Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier: F04skyPtTkM9sdV93CVN667FR4/CcW5GgUu5yPf3Bmk=
Subject key identifier: AC:43:1F:AF:B5:B9:E5:CF:DA:CB:EF:55:D7:B1:13:B7:3A:26:4B:14
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 0194BCF82531296E032FD5435E71D0A984B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number: 0261
Signing time: Fri 31 Jan 2025 15:26:06 +0000
Manifest this update: Fri 31 Jan 2025 15:26:06 +0000
Manifest next update: Sat 01 Feb 2025 15:26:06 +0000
Files and hashes: 1: Vps2Z7E6r-9RnhsQq17nUqjlHKU.roa (hash: Bxt61Cuh8X05++ilIvc7K2XmfltxSsDX0051Sfymips=)
2: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
3: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: 8Zui+Qlr9idltR4F7eVdDoUmURhRJgv7jUy7Od2mDmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:f8:25:31:29:6e:03:2f:d5:43:5e:71:d0:a9:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Jan 31 15:26:06 2025 GMT
Not After : Feb 1 15:26:06 2025 GMT
Subject: CN=ac431fafb5b9e5cfdacbef55d7b113b73a264b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:c0:bf:a3:af:00:d3:5c:27:8e:7f:59:8c:
2a:ed:79:e8:5d:1d:4c:65:4a:c1:db:87:bf:78:da:
34:47:c5:f4:87:ed:a6:5e:c0:1e:f6:00:8a:56:2e:
5a:f6:73:f4:8a:9f:83:db:2e:bb:da:78:4e:70:c1:
75:21:74:fe:78:cb:2f:57:6b:5c:c6:08:fe:37:62:
a6:d8:ac:c8:47:08:de:e5:bc:16:9c:b0:73:55:0d:
e0:d7:0c:92:d5:11:40:d1:b3:84:36:84:6d:cf:53:
bf:fb:b9:69:6a:3e:57:f8:aa:81:50:2a:ea:3f:e8:
03:e9:c0:89:7d:33:19:33:93:5e:b6:80:45:c9:db:
34:26:ce:21:2b:7a:99:0f:9d:7a:77:0e:54:98:bd:
8e:5e:5f:65:5c:4b:5d:82:eb:13:59:80:a1:bd:32:
30:dd:ed:40:6c:b7:49:b1:8c:03:1b:d2:0b:a7:97:
f5:6a:92:5f:31:3c:53:e4:c4:73:d0:6f:59:a0:8b:
46:e8:81:68:8d:a2:d5:e9:37:81:aa:dc:aa:68:dc:
94:6e:34:7c:8c:84:1f:56:bd:30:1d:f7:10:e4:78:
63:72:10:44:11:d5:a3:6e:c5:bb:79:0d:1c:83:4a:
a1:37:f9:91:08:33:13:c7:38:0e:9c:f3:2e:b2:b8:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:1F:AF:B5:B9:E5:CF:DA:CB:EF:55:D7:B1:13:B7:3A:26:4B:14
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:21:c9:83:8e:8c:d6:ee:37:41:6c:a2:bd:26:c8:78:6b:f8:
7d:7f:60:58:93:78:3f:9f:f1:b3:6a:3d:ff:52:0f:88:ff:74:
e1:93:74:f3:c1:3f:66:59:a0:98:02:c3:55:8a:9e:4a:3f:9c:
33:a9:c7:b2:13:90:75:eb:1e:95:b4:56:fb:83:03:4b:a9:36:
81:a6:ad:74:9e:17:e1:57:e5:d3:97:0f:83:91:38:1c:82:f9:
25:4f:12:f5:be:e5:ac:34:c2:bc:ce:67:fb:12:56:5a:6b:8b:
6b:d6:fd:3a:60:8a:25:d7:b5:aa:c4:ee:6e:2b:66:f0:ee:c1:
08:c3:7c:ef:76:30:b9:32:e9:58:b4:26:36:4e:6c:23:eb:5c:
a9:3d:43:ab:c9:b2:89:24:5a:35:0a:75:97:79:d5:7f:84:dd:
e4:d6:5e:e9:fe:bf:20:0b:5b:41:32:a8:9d:57:14:c6:5e:27:
96:0f:da:40:0c:a1:d7:bb:2d:8c:f0:1a:2d:0d:1d:22:a7:17:
38:2b:5b:db:7d:32:6c:ae:bb:66:34:bb:35:f8:82:d9:ad:f7:
30:a6:2b:6d:60:81:f5:0d:a0:fc:28:44:de:33:72:52:a9:12:
e0:55:9d:08:01:97:87:cd:ed:24:20:b0:68:3c:ce:de:23:1c:
44:fc:d5:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8+CUxKW4DL9VDXnHQqYSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2
NTI4YmMwHhcNMjUwMTMxMTUyNjA2WhcNMjUwMjAxMTUyNjA2WjAzMTEwLwYDVQQD
EyhhYzQzMWZhZmI1YjllNWNmZGFjYmVmNTVkN2IxMTNiNzNhMjY0YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6TAv6OvANNcJ45/WYwq7XnoXR1M
ZUrB24e/eNo0R8X0h+2mXsAe9gCKVi5a9nP0ip+D2y672nhOcMF1IXT+eMsvV2tc
xgj+N2Km2KzIRwje5bwWnLBzVQ3g1wyS1RFA0bOENoRtz1O/+7lpaj5X+KqBUCrq
P+gD6cCJfTMZM5NetoBFyds0Js4hK3qZD516dw5UmL2OXl9lXEtdgusTWYChvTIw
3e1AbLdJsYwDG9ILp5f1apJfMTxT5MRz0G9ZoItG6IFojaLV6TeBqtyqaNyUbjR8
jIQfVr0wHfcQ5HhjchBEEdWjbsW7eQ0cg0qhN/mRCDMTxzgOnPMusriFtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxDH6+1ueXP2svvVdexE7c6JksUMB8GA1UdIwQY
MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt
YTRkNDEzZDdmODljLzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj
LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyHJg46M
1u43QWyivSbIeGv4fX9gWJN4P5/xs2o9/1IPiP904ZN088E/ZlmgmALDVYqeSj+c
M6nHshOQdeselbRW+4MDS6k2gaatdJ4X4Vfl05cPg5E4HIL5JU8S9b7lrDTCvM5n
+xJWWmuLa9b9OmCKJde1qsTubitm8O7BCMN873YwuTLpWLQmNk5sI+tcqT1Dq8my
iSRaNQp1l3nVf4Td5NZe6f6/IAtbQTKonVcUxl4nlg/aQAyh17stjPAaLQ0dIqcX
OCtb230ybK67ZjS7NfiC2a33MKYrbWCB9Q2g/ChE3jNyUqkS4FWdCAGXh83tJCCw
aDzO3iMcRPzV/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:43 2025 by rpki-client