Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: MpqYqWbmNAsRSONiQDq8ewimeo+rsZsnynK4T6oRPyo=
Subject key identifier: 14:43:FD:A2:4B:E9:46:D1:FE:04:EF:F4:8A:E5:1A:A7:F3:63:7E:C7
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 0194BD859230DA5B3A5C8A3F92DBA3EFBB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: h41RupXnpCct12SEDkx5OH4bv/acR/lkla8OJC4+WJo=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:92:30:da:5b:3a:5c:8a:3f:92:db:a3:ef:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=1443fda24be946d1fe04eff48ae51aa7f3637ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:51:d0:47:0b:b6:b8:dd:25:a2:1f:9f:82:
21:3d:24:45:8e:8a:f2:02:5f:fa:31:8e:d3:b9:4e:
69:f6:51:b3:e0:ac:37:df:ee:81:99:8f:11:e6:06:
94:c9:28:af:1c:2b:36:e7:a0:a1:af:5d:ec:8e:c9:
98:8b:94:ae:d9:b8:94:26:a0:5b:f9:59:57:3d:ce:
66:bc:f5:df:37:f9:db:f3:dc:ee:78:e0:2e:33:b7:
86:23:08:96:ae:e1:b7:b3:75:92:96:7c:55:ae:a2:
eb:af:9f:3e:ee:2d:aa:95:4e:df:31:64:f7:8f:f0:
13:4e:7e:26:b1:8a:79:c6:d4:ba:1f:86:07:1b:45:
f1:bf:dd:97:19:a3:bf:74:d0:52:81:fc:0f:49:0e:
12:7a:b5:26:0c:84:46:81:17:d1:17:6c:c0:4a:e6:
a0:b9:ba:b8:6a:25:db:4b:fe:78:03:41:b7:c4:c6:
0b:d4:47:23:dd:b7:77:b2:03:a2:63:3c:cc:25:8a:
0d:24:30:8a:78:06:2a:4a:82:4d:66:82:36:a3:30:
38:45:4b:5f:f5:80:e4:28:d7:12:23:0c:99:c7:3f:
94:64:9b:d1:82:bd:57:c1:74:9c:47:0d:57:82:6d:
9f:ad:59:b6:50:d5:31:97:de:da:23:a1:81:2c:62:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:FD:A2:4B:E9:46:D1:FE:04:EF:F4:8A:E5:1A:A7:F3:63:7E:C7
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cf:fb:07:48:2b:2e:56:0c:e7:44:c5:32:78:d3:53:c2:96:
41:80:60:b6:f6:ed:6d:1b:22:df:d5:24:14:e7:31:99:35:15:
7b:17:27:e3:b4:a4:69:be:f9:07:06:2e:63:86:d2:87:85:f2:
c4:3e:71:c1:33:b5:3e:95:24:e2:8d:a1:f9:5f:41:fb:13:9c:
95:25:ab:4d:71:90:d7:3a:33:5a:6b:de:15:7f:c5:1c:b4:1e:
f3:34:e6:22:9c:d7:34:b5:34:0b:c0:ea:64:ca:0a:b6:df:ca:
c3:c1:79:bb:0c:04:95:ec:67:58:f9:7f:e7:86:04:8c:fb:18:
41:15:a0:87:8c:5b:22:f3:d5:68:18:e2:16:fe:74:6a:f7:a9:
cb:74:ce:5b:31:cb:70:b9:99:51:80:2d:9d:67:a6:37:88:4a:
bd:e2:7a:10:8f:d4:82:6c:fa:bf:ed:81:79:92:47:5c:48:18:
5c:2c:c0:b7:09:dd:00:ea:c6:c7:92:f4:84:05:e1:8c:c2:cc:
16:e6:25:60:e1:88:b2:b6:ba:03:81:5a:47:84:82:a6:79:8d:
40:e6:e3:28:37:35:f4:03:0c:0c:0e:5b:2b:d9:03:18:3f:d6:
91:82:8f:f2:ea:9b:0c:9c:ac:0d:eb:6f:04:de:49:94:b3:53:
93:42:67:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZIw2ls6XIo/ktuj77s8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh
ZDVjZTcwHhcNMjUwMTMxMTgwMDM1WhcNMjUwMjAxMTgwMDM1WjAzMTEwLwYDVQQD
EygxNDQzZmRhMjRiZTk0NmQxZmUwNGVmZjQ4YWU1MWFhN2YzNjM3ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUlR0EcLtrjdJaIfn4IhPSRFjory
Al/6MY7TuU5p9lGz4Kw33+6BmY8R5gaUySivHCs256Chr13sjsmYi5Su2biUJqBb
+VlXPc5mvPXfN/nb89zueOAuM7eGIwiWruG3s3WSlnxVrqLrr58+7i2qlU7fMWT3
j/ATTn4msYp5xtS6H4YHG0Xxv92XGaO/dNBSgfwPSQ4SerUmDIRGgRfRF2zASuag
ubq4aiXbS/54A0G3xMYL1Ecj3bd3sgOiYzzMJYoNJDCKeAYqSoJNZoI2ozA4RUtf
9YDkKNcSIwyZxz+UZJvRgr1XwXScRw1Xgm2frVm2UNUxl97aI6GBLGI/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRD/aJL6UbR/gTv9IrlGqfzY37HMB8GA1UdIwQY
MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt
ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3
LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQs/7B0gr
LlYM50TFMnjTU8KWQYBgtvbtbRsi39UkFOcxmTUVexcn47Skab75BwYuY4bSh4Xy
xD5xwTO1PpUk4o2h+V9B+xOclSWrTXGQ1zozWmveFX/FHLQe8zTmIpzXNLU0C8Dq
ZMoKtt/Kw8F5uwwElexnWPl/54YEjPsYQRWgh4xbIvPVaBjiFv50avepy3TOWzHL
cLmZUYAtnWemN4hKveJ6EI/Ugmz6v+2BeZJHXEgYXCzAtwndAOrGx5L0hAXhjMLM
FuYlYOGIsra6A4FaR4SCpnmNQObjKDc19AMMDA5bK9kDGD/WkYKP8uqbDJysDetv
BN5JlLNTk0JnZw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:09 2025 by rpki-client