Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: MLnMKQp8Yb4Rp07Mdt2BwRJBxCcEdyuHhqNXv7nEbOQ=
Subject key identifier: DE:40:12:E2:DA:A5:D1:AD:73:6B:58:80:07:9B:FB:96:6B:17:B1:B7
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 0194BCE0C9B39342DC20451FEB3C7DA92A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: Kml/vMEWsMFMjMlsI+rfztLnNSritV7si7uo77Atxlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:b3:93:42:dc:20:45:1f:eb:3c:7d:a9:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=de4012e2daa5d1ad736b5880079bfb966b17b1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:0b:d0:ea:4a:2a:1f:4e:c4:c4:ff:e0:5c:
ad:d3:3f:05:58:1c:8e:f0:d5:09:8f:47:b0:45:e2:
8d:c2:fa:76:b2:9f:a0:5b:4c:d2:99:00:bc:57:b1:
95:f6:25:5b:17:84:4e:14:ad:27:31:c0:86:f5:0e:
56:0f:b4:5a:18:2b:f8:53:95:16:ab:41:44:af:b0:
90:2b:d2:50:1e:85:22:70:1a:7c:99:96:3f:34:08:
d5:ee:ee:8a:62:8b:0e:22:a1:84:01:9e:4a:77:a2:
72:46:9c:6e:02:76:af:6e:d5:83:4b:3a:0a:25:a2:
60:d7:f8:0c:67:d8:55:6e:f7:87:4a:a1:53:be:d6:
ce:be:83:de:28:b5:f7:cd:19:71:5a:5e:90:60:3d:
d4:47:8e:c5:ea:f0:6c:36:74:0f:70:93:d3:5d:b1:
33:d7:a9:96:2f:ba:a2:76:bd:a5:08:34:8f:b0:8b:
43:56:dd:7b:4f:09:8a:22:73:85:3c:b4:c0:b6:56:
3c:12:94:ab:f0:b6:3a:97:9f:c0:ce:98:85:9f:62:
73:2e:f9:fc:e9:ae:78:0b:0d:cc:30:6b:e0:61:c8:
dd:23:2c:71:c1:09:ad:15:ba:27:a0:70:0e:2d:54:
36:f0:74:7d:f7:fa:8d:89:05:da:cd:dc:a4:38:63:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:40:12:E2:DA:A5:D1:AD:73:6B:58:80:07:9B:FB:96:6B:17:B1:B7
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3a:ba:9e:e7:e8:75:f0:46:ae:1c:db:69:e2:1f:93:dd:6b:
b5:1a:e6:12:2f:c4:45:d9:b1:fa:6e:18:c9:12:35:6e:4e:b5:
99:3e:15:c0:e3:6f:da:28:96:26:a8:cc:1d:c7:f3:a2:4c:8d:
20:32:93:14:18:5a:35:93:df:d3:83:f6:8d:b3:6f:3f:44:3f:
8a:7e:22:c6:26:41:f3:c1:f3:09:0b:6b:2d:54:54:db:0c:85:
d9:d0:2b:25:ae:0a:73:ba:c8:5c:63:8c:c1:0d:b9:a1:3d:6e:
40:20:05:61:6a:30:d5:d2:58:49:ab:46:0e:cb:bb:ea:24:39:
27:a9:e2:63:71:e4:3a:2c:7a:cf:71:71:1d:ef:52:e2:ac:b0:
d2:06:d6:06:f9:29:3c:82:75:9c:18:92:d3:3f:a3:ec:5c:7f:
6f:81:90:85:a6:a0:27:f9:90:cf:6b:75:df:9d:8d:7c:51:f3:
c0:f2:46:45:fc:a3:c4:5a:d7:e9:16:20:e0:95:4e:8c:99:b3:
0f:a1:9c:70:44:2d:e2:10:7d:b6:07:9b:ba:db:ee:ff:11:e2:
ee:96:fa:ad:bc:fe:18:09:97:02:b0:2b:e3:e3:75:2b:49:dd:
43:e0:43:4c:07:6a:fb:6d:3b:56:3d:bd:c5:63:90:df:14:3f:
5d:89:37:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Mmzk0LcIEUf6zx9qSqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm
MDhiMjEwHhcNMjUwMTMxMTUwMDM1WhcNMjUwMjAxMTUwMDM1WjAzMTEwLwYDVQQD
EyhkZTQwMTJlMmRhYTVkMWFkNzM2YjU4ODAwNzliZmI5NjZiMTdiMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZwL0OpKKh9OxMT/4Fyt0z8FWByO
8NUJj0ewReKNwvp2sp+gW0zSmQC8V7GV9iVbF4ROFK0nMcCG9Q5WD7RaGCv4U5UW
q0FEr7CQK9JQHoUicBp8mZY/NAjV7u6KYosOIqGEAZ5Kd6JyRpxuAnavbtWDSzoK
JaJg1/gMZ9hVbveHSqFTvtbOvoPeKLX3zRlxWl6QYD3UR47F6vBsNnQPcJPTXbEz
16mWL7qidr2lCDSPsItDVt17TwmKInOFPLTAtlY8EpSr8LY6l5/AzpiFn2JzLvn8
6a54Cw3MMGvgYcjdIyxxwQmtFbonoHAOLVQ28HR99/qNiQXazdykOGO68QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5AEuLapdGtc2tYgAeb+5ZrF7G3MB8GA1UdIwQY
MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct
N2U3NGE2YTk4ZWNkLzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk
LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljq6nufo
dfBGrhzbaeIfk91rtRrmEi/ERdmx+m4YyRI1bk61mT4VwONv2iiWJqjMHcfzokyN
IDKTFBhaNZPf04P2jbNvP0Q/in4ixiZB88HzCQtrLVRU2wyF2dArJa4Kc7rIXGOM
wQ25oT1uQCAFYWow1dJYSatGDsu76iQ5J6niY3HkOix6z3FxHe9S4qyw0gbWBvkp
PIJ1nBiS0z+j7Fx/b4GQhaagJ/mQz2t1352NfFHzwPJGRfyjxFrX6RYg4JVOjJmz
D6GccEQt4hB9tgebutvu/xHi7pb6rbz+GAmXArAr4+N1K0ndQ+BDTAdq+207Vj29
xWOQ3xQ/XYk3oA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:58 2025 by rpki-client