Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft
File: K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft (raw, json)
Hash identifier: xaLLZsDJRUgswkyw5DJPCPlVjQ1APzO17h7f5C4HcwY=
Subject key identifier: 5E:E6:C7:4C:90:96:FE:91:CE:3D:84:80:EB:0A:03:D6:4D:A4:71:5E
Authority key identifier: 2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
Certificate issuer: /CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Certificate serial: 0194BBCE24F1B564D61BBB018717C90045A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl (hash: BrV+C8WtPXMI5LRSvllzVc+WxFQbmqhfRrnIXk0BZpo=)
2: __TjvsyVvPmib-81OPkONkSc2TU.roa (hash: dbZzWIHzEQMnK8WSDv/NtDIwz0TAz+VHnJMEh9u7RCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:f1:b5:64:d6:1b:bb:01:87:17:c9:00:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=5ee6c74c9096fe91ce3d8480eb0a03d64da4715e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:19:e7:47:79:b8:48:18:22:41:e4:d4:ae:
7b:79:d0:81:90:04:07:38:c4:69:45:72:e0:91:a3:
86:67:ca:a6:58:08:92:5b:b5:7c:f2:2f:4a:a3:c9:
95:69:c5:79:58:0a:e3:2b:8a:cd:77:b7:be:9a:53:
9b:80:6a:90:3b:61:90:85:42:cc:36:49:1a:4b:03:
f5:b9:8f:97:74:d1:36:40:95:00:4a:57:06:29:cf:
84:bc:04:a6:78:e1:52:6f:20:c7:75:db:1e:08:4d:
a9:19:3c:6a:06:75:16:6f:50:03:d8:12:d9:d0:56:
20:4d:06:a3:42:e5:87:5d:50:64:62:1c:44:8d:12:
26:a0:b0:d3:79:a1:09:04:8f:d8:b0:33:e3:9e:8d:
c7:08:b2:60:03:17:a6:be:0d:47:a5:62:5f:f8:31:
02:5b:f1:21:b2:9d:7b:84:c1:41:f2:f0:75:fa:c6:
34:e5:19:6a:54:9f:e6:f3:ae:e1:b7:9e:c1:0f:4a:
3f:90:8e:d2:19:a0:58:aa:34:99:e4:de:08:bb:aa:
ef:06:8b:68:c6:43:b6:24:06:6f:b3:b6:9a:30:c6:
b2:c8:ba:a7:a9:b1:25:f8:b4:d5:61:4c:95:95:ac:
5a:da:4f:57:ae:14:9d:a0:ad:46:32:bc:4f:12:e2:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E6:C7:4C:90:96:FE:91:CE:3D:84:80:EB:0A:03:D6:4D:A4:71:5E
X509v3 Authority Key Identifier:
keyid:2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:28:c0:a2:3f:d4:a9:a1:d9:47:e2:70:31:68:16:28:f4:48:
c4:1f:2e:4b:8b:ba:58:8e:60:e0:d1:f6:7a:df:7c:7e:18:77:
46:55:30:fd:8e:eb:6e:12:17:e2:e7:67:cd:91:df:b5:31:1e:
94:49:69:89:76:fd:44:d7:31:82:c3:10:25:8b:88:11:28:9c:
7e:fd:a5:c8:79:90:1e:db:54:2e:ae:a8:10:a0:7a:c0:10:34:
e1:99:3a:16:1e:70:d8:24:77:0c:dc:b2:4e:d7:67:ab:25:f6:
0c:7a:12:48:51:43:b2:fc:40:8e:c0:e6:a8:02:b7:ff:2b:3c:
4e:64:82:dd:b0:21:f6:46:d4:58:7d:a3:f4:98:62:38:3f:3b:
a1:56:e3:1a:14:b9:ed:40:8f:11:3f:6a:31:f9:35:a3:f0:4e:
7e:76:12:3e:8f:8b:99:33:09:e3:ee:02:59:a2:d8:7c:b6:b5:
bc:11:46:08:ee:09:0b:0f:58:d3:c0:a7:7c:c9:33:00:81:6f:
7f:ed:c5:6f:8c:92:dc:9a:0a:b7:c5:4c:36:b1:06:18:3a:99:
66:3f:3e:14:67:19:0e:4d:5f:ce:62:ad:b7:97:39:9b:3d:cb:
60:a8:a1:5b:e7:5b:f2:53:f0:ca:3d:fe:82:4c:38:c4:79:e8:
7d:c9:6c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziTxtWTWG7sBhxfJAEWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNWRjZWNmMTlkYmE3NTIwOTJiYmMzZDI3OWFjMWNjNGYx
ZTM2MzcwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
Eyg1ZWU2Yzc0YzkwOTZmZTkxY2UzZDg0ODBlYjBhMDNkNjRkYTQ3MTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnsZ50d5uEgYIkHk1K57edCBkAQH
OMRpRXLgkaOGZ8qmWAiSW7V88i9Ko8mVacV5WArjK4rNd7e+mlObgGqQO2GQhULM
NkkaSwP1uY+XdNE2QJUASlcGKc+EvASmeOFSbyDHddseCE2pGTxqBnUWb1AD2BLZ
0FYgTQajQuWHXVBkYhxEjRImoLDTeaEJBI/YsDPjno3HCLJgAxemvg1HpWJf+DEC
W/Ehsp17hMFB8vB1+sY05RlqVJ/m867ht57BD0o/kI7SGaBYqjSZ5N4Iu6rvBoto
xkO2JAZvs7aaMMayyLqnqbEl+LTVYUyVlaxa2k9XrhSdoK1GMrxPEuLLEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7mx0yQlv6Rzj2EgOsKA9ZNpHFeMB8GA1UdIwQY
MBaAFCtdzs8Z26dSCSu8PSeawcxPHjY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzEzT3p4bmJwMUlKSzd3OUo1ckJ6RThlTmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84ODgyMDgtYzc3Zi00NWQ0LWJhZWUt
NzE3YTRlMDBmODU5LzEvSzEzT3p4bmJwMUlKSzd3OUo1ckJ6RThlTmpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy84ODgyMDgtYzc3Zi00NWQ0LWJhZWUtNzE3YTRlMDBmODU5
LzEvSzEzT3p4bmJwMUlKSzd3OUo1ckJ6RThlTmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANijAoj/U
qaHZR+JwMWgWKPRIxB8uS4u6WI5g4NH2et98fhh3RlUw/Y7rbhIX4udnzZHftTEe
lElpiXb9RNcxgsMQJYuIESicfv2lyHmQHttULq6oEKB6wBA04Zk6Fh5w2CR3DNyy
TtdnqyX2DHoSSFFDsvxAjsDmqAK3/ys8TmSC3bAh9kbUWH2j9JhiOD87oVbjGhS5
7UCPET9qMfk1o/BOfnYSPo+LmTMJ4+4CWaLYfLa1vBFGCO4JCw9Y08CnfMkzAIFv
f+3Fb4yS3JoKt8VMNrEGGDqZZj8+FGcZDk1fzmKtt5c5mz3LYKihW+db8lPwyj3+
gkw4xHnofclsDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:46 2025 by rpki-client