Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: cyOxuWy/kgQDhPs5OJo9ffWH6qHA7aOIovwLMSiYxyk=
Subject key identifier: 28:D5:78:B7:04:10:34:A4:27:18:76:C6:BB:2B:F7:6F:49:27:36:0D
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 0194BC04E807E66A10EB33D501C0062794CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=)
2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: 2RWzOkKtlMLrNSiapnZP3TBin2eT/YZjDvY6DjMCKTg=)
3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=)
4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e8:07:e6:6a:10:eb:33:d5:01:c0:06:27:94:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=28d578b7041034a4271876c6bb2bf76f4927360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:b9:84:45:df:c3:67:72:b4:95:38:22:cf:
e7:99:87:21:79:24:6d:f1:f9:76:5c:7c:ab:5a:4e:
92:13:4b:8d:d4:17:8b:ea:04:f4:72:37:a9:de:15:
90:41:f6:d6:87:23:b7:bf:bd:64:a7:25:5d:e8:6e:
17:30:a3:cd:30:ed:20:8f:8b:13:b2:ad:70:c2:53:
78:12:fe:94:b3:3b:9a:d2:16:58:77:e6:83:3a:c2:
ce:84:7b:84:7d:04:ac:d0:0f:b6:db:6a:c1:04:75:
2e:71:c4:2c:9c:ea:01:0d:b4:eb:93:23:97:2e:85:
29:10:41:62:92:c5:80:c8:d6:28:8f:88:9f:f6:27:
d0:a8:5e:ed:5e:ab:8f:f3:ed:ef:56:10:e9:8a:1c:
52:5c:a2:d7:e2:da:2f:b1:b9:48:9d:ab:38:71:b2:
b9:c2:17:f7:97:f2:e3:d1:cd:bb:45:17:74:74:85:
9c:33:4a:22:47:2c:0b:b4:06:34:43:4c:1d:b4:da:
98:32:b8:df:4f:89:ed:32:72:2f:0e:fb:f7:83:85:
a1:ec:1f:34:f8:62:79:c9:3b:64:d7:9b:8d:6c:74:
1e:f3:dd:fa:ed:d4:cf:a8:63:ba:9f:7a:bc:94:1e:
b0:86:63:76:4a:de:ef:11:9b:d0:ff:1a:cb:3d:d0:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:78:B7:04:10:34:A4:27:18:76:C6:BB:2B:F7:6F:49:27:36:0D
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:64:90:a9:ae:58:01:4d:21:99:47:72:80:8b:9a:4b:fa:
8a:5a:95:ca:b5:45:c4:f7:36:e0:87:f4:d9:9a:66:55:0b:76:
5d:df:44:3c:99:59:b6:06:15:c3:05:0b:2c:94:0a:f1:45:98:
e3:bc:fc:48:4d:e1:7d:d7:7e:77:1f:56:54:a6:1e:0d:40:45:
97:0d:82:eb:b1:fc:81:4f:e0:7c:75:dd:cd:65:41:df:59:19:
7e:a4:4f:bd:18:4d:32:e7:96:aa:fa:51:83:0a:05:aa:1e:39:
4a:c0:17:c6:eb:86:73:d4:e1:53:71:97:3d:a3:e6:77:09:bc:
8e:31:1a:65:a2:83:35:f4:b5:e0:5d:e8:4b:d3:5c:ce:62:48:
5c:85:1b:a9:bf:63:b7:dd:2f:a1:e0:a9:73:9d:99:fe:84:2a:
fd:80:13:e4:b6:71:85:e1:2c:2d:05:7a:ff:15:75:a2:00:0f:
19:56:c1:0b:66:bb:4d:1c:cb:51:e5:30:6d:71:9a:3a:51:ca:
d6:d5:5e:c3:1f:0d:f8:f4:d2:8b:4e:a6:70:3c:cd:7d:ad:9f:
48:6a:a2:a0:c8:fd:fd:a7:02:e9:7a:ea:bc:49:70:52:3d:83:
4c:d0:c9:af:6f:35:db:bc:69:b7:48:bc:27:10:ae:88:a0:f5:
db:a4:19:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOgH5moQ6zPVAcAGJ5TPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi
Y2UxN2YwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
EygyOGQ1NzhiNzA0MTAzNGE0MjcxODc2YzZiYjJiZjc2ZjQ5MjczNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWy5hEXfw2dytJU4Is/nmYcheSRt
8fl2XHyrWk6SE0uN1BeL6gT0cjep3hWQQfbWhyO3v71kpyVd6G4XMKPNMO0gj4sT
sq1wwlN4Ev6Uszua0hZYd+aDOsLOhHuEfQSs0A+222rBBHUuccQsnOoBDbTrkyOX
LoUpEEFiksWAyNYoj4if9ifQqF7tXquP8+3vVhDpihxSXKLX4tovsblInas4cbK5
whf3l/Lj0c27RRd0dIWcM0oiRywLtAY0Q0wdtNqYMrjfT4ntMnIvDvv3g4Wh7B80
+GJ5yTtk15uNbHQe89367dTPqGO6n3q8lB6whmN2St7vEZvQ/xrLPdC/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjVeLcEEDSkJxh2xrsr929JJzYNMB8GA1UdIwQY
MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt
NDVjYWE2ZWY2NzAwLzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw
LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmJkkKmu
WAFNIZlHcoCLmkv6ilqVyrVFxPc24If02ZpmVQt2Xd9EPJlZtgYVwwULLJQK8UWY
47z8SE3hfdd+dx9WVKYeDUBFlw2C67H8gU/gfHXdzWVB31kZfqRPvRhNMueWqvpR
gwoFqh45SsAXxuuGc9ThU3GXPaPmdwm8jjEaZaKDNfS14F3oS9NczmJIXIUbqb9j
t90voeCpc52Z/oQq/YAT5LZxheEsLQV6/xV1ogAPGVbBC2a7TRzLUeUwbXGaOlHK
1tVewx8N+PTSi06mcDzNfa2fSGqioMj9/acC6XrqvElwUj2DTNDJr28127xpt0i8
JxCuiKD126QZaw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:16 2025 by rpki-client