Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: m/tEEotKnl57EvtupjxFAzvYupNW+WUvuYEcqA2+BxA=
Subject key identifier: 19:4F:DC:AE:8F:4A:CF:79:BA:BE:91:CB:4F:8A:60:75:F3:A3:C9:A0
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 0194BC0514AC395F435469B6FCC75A2F5C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: SSh/doV8Zr8zxqEAeRBv/dLgUaO8F0+IymLYC/GCL+w=)
2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:ac:39:5f:43:54:69:b6:fc:c7:5a:2f:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=194fdcae8f4acf79babe91cb4f8a6075f3a3c9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:b4:61:34:00:78:5d:38:b9:98:70:73:69:
a4:12:e2:ea:88:cc:1b:f6:23:3a:17:5c:9d:60:28:
6b:79:8b:1c:71:fa:cc:51:59:03:79:2a:8d:54:0d:
4b:dd:97:bb:ed:72:67:69:89:b0:34:91:c9:79:96:
4c:d1:2a:93:58:d4:36:fc:e6:7f:ac:40:de:5b:90:
65:37:9c:fb:b8:bf:6b:7a:62:46:53:cc:dd:c4:ef:
a0:c1:81:c2:bc:6d:16:1e:2e:6c:13:c9:ee:34:65:
c3:2f:63:55:c2:ae:77:c6:f0:4a:bf:4a:2c:79:d0:
6a:b6:ae:02:90:6f:9f:a2:07:ca:a2:e1:92:6a:a4:
22:88:23:e5:21:45:f4:17:be:b6:8e:9a:ab:e8:9f:
fb:07:23:10:dd:51:2d:4c:a7:88:af:c9:e1:a7:35:
b0:23:34:14:bd:ef:b7:48:f3:d1:c6:eb:cd:60:d6:
5a:58:b4:bb:b3:3a:60:00:59:d0:c6:66:ea:02:95:
24:c1:d5:61:f2:bd:ba:76:5a:1f:96:a0:43:7c:b2:
f7:c7:c1:b0:22:85:db:ff:b7:0c:9b:7b:85:64:7b:
3e:f5:97:a4:24:95:30:59:43:03:42:da:1d:a8:56:
72:5a:1d:3c:31:0e:98:ba:4f:0c:03:98:4d:79:1e:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4F:DC:AE:8F:4A:CF:79:BA:BE:91:CB:4F:8A:60:75:F3:A3:C9:A0
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ca:61:29:b6:32:ae:0c:85:de:a1:cb:95:01:48:a1:cc:c1:
8b:cd:3f:d2:b9:0a:e5:54:33:a6:3c:7f:cf:aa:87:e4:5e:67:
31:67:9a:7c:df:57:fa:83:e9:24:1f:a0:0e:df:f4:db:13:49:
55:4b:1e:c6:f9:8a:dd:c5:54:28:e0:c3:0d:2f:62:9a:f5:5b:
0b:aa:8e:df:cc:fc:79:20:50:0f:07:aa:96:42:81:37:6a:97:
fe:77:db:8f:36:78:a4:6c:26:50:43:86:10:32:c1:0c:c6:7d:
64:e3:51:53:48:16:2c:ae:47:c8:a9:ca:92:af:66:13:28:50:
de:86:c0:47:83:3c:9f:a0:46:7c:9d:19:7b:b4:54:9e:01:16:
46:f1:3d:00:be:04:e1:02:7d:31:57:ac:00:a7:37:be:bf:ab:
73:30:d4:3b:a1:38:1a:50:29:1a:12:14:7b:01:75:04:df:94:
f2:39:db:33:ec:6a:fc:b9:90:41:fe:ab:f3:86:cf:97:40:67:
7b:3d:e5:36:7f:be:28:4a:6c:4b:8d:1f:12:cf:b4:56:69:e6:
57:a2:4e:be:d8:57:54:1e:fd:7d:57:65:25:b4:7c:c4:47:6b:
4c:73:98:22:04:34:4c:8c:75:16:7c:d9:74:87:b4:91:f8:40:
67:99:4c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRSsOV9DVGm2/MdaL1yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj
MGE0YTUwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
EygxOTRmZGNhZThmNGFjZjc5YmFiZTkxY2I0ZjhhNjA3NWYzYTNjOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LC0YTQAeF04uZhwc2mkEuLqiMwb
9iM6F1ydYChreYsccfrMUVkDeSqNVA1L3Ze77XJnaYmwNJHJeZZM0SqTWNQ2/OZ/
rEDeW5BlN5z7uL9remJGU8zdxO+gwYHCvG0WHi5sE8nuNGXDL2NVwq53xvBKv0os
edBqtq4CkG+fogfKouGSaqQiiCPlIUX0F762jpqr6J/7ByMQ3VEtTKeIr8nhpzWw
IzQUve+3SPPRxuvNYNZaWLS7szpgAFnQxmbqApUkwdVh8r26dloflqBDfLL3x8Gw
IoXb/7cMm3uFZHs+9ZekJJUwWUMDQtodqFZyWh08MQ6Yuk8MA5hNeR4GbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlP3K6PSs95ur6Ry0+KYHXzo8mgMB8GA1UdIwQY
MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt
MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl
LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsphKbYy
rgyF3qHLlQFIoczBi80/0rkK5VQzpjx/z6qH5F5nMWeafN9X+oPpJB+gDt/02xNJ
VUsexvmK3cVUKODDDS9imvVbC6qO38z8eSBQDweqlkKBN2qX/nfbjzZ4pGwmUEOG
EDLBDMZ9ZONRU0gWLK5HyKnKkq9mEyhQ3obAR4M8n6BGfJ0Ze7RUngEWRvE9AL4E
4QJ9MVesAKc3vr+rczDUO6E4GlApGhIUewF1BN+U8jnbM+xq/LmQQf6r84bPl0Bn
ez3lNn++KEpsS40fEs+0VmnmV6JOvthXVB79fVdlJbR8xEdrTHOYIgQ0TIx1FnzZ
dIe0kfhAZ5lM2g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:16 2025 by rpki-client