Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: JAbpCn4WeGpUOMhTyjRuBS3lsVj0TcQkxeGkQJPmhiQ=
Subject key identifier: 05:41:9F:0E:DE:26:57:C1:2C:92:4C:B5:09:45:81:25:13:7E:23:16
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 0194BC72A0A775DC708A0775F0B8C64235D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 116C
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: InHDg7E5DMK8LcfC+4pZxH28Aj/+DqA3vWw0owwcUoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a0:a7:75:dc:70:8a:07:75:f0:b8:c6:42:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=05419f0ede2657c12c924cb509458125137e2316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:4b:c5:3c:fc:01:43:c9:b5:3d:d0:1a:62:
e4:20:6e:d0:11:74:18:89:0a:0a:b5:75:56:67:bf:
b0:40:27:de:7b:70:ae:fe:7e:a5:11:98:16:15:a5:
27:44:61:b8:56:db:fb:ec:1b:11:93:18:ee:00:48:
9b:72:04:aa:2e:24:65:3f:ba:95:2e:b5:af:e7:77:
d8:b9:60:d7:67:b0:1c:75:5b:00:58:8f:92:8b:bb:
3d:ab:1d:d9:14:e5:e8:44:07:38:b5:8e:69:c4:51:
00:7d:43:84:3f:d5:ca:26:9a:b2:b7:a3:74:49:7f:
0d:8b:37:24:3d:61:23:36:68:98:da:04:c7:c7:8c:
3d:7b:50:f6:72:95:4d:bb:c9:c2:0e:b4:23:5f:22:
c3:b8:71:d8:7b:65:03:0b:48:10:5b:ff:fc:0f:dd:
72:f1:9c:0e:c9:e9:55:0d:2f:91:11:15:00:4e:40:
2a:c2:f6:16:2b:dc:63:26:40:20:cd:e2:3e:06:37:
83:4e:ce:77:25:a7:fb:d6:55:c2:96:83:a3:62:65:
9e:11:e0:9f:ad:fe:c2:91:cc:ae:5c:d3:00:0c:e2:
51:fb:c9:4e:cc:ed:ff:eb:0c:bc:c9:96:65:8e:86:
64:4d:c9:3b:56:f9:6d:b0:df:2d:ba:11:65:2c:7c:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:9F:0E:DE:26:57:C1:2C:92:4C:B5:09:45:81:25:13:7E:23:16
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:55:2c:98:82:4f:71:fe:d0:0d:33:2b:a3:bc:5e:e8:ae:1f:
65:fa:ba:10:b0:25:01:4e:dd:2d:ea:3a:23:0f:78:f9:1a:e4:
eb:fe:59:14:39:6e:d5:ea:55:c4:a2:b1:c2:e7:08:7b:4e:1c:
18:ff:08:35:f1:fb:e5:f9:89:b3:e8:2b:d5:d9:91:84:a9:b7:
0c:01:a4:86:66:cc:8e:53:b0:b1:4f:1a:75:e6:f6:de:b8:1e:
e5:d0:77:b5:8a:c7:a8:a9:82:32:4d:ea:bf:68:22:4b:6d:32:
81:10:e0:6a:92:1e:71:39:72:9b:9c:82:36:5b:1b:ef:26:c8:
c2:62:e5:c0:51:06:e2:72:6d:78:0f:fb:9e:c4:03:f3:16:78:
65:dc:df:92:9e:78:d7:f9:63:d4:88:16:5d:b5:2e:31:c6:19:
12:da:9b:12:2a:74:15:89:5e:58:37:00:88:03:62:70:5b:6b:
71:23:2b:7d:74:71:2c:cb:46:a5:65:00:4a:1c:73:ad:de:49:
cd:ac:51:df:aa:97:d5:a5:f2:8b:50:c3:97:63:c6:40:26:49:
f2:49:2b:04:d5:7d:5b:f6:1c:73:2f:d9:e6:55:0c:96:e2:09:
54:5f:7c:1c:68:10:0b:5e:f4:e7:2a:d5:21:f0:51:c1:9f:c2:
e2:bd:b2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqCnddxwigd18LjGQjXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTUyMThiNjllNTUxMTQzYzUxZmExZDkxOTUxMmUxYTQ0
YzVjOWQwHhcNMjUwMTMxMTMwMDE2WhcNMjUwMjAxMTMwMDE2WjAzMTEwLwYDVQQD
EygwNTQxOWYwZWRlMjY1N2MxMmM5MjRjYjUwOTQ1ODEyNTEzN2UyMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VRLxTz8AUPJtT3QGmLkIG7QEXQY
iQoKtXVWZ7+wQCfee3Cu/n6lEZgWFaUnRGG4Vtv77BsRkxjuAEibcgSqLiRlP7qV
LrWv53fYuWDXZ7AcdVsAWI+Si7s9qx3ZFOXoRAc4tY5pxFEAfUOEP9XKJpqyt6N0
SX8NizckPWEjNmiY2gTHx4w9e1D2cpVNu8nCDrQjXyLDuHHYe2UDC0gQW//8D91y
8ZwOyelVDS+RERUATkAqwvYWK9xjJkAgzeI+BjeDTs53Jaf71lXCloOjYmWeEeCf
rf7CkcyuXNMADOJR+8lOzO3/6wy8yZZljoZkTck7VvltsN8tuhFlLHx8NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVBnw7eJlfBLJJMtQlFgSUTfiMWMB8GA1UdIwQY
MBaAFJJVIYtp5VEUPFH6HZGVEuGkTFydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYt
YWZmYmEyZGYzZDYyLzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYtYWZmYmEyZGYzZDYy
LzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVUsmIJP
cf7QDTMro7xe6K4fZfq6ELAlAU7dLeo6Iw94+Rrk6/5ZFDlu1epVxKKxwucIe04c
GP8INfH75fmJs+gr1dmRhKm3DAGkhmbMjlOwsU8adeb23rge5dB3tYrHqKmCMk3q
v2giS20ygRDgapIecTlym5yCNlsb7ybIwmLlwFEG4nJteA/7nsQD8xZ4Zdzfkp54
1/lj1IgWXbUuMcYZEtqbEip0FYleWDcAiANicFtrcSMrfXRxLMtGpWUAShxzrd5J
zaxR36qX1aXyi1DDl2PGQCZJ8kkrBNV9W/Yccy/Z5lUMluIJVF98HGgQC1705yrV
IfBRwZ/C4r2yHw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:32 2025 by rpki-client