Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: pW/3w4jDcarflhwckhh52aS44QzxRPiqe9gPbvfBkMA=
Subject key identifier: C6:F9:B1:8C:DD:AA:D4:E7:9E:DA:6A:24:C4:04:42:17:9C:24:F3:95
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 0194BD17C6C31E343F811B8978E4305D8E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0CED
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: sah69a9nRY5KS6K9DWP1qC125NuNsf5ZP+yD870BY7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:c3:1e:34:3f:81:1b:89:78:e4:30:5d:8e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=c6f9b18cddaad4e79eda6a24c40442179c24f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:07:11:d9:aa:c0:ed:ba:c3:30:1a:df:b2:
1e:83:72:29:5d:92:c6:e2:d7:b3:f5:b1:d7:ef:cf:
32:dc:d3:fb:67:0a:b5:4d:af:2d:21:c2:f9:99:9b:
a9:58:ba:94:e3:f8:05:9e:b8:70:1b:3e:26:9a:e1:
a9:13:54:57:76:bf:eb:6b:a9:b8:f1:62:56:e0:41:
a9:49:87:cd:a5:0a:be:e1:cc:bb:58:34:ed:61:28:
d5:ed:a0:79:cc:85:5a:af:1c:2d:45:3e:17:2d:76:
34:d5:b0:14:66:5d:59:1c:a6:70:a7:58:e6:85:3b:
be:10:39:42:df:7f:21:46:9c:eb:14:68:72:4d:de:
51:a2:a6:1f:ab:c3:b6:f0:d9:94:34:eb:94:2a:d1:
49:5c:e9:45:bb:f3:f3:f5:69:26:85:87:19:42:11:
54:af:6d:b1:fa:cf:11:de:c0:68:4d:9f:bc:8e:89:
ef:4d:a9:a5:66:31:de:6f:19:88:fb:33:99:80:55:
cb:ea:69:a3:c1:1a:1d:38:88:64:e6:88:f8:08:17:
50:63:c7:5f:90:26:14:da:f3:7d:a3:b1:0c:12:d1:
be:9c:13:dd:2c:68:08:9b:64:79:3d:6c:7a:76:08:
2e:24:46:f8:5c:dd:b2:49:d5:2c:ff:fe:e1:57:04:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:B1:8C:DD:AA:D4:E7:9E:DA:6A:24:C4:04:42:17:9C:24:F3:95
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3e:fe:4b:04:54:0f:69:ec:af:09:51:f9:6e:8f:18:52:b3:
29:d7:3d:1d:28:7f:e4:86:1d:d8:d6:7f:18:b3:26:de:5c:4d:
78:4e:8e:45:88:8c:69:09:be:c6:3b:af:82:5a:25:66:18:ad:
2d:23:6f:38:17:7d:89:99:b1:b4:15:89:94:f7:61:4d:31:12:
15:31:c2:0c:8d:9c:82:79:de:3a:52:f3:63:8f:43:34:7d:f2:
b1:af:d2:0d:1a:e4:bf:a7:d8:7f:98:44:8d:fe:c6:3d:64:54:
90:71:d8:6c:97:2f:92:37:a8:2a:27:ef:65:23:5d:67:5f:2b:
8b:85:79:b1:5d:4a:ac:2d:7a:6b:6e:03:f3:fc:17:ae:26:27:
f0:37:be:5e:eb:61:d0:09:15:bf:41:ae:3c:40:8a:85:47:25:
84:c5:20:f3:9c:60:75:75:4b:a4:4f:4b:ce:33:2a:b2:63:cf:
01:ee:22:e9:1c:a4:3f:f2:d5:bb:7c:93:03:c7:5e:d5:f1:6a:
87:b8:45:7b:f4:b8:09:10:2f:d9:22:db:bc:c4:f5:7a:b1:c7:
43:07:49:56:5c:0b:1f:aa:50:ad:87:fc:8a:c9:9d:90:79:4d:
e1:28:06:f1:c0:1b:57:84:2d:87:ef:fd:5c:a4:e1:b9:f6:5a:
3a:cd:fd:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8bDHjQ/gRuJeOQwXY5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDRjNGFkNzMxZTQ1ZWQzMjBhMmYzOGFiNzBiN2E3YmZm
N2VhNzkwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
EyhjNmY5YjE4Y2RkYWFkNGU3OWVkYTZhMjRjNDA0NDIxNzljMjRmMzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGsHEdmqwO26wzAa37Ieg3IpXZLG
4tez9bHX788y3NP7Zwq1Ta8tIcL5mZupWLqU4/gFnrhwGz4mmuGpE1RXdr/ra6m4
8WJW4EGpSYfNpQq+4cy7WDTtYSjV7aB5zIVarxwtRT4XLXY01bAUZl1ZHKZwp1jm
hTu+EDlC338hRpzrFGhyTd5RoqYfq8O28NmUNOuUKtFJXOlFu/Pz9WkmhYcZQhFU
r22x+s8R3sBoTZ+8jonvTamlZjHebxmI+zOZgFXL6mmjwRodOIhk5oj4CBdQY8df
kCYU2vN9o7EMEtG+nBPdLGgIm2R5PWx6dgguJEb4XN2ySdUs//7hVwTeOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMb5sYzdqtTnntpqJMQEQhecJPOVMB8GA1UdIwQY
MBaAFJPUxK1zHkXtMgovOKtwt6e/9+p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDct
YWJhNTVlMjQyNGQyLzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDctYWJhNTVlMjQyNGQy
LzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdj7+SwRU
D2nsrwlR+W6PGFKzKdc9HSh/5IYd2NZ/GLMm3lxNeE6ORYiMaQm+xjuvglolZhit
LSNvOBd9iZmxtBWJlPdhTTESFTHCDI2cgnneOlLzY49DNH3ysa/SDRrkv6fYf5hE
jf7GPWRUkHHYbJcvkjeoKifvZSNdZ18ri4V5sV1KrC16a24D8/wXriYn8De+Xuth
0AkVv0GuPECKhUclhMUg85xgdXVLpE9LzjMqsmPPAe4i6RykP/LVu3yTA8de1fFq
h7hFe/S4CRAv2SLbvMT1erHHQwdJVlwLH6pQrYf8ismdkHlN4SgG8cAbV4Qth+/9
XKThufZaOs39yw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:37 2025 by rpki-client