31:77:3c:a7:bd:6c:f4:41:
cb:ec:b9:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVgxvg3CftZ8Ox/0YcaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh
MzVkM2IwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EygzYTllY2RmMmNjN2RmZjVhYzBiY2JiMjM5NWJlMjRmMjcwNWQyNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCRI7pVxt5/emfvQmr5CKbqRLvX3
+HO9BC//+/MjY1IGPDcX9gkAoSbnhMT+FeeI71OnKl5jISzH4U8BZaWlTrmw5vsl
jrHlBJVgD8SuYLgX4890YhYV5TqYTkDqqNP/ih6gfeRFv3azlo5cWj9TInaCgels
x5hJA7JzBiLDjD7Q/N94ansUwDRkEu5OC7TfNrzBvfz5nsqfO2IJ3e0j/zftcaov
PMdIYX8oKU6GW61QeNpW8W5NlvH/Zd6AfWDNNlIoIQCvnQ++Opx9lboUYMcyXL+f
r8isO9BzC3zE/+loY5B/Z2gXlNwbhXtHLJbOelkiL4Lc+Y2QbWcBlFCrlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqezfLMff9awLy7I5W+JPJwXSYoMB8GA1UdIwQY
MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct
YWVkMTY0ODMyYThiLzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi
LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKawaiBm
ip1iP0ZOQQsSyTDSTHEY7TUW3OnkN7pCSZU/ISehjP7HvhcnmkGMtByr3W1Xedt2
kqvWrntq8ZyKGQoUpKozCZojfeEtk/8vfDe2bX7+p0V7qVzfCEcFykWBmau4qGLE
OkD2ntrd4s+5lrC5obzvNPCZrvLR0IOtJpcteaj/ufVyhsvkQQiV5fX6ylU03mhc
VZlNKCqUrbtT3CvHj53YtCu2LfYYg5xcVMB7Fn1I70hQ7FGu0PZB3keH/9UTlrGK
K9dKbmzsiudSZQP9Ss22SNk+JQAbGF44Y84nyBgrjDSokfhsokc1AeGYfjFEVjF3
PKe9bPRBy+y5MA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:55 2025 by rpki-client