Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: NY8EKKy+VSezhQ6Y/99wGwYUoPI+SsA4E/GxOtceWws=
Subject key identifier: F9:D4:9F:49:31:4D:AD:7D:DA:44:74:A5:87:2F:0D:35:DF:E6:21:7C
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 0194BD4EA0DCF2A4952799039D819F563C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 03B3
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: 6UifLJ28hQPdCWFVDK2L2BazBPTPg8ZcP/4yl/Y8W5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:dc:f2:a4:95:27:99:03:9d:81:9f:56:3c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=f9d49f49314dad7dda4474a5872f0d35dfe6217c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:ca:fb:25:bb:9a:fa:ab:4f:ee:8c:7a:ae:
b0:c3:91:64:03:cf:33:39:a1:83:58:bf:b2:61:36:
9a:be:bf:2f:53:da:e7:7e:72:d6:16:c5:54:84:d6:
5d:a0:88:1a:85:e8:5e:43:ce:3e:00:fd:f8:55:a4:
ab:42:77:3b:8a:5f:c1:cc:6b:f1:ee:24:0f:6a:2b:
80:56:f3:e0:c7:74:44:06:d0:48:f7:a5:12:e2:df:
b4:5c:0f:ef:b5:08:1a:a5:1b:86:9c:7c:05:51:c1:
f2:eb:d9:1a:c5:f4:6d:67:53:2b:fa:9c:50:67:b5:
5a:6e:53:86:83:6c:ba:fe:7a:9d:a0:cd:de:a5:60:
1b:b5:b4:c7:66:be:ab:6a:b5:12:e3:53:12:aa:ac:
f3:5d:e3:e4:8c:74:17:e7:5a:6d:ac:0b:f9:b6:7a:
5f:d8:22:e4:67:97:09:a0:06:bb:5f:ab:a8:29:7d:
1d:a4:09:0c:15:9a:75:91:3f:eb:9e:10:33:fa:05:
f4:83:b5:48:6a:09:1e:f1:c5:d4:c9:5c:36:a8:7c:
db:27:f5:d2:6e:ee:ba:d6:4c:26:ce:1c:12:37:5f:
a9:cc:57:78:f5:fb:79:8d:0f:f1:7c:74:ee:92:0f:
75:3c:dd:11:5e:b8:33:99:26:7d:31:ce:5a:0a:64:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:9F:49:31:4D:AD:7D:DA:44:74:A5:87:2F:0D:35:DF:E6:21:7C
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:bb:6e:25:3f:54:c4:ed:ae:7d:07:a6:40:7c:76:05:97:
57:fd:9b:fa:95:78:40:5e:3d:e8:ee:99:98:5f:c7:88:4b:b5:
1e:34:12:d1:cd:9a:92:15:9e:90:8a:63:18:9a:66:af:a5:0a:
ab:01:27:71:22:6e:9b:ba:0f:2b:ff:4e:b8:c4:c3:bd:9f:47:
13:49:cc:08:b0:7e:28:99:ec:24:81:8e:9f:82:9d:dc:c7:fb:
91:ee:6b:6a:4b:db:7a:d2:5b:c2:59:f0:ca:35:38:f8:20:df:
59:9b:07:18:73:27:6d:88:d9:69:9b:cb:d7:dd:b3:d6:b6:cd:
4a:b6:2a:b3:27:3e:4a:aa:91:32:4a:4f:41:25:c4:c5:1c:4e:
71:30:02:38:5b:ac:ce:69:1b:4c:53:71:a0:1e:a2:71:32:1f:
26:34:9a:09:7d:6c:07:bd:34:4a:ea:fb:a3:c7:3c:fb:70:01:
bf:6b:18:a6:a8:eb:07:75:e2:12:e9:43:be:37:2f:02:ba:38:
fa:ff:84:0d:b6:b2:a0:b5:6d:a2:7f:0d:a9:9f:3e:0b:54:f3:
f9:b2:96:df:31:07:63:fe:73:85:af:d9:17:1c:d0:c6:97:43:
87:2f:1a:9e:86:41:83:d1:2c:87:80:c2:c4:0f:ff:bf:47:55:
27:4b:26:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqDc8qSVJ5kDnYGfVjx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjJmYWUzODBjNWQ0YzFlMjgxODEwYTM0ZGI5ODgzYzlk
OWZmMmYwHhcNMjUwMTMxMTcwMDM0WhcNMjUwMjAxMTcwMDM0WjAzMTEwLwYDVQQD
EyhmOWQ0OWY0OTMxNGRhZDdkZGE0NDc0YTU4NzJmMGQzNWRmZTYyMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmvK+yW7mvqrT+6Meq6ww5FkA88z
OaGDWL+yYTaavr8vU9rnfnLWFsVUhNZdoIgaheheQ84+AP34VaSrQnc7il/BzGvx
7iQPaiuAVvPgx3REBtBI96US4t+0XA/vtQgapRuGnHwFUcHy69kaxfRtZ1Mr+pxQ
Z7VablOGg2y6/nqdoM3epWAbtbTHZr6rarUS41MSqqzzXePkjHQX51ptrAv5tnpf
2CLkZ5cJoAa7X6uoKX0dpAkMFZp1kT/rnhAz+gX0g7VIagke8cXUyVw2qHzbJ/XS
bu661kwmzhwSN1+pzFd49ft5jQ/xfHTukg91PN0RXrgzmSZ9Mc5aCmTbbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnUn0kxTa192kR0pYcvDTXf5iF8MB8GA1UdIwQY
MBaAFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUt
ZmJmMGVkM2Y5MTU3LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUtZmJmMGVkM2Y5MTU3
LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZi7biU/
VMTtrn0HpkB8dgWXV/2b+pV4QF496O6ZmF/HiEu1HjQS0c2akhWekIpjGJpmr6UK
qwEncSJum7oPK/9OuMTDvZ9HE0nMCLB+KJnsJIGOn4Kd3Mf7ke5rakvbetJbwlnw
yjU4+CDfWZsHGHMnbYjZaZvL192z1rbNSrYqsyc+SqqRMkpPQSXExRxOcTACOFus
zmkbTFNxoB6icTIfJjSaCX1sB700Sur7o8c8+3ABv2sYpqjrB3XiEulDvjcvAro4
+v+EDbayoLVton8NqZ8+C1Tz+bKW3zEHY/5zha/ZFxzQxpdDhy8anoZBg9Esh4DC
xA//v0dVJ0smsg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:13 2025 by rpki-client