Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier: LuSTivuK0N+qTPlLOYDIPi4G3J3Z6mgTumjMBiUVjOI=
Subject key identifier: 18:73:E7:97:B1:D4:A3:09:14:C7:5B:31:ED:F9:29:BF:37:D6:B8:1D
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 0194BCAA04AD7A0CE9573B36B84CE406F277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number: 1159
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: BAzsPPCBy1zDTboFw5Sl-2syIOA.roa (hash: 3HXxwP+fQhhVnJuWOZekRFhU3Q46kmrc9Y0dZLDklcg=)
2: bYpyeHiVOX2l8iPl-uPkAX9zfmw.roa (hash: clblsPlZTuaRgRGxz58OPeCdg4rL7htkupWPy4rOhKg=)
3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: DkYj3cxxmap6YSCqbYfOABv2idJKdOYOch9/AgvLlM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:ad:7a:0c:e9:57:3b:36:b8:4c:e4:06:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=1873e797b1d4a30914c75b31edf929bf37d6b81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:b5:a4:0d:ac:84:67:fb:f2:1c:36:b6:c2:
a1:a7:51:ca:0c:f5:f7:7b:30:a5:a8:e5:e2:99:54:
81:9b:e9:2d:a5:33:f3:de:e1:38:83:bd:78:3c:55:
98:85:47:f6:68:ea:f1:fc:bb:02:d4:0a:25:2f:d4:
e0:3a:77:b4:0e:f5:e8:75:c2:17:62:44:92:71:3d:
9a:74:b9:42:40:77:f0:56:56:c8:8c:01:3f:c8:75:
c1:6e:ec:68:8b:a3:8d:15:a7:8b:40:5b:9c:96:02:
65:44:79:3a:bb:4a:d5:69:ab:cd:d9:88:3c:80:c1:
de:8b:3c:b4:0d:5d:49:28:61:99:db:50:97:f1:96:
89:8a:a6:55:97:9f:e9:20:81:1a:03:32:61:72:68:
1f:21:20:e0:07:23:62:4b:c1:ce:d5:91:f8:48:bc:
7e:a9:d5:04:25:ce:b3:23:c8:62:c3:5d:6a:fb:81:
3e:e7:04:4e:b1:45:ab:f3:58:9c:03:f0:6f:ea:ca:
7a:f8:eb:f5:70:c2:f3:0a:e5:77:f0:bc:1c:aa:a1:
3e:34:03:7e:2f:13:ff:b4:e0:32:7d:9b:55:1c:c0:
7d:f2:02:b6:6f:df:90:7c:a0:44:1d:00:a8:5a:88:
d7:70:62:2f:84:45:44:e4:2d:22:69:5a:36:bc:f6:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:E7:97:B1:D4:A3:09:14:C7:5B:31:ED:F9:29:BF:37:D6:B8:1D
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e2:15:ad:ac:80:c0:e8:ee:1e:70:23:96:95:17:97:02:4b:
6f:23:35:06:12:bc:dd:90:59:f8:c3:1e:86:3b:08:f5:97:98:
00:fa:88:05:72:54:e2:1b:2c:99:fa:47:51:98:19:6c:34:7c:
f2:27:3c:9a:bc:51:45:b2:48:7d:11:a9:90:61:76:1d:9c:e7:
72:26:09:74:ef:09:f1:44:57:49:15:51:de:fc:a1:68:f7:69:
77:1e:0c:93:2a:51:1c:cd:11:17:29:47:78:0d:2d:cc:9d:a5:
8a:d2:4c:7d:e6:ed:b5:52:7b:cc:14:a4:05:6c:8f:2b:1c:e8:
98:b7:8d:33:39:f8:26:34:15:a9:09:6a:28:fd:c2:bf:54:9e:
7c:41:cf:5f:df:48:a4:1e:2d:f0:cf:1b:e6:42:d6:67:be:5d:
e9:93:31:b6:09:a1:82:6d:70:be:2e:17:d5:9f:f6:85:02:86:
73:11:3d:3b:2a:73:d5:1c:95:de:75:1d:60:b1:05:df:2b:ef:
62:ae:69:df:2e:a5:d1:18:3f:9c:bb:20:11:34:4f:df:73:91:
84:bd:b1:71:fd:69:a3:7b:29:f3:82:ab:c5:19:b2:5e:d9:f1:
21:e3:7d:06:64:8c:18:49:e2:ab:f5:3b:70:3a:bd:90:2c:07:
6d:1d:21:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgStegzpVzs2uEzkBvJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5
MmFkZTQwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
EygxODczZTc5N2IxZDRhMzA5MTRjNzViMzFlZGY5MjliZjM3ZDZiODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYe1pA2shGf78hw2tsKhp1HKDPX3
ezClqOXimVSBm+ktpTPz3uE4g714PFWYhUf2aOrx/LsC1AolL9TgOne0DvXodcIX
YkSScT2adLlCQHfwVlbIjAE/yHXBbuxoi6ONFaeLQFuclgJlRHk6u0rVaavN2Yg8
gMHeizy0DV1JKGGZ21CX8ZaJiqZVl5/pIIEaAzJhcmgfISDgByNiS8HO1ZH4SLx+
qdUEJc6zI8hiw11q+4E+5wROsUWr81icA/Bv6sp6+Ov1cMLzCuV38LwcqqE+NAN+
LxP/tOAyfZtVHMB98gK2b9+QfKBEHQCoWojXcGIvhEVE5C0iaVo2vPa02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhz55ex1KMJFMdbMe35Kb831rgdMB8GA1UdIwQY
MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt
OTc1OGNiMmI4NDRlLzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl
LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOIVrayA
wOjuHnAjlpUXlwJLbyM1BhK83ZBZ+MMehjsI9ZeYAPqIBXJU4hssmfpHUZgZbDR8
8ic8mrxRRbJIfRGpkGF2HZznciYJdO8J8URXSRVR3vyhaPdpdx4MkypRHM0RFylH
eA0tzJ2litJMfebttVJ7zBSkBWyPKxzomLeNMzn4JjQVqQlqKP3Cv1SefEHPX99I
pB4t8M8b5kLWZ75d6ZMxtgmhgm1wvi4X1Z/2hQKGcxE9Oypz1RyV3nUdYLEF3yvv
Yq5p3y6l0Rg/nLsgETRP33ORhL2xcf1po3sp84KrxRmyXtnxIeN9BmSMGEniq/U7
cDq9kCwHbR0haA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:40 2025 by rpki-client