Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: +5r/5tFQS6gcY0xl0ebMaUmOOFJYbUDONibbuOAwt5M=
Subject key identifier: FD:F5:59:17:46:BB:BC:DD:25:17:88:4D:38:50:94:8D:79:31:CB:AE
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 0194BC72ACC79890DFE6C9978220631AC285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 7KsoSSe2ip13n2W00CqJyOXTfM7dyjNecVCMOwxBxGs=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:c7:98:90:df:e6:c9:97:82:20:63:1a:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=fdf5591746bbbcdd2517884d3850948d7931cbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:82:9d:ff:8f:5c:c7:67:77:55:fc:e6:53:
10:17:53:f8:dc:3f:1f:1b:7f:b8:52:83:19:dc:43:
2d:67:65:81:e7:f0:81:95:5e:83:20:88:fe:96:00:
fa:2e:00:5b:9e:32:ca:cc:7e:76:01:17:65:37:e9:
df:78:40:00:b4:a5:42:4e:34:5f:a5:4e:22:e0:24:
77:a2:84:39:e9:4e:16:a2:54:9d:ea:c4:8d:6d:d8:
05:c7:f8:16:e7:d2:fa:2e:90:53:d7:23:25:6a:06:
3b:76:eb:7b:90:10:26:97:5e:f5:f0:e5:1d:8b:ea:
4f:44:30:7a:95:d6:79:fd:0f:d2:c3:06:f3:2a:55:
39:6c:49:32:3e:27:53:0d:2e:7e:9e:af:33:a1:7f:
fa:8a:16:55:16:8a:05:43:97:b1:65:4b:4b:9b:d8:
ca:47:99:c2:58:95:7f:6d:d9:b8:40:26:10:c9:ab:
56:61:dc:f0:03:5d:ed:26:e2:ed:1c:33:3c:1a:89:
e9:66:bf:cc:4a:c6:ef:c5:65:14:06:ab:79:06:44:
b9:e4:e8:a8:d1:49:9a:8c:a6:f2:7c:3f:df:d8:a4:
e6:37:ba:e5:9c:ae:62:0a:1a:c7:e0:ad:91:a8:1a:
c5:26:48:91:aa:62:bf:e9:37:f0:70:83:02:5f:51:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:59:17:46:BB:BC:DD:25:17:88:4D:38:50:94:8D:79:31:CB:AE
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:3b:ea:b4:1a:44:d4:37:e8:90:5b:ed:7c:73:08:1a:25:
f5:24:f7:cb:fd:7d:a7:84:1e:ba:a8:bb:5f:a9:7f:60:32:78:
02:ae:04:a6:73:3b:4a:48:08:13:af:9f:e7:0f:81:41:2a:a6:
63:7c:6d:8b:bf:db:5c:00:4d:4c:b6:bc:b5:3b:c3:68:a6:86:
ea:7b:fe:a2:47:14:b0:2a:d2:e8:af:79:9f:e1:ad:82:c5:3f:
f8:35:a5:4c:30:79:c1:f7:94:2c:3d:33:cf:5b:3c:fe:7d:a4:
cc:53:ba:b8:06:2c:5d:27:f3:75:ee:77:00:d8:cd:3e:3c:89:
52:22:37:3f:f6:97:83:b0:cb:84:cb:d6:37:9f:d4:df:a6:a4:
e2:45:93:85:2b:99:d9:bd:a8:dc:cd:39:f1:12:36:99:83:e3:
5a:ce:ab:f2:a6:3d:91:ae:21:f1:1b:b9:42:a9:f2:32:63:51:
8e:91:55:c2:e0:10:29:87:9a:f4:33:2e:26:11:c5:3d:f3:16:
ed:71:b8:12:8d:96:2c:38:22:87:60:d8:57:82:24:fd:b0:8a:
41:53:0b:e3:e1:53:60:91:ce:f8:25:d8:54:32:cf:84:34:24:
04:fa:5c:2e:f7:9f:1b:9f:03:9b:1d:4f:5b:3b:e1:3f:d4:fe:
70:2e:dc:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqzHmJDf5smXgiBjGsKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk
MWM4NzkwHhcNMjUwMTMxMTMwMDE5WhcNMjUwMjAxMTMwMDE5WjAzMTEwLwYDVQQD
EyhmZGY1NTkxNzQ2YmJiY2RkMjUxNzg4NGQzODUwOTQ4ZDc5MzFjYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHqCnf+PXMdnd1X85lMQF1P43D8f
G3+4UoMZ3EMtZ2WB5/CBlV6DIIj+lgD6LgBbnjLKzH52ARdlN+nfeEAAtKVCTjRf
pU4i4CR3ooQ56U4WolSd6sSNbdgFx/gW59L6LpBT1yMlagY7dut7kBAml1718OUd
i+pPRDB6ldZ5/Q/SwwbzKlU5bEkyPidTDS5+nq8zoX/6ihZVFooFQ5exZUtLm9jK
R5nCWJV/bdm4QCYQyatWYdzwA13tJuLtHDM8GonpZr/MSsbvxWUUBqt5BkS55Oio
0UmajKbyfD/f2KTmN7rlnK5iChrH4K2RqBrFJkiRqmK/6TfwcIMCX1FCiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP31WRdGu7zdJReITThQlI15McuuMB8GA1UdIwQY
MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt
NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh
LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGk76rQa
RNQ36JBb7XxzCBol9ST3y/19p4Qeuqi7X6l/YDJ4Aq4EpnM7SkgIE6+f5w+BQSqm
Y3xti7/bXABNTLa8tTvDaKaG6nv+okcUsCrS6K95n+GtgsU/+DWlTDB5wfeULD0z
z1s8/n2kzFO6uAYsXSfzde53ANjNPjyJUiI3P/aXg7DLhMvWN5/U36ak4kWThSuZ
2b2o3M058RI2mYPjWs6r8qY9ka4h8Ru5QqnyMmNRjpFVwuAQKYea9DMuJhHFPfMW
7XG4Eo2WLDgih2DYV4Ik/bCKQVML4+FTYJHO+CXYVDLPhDQkBPpcLvefG58Dmx1P
WzvhP9T+cC7cPQ==
-----END CERTIFICATE-----
Generated at Thu May 1 07:33:04 2025 by rpki-client