Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: eTJoadgK9XySNY4cLJ1AI29eBsRMqjQTWyOH0sLxDxw=
Subject key identifier: 8E:C3:8C:97:75:85:17:16:99:99:9F:EE:20:A7:43:F3:2B:47:9C:CB
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 0194BD17A3BFCDF01512A008CA3022056420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 03EF
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: Myd15gMrCliz6UcSUIWdQJsW6Z0.roa (hash: KNSAanuPg0NI3AJP/E/C6OAIqMKQEnFg1+ec0Jx1Kuo=)
2: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: c0ydCAEMhfznTO8O0iEZcNGtz7RiPlCyjEzP7ojjDqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a3:bf:cd:f0:15:12:a0:08:ca:30:22:05:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=8ec38c977585171699999fee20a743f32b479ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:92:bd:fc:04:19:88:58:cb:8b:b5:45:4d:
d7:5e:66:0f:a6:4a:09:43:99:f4:1a:11:f8:68:28:
97:86:9f:72:91:08:59:bd:ea:a6:74:e4:24:c0:f9:
e1:c8:b5:d1:38:5f:38:88:79:96:4a:32:34:6a:63:
47:70:cf:c1:38:38:e3:ab:aa:81:fe:57:08:eb:b4:
3d:09:ff:16:b2:ab:a8:4d:c0:3a:79:0c:4f:cc:4d:
7b:2d:25:31:e5:f6:6d:de:6d:17:a6:c5:a8:f9:bd:
e5:42:06:24:ca:d3:40:71:38:98:0e:85:1b:de:99:
4e:e5:2c:fb:74:1d:ae:af:37:3b:e1:8a:19:ff:34:
50:68:db:a7:aa:40:df:0e:6c:ac:83:c8:e3:24:5a:
b4:1e:63:59:67:32:df:7f:0c:a6:8b:60:5b:d1:2e:
a2:56:bd:9d:e1:e6:a3:f0:66:d5:66:a0:e6:5b:72:
63:3d:94:57:aa:28:30:ba:c1:33:df:8a:a4:ab:0d:
f6:63:32:19:53:d0:6d:94:85:9c:e3:c5:25:f8:30:
b3:13:27:30:da:5c:f8:e4:03:33:0e:d4:69:5c:c2:
49:21:18:61:2b:91:31:3a:f8:62:a4:43:fc:fe:5f:
76:23:9f:04:46:96:d4:cd:77:ef:e4:5f:dd:3e:4e:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:8C:97:75:85:17:16:99:99:9F:EE:20:A7:43:F3:2B:47:9C:CB
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:1e:4f:10:f4:f7:a9:72:2c:bd:47:9d:77:0e:c6:c7:a5:
d9:14:3a:d9:94:df:eb:33:23:29:24:5d:bc:24:d8:77:91:e6:
a9:20:16:88:46:72:1d:9f:91:c4:a7:36:b4:66:ae:da:89:1d:
b9:68:df:f6:ac:99:d7:35:eb:a3:cf:8c:0b:48:2b:9d:5b:6a:
d3:8a:9a:26:02:9f:a8:66:8c:a8:8a:cd:2b:c3:af:bf:e7:d8:
2c:62:ee:c3:bd:e5:fb:7f:25:0a:7b:1b:1f:07:62:57:46:d0:
89:29:d1:3e:2a:c5:8b:9f:75:83:39:b1:64:c6:98:b8:2a:b7:
f9:d2:6b:81:ab:c1:9a:22:95:3b:65:2b:18:ec:79:ba:86:3e:
b6:f4:f4:89:66:d6:30:13:23:d2:2c:00:2d:26:3a:12:ba:20:
b3:74:5d:2b:c2:c3:15:5f:24:44:7a:77:04:7c:57:18:0e:8b:
7b:03:18:99:ef:a5:71:86:89:a8:a3:d3:05:70:04:77:2b:43:
2e:2a:e1:fc:29:4d:23:5e:71:5a:e8:75:db:db:b3:55:70:df:
f6:b2:6d:86:b2:b5:b1:4c:e1:8d:7e:df:af:d7:6a:94:5a:2b:
d4:30:f0:79:62:46:58:6c:d4:de:80:d0:c4:15:cc:0e:ac:99:
87:f2:28:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6O/zfAVEqAIyjAiBWQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh
M2ZjNDQwHhcNMjUwMTMxMTYwMDMwWhcNMjUwMjAxMTYwMDMwWjAzMTEwLwYDVQQD
Eyg4ZWMzOGM5Nzc1ODUxNzE2OTk5OTlmZWUyMGE3NDNmMzJiNDc5Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9uSvfwEGYhYy4u1RU3XXmYPpkoJ
Q5n0GhH4aCiXhp9ykQhZveqmdOQkwPnhyLXROF84iHmWSjI0amNHcM/BODjjq6qB
/lcI67Q9Cf8WsquoTcA6eQxPzE17LSUx5fZt3m0XpsWo+b3lQgYkytNAcTiYDoUb
3plO5Sz7dB2urzc74YoZ/zRQaNunqkDfDmysg8jjJFq0HmNZZzLffwymi2Bb0S6i
Vr2d4eaj8GbVZqDmW3JjPZRXqigwusEz34qkqw32YzIZU9BtlIWc48Ul+DCzEycw
2lz45AMzDtRpXMJJIRhhK5ExOvhipEP8/l92I58ERpbUzXfv5F/dPk4xUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7DjJd1hRcWmZmf7iCnQ/MrR5zLMB8GA1UdIwQY
MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt
NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy
LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodEeTxD0
96lyLL1HnXcOxsel2RQ62ZTf6zMjKSRdvCTYd5HmqSAWiEZyHZ+RxKc2tGau2okd
uWjf9qyZ1zXro8+MC0grnVtq04qaJgKfqGaMqIrNK8Ovv+fYLGLuw73l+38lCnsb
HwdiV0bQiSnRPirFi591gzmxZMaYuCq3+dJrgavBmiKVO2UrGOx5uoY+tvT0iWbW
MBMj0iwALSY6Erogs3RdK8LDFV8kRHp3BHxXGA6LewMYme+lcYaJqKPTBXAEdytD
Lirh/ClNI15xWuh129uzVXDf9rJthrK1sUzhjX7fr9dqlFor1DDweWJGWGzU3oDQ
xBXMDqyZh/IoZA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:11 2025 by rpki-client