Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: /LgecU3anMCNJ4lptXRu136bDo0g6qEBfuHi14ySygQ=
Subject key identifier: BD:B4:28:9E:56:8B:E9:11:E4:E2:CC:44:C3:DE:74:CF:A4:B1:53:38
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 0194BD17A21C235AB00B798425A7822669F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: Wl4n4wgedXsZX2jMR8Zbn8Cro5a7uMx6phqpZqosPzE=)
3: LlPeYcU2dy-3SXumX9DEWZNt5hI.roa (hash: j0PkMGVwrFlS+qNvQe2n82M3uELkpS90A9lvkwyKKqs=)
4: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a2:1c:23:5a:b0:0b:79:84:25:a7:82:26:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=bdb4289e568be911e4e2cc44c3de74cfa4b15338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:85:62:5f:3d:62:78:f8:87:b4:3a:3e:62:
61:18:52:2e:56:0b:d1:ad:fc:64:cf:71:59:20:95:
e2:85:96:a8:9b:1c:4b:3d:e7:4a:9c:05:f1:5b:a2:
85:9d:79:6a:22:73:19:9c:60:a9:23:46:ac:14:f6:
bc:e7:0f:42:54:12:dd:3a:5f:23:d3:c2:9b:cf:79:
9e:91:0a:0b:62:8e:08:01:78:4c:38:ad:e4:38:f6:
e2:ff:4d:61:e0:32:15:2c:df:eb:90:44:75:d3:d2:
e0:03:c5:a2:ad:8c:ca:03:e9:00:a6:da:c7:23:e3:
25:b3:57:0a:8b:83:cf:dc:68:09:75:d3:89:4a:6f:
f0:b3:7a:75:0c:ba:29:3a:08:f8:78:e0:71:df:95:
54:49:01:25:36:b5:45:40:29:2d:6c:42:1c:7f:b6:
51:72:99:cf:bc:22:e8:26:b6:d7:63:bf:ed:fd:48:
30:8d:ee:b0:79:8f:64:3c:ce:7d:2c:4d:ef:e1:c0:
f4:05:e0:42:bf:63:97:37:03:c9:e7:94:3f:4e:d3:
ea:43:34:3b:9f:d2:03:77:24:a2:fd:0b:f6:7e:c7:
ba:30:42:fb:67:d0:02:d1:68:41:3e:08:f0:24:4e:
a2:2f:3f:a2:13:56:94:99:d4:b5:eb:ad:52:1f:8c:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:28:9E:56:8B:E9:11:E4:E2:CC:44:C3:DE:74:CF:A4:B1:53:38
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:18:64:1b:1e:d2:09:7c:86:2e:7a:35:07:16:30:b2:ab:27:
09:e9:c5:f7:3d:8c:47:24:66:1b:51:ed:75:5c:3a:31:c4:6d:
0b:5b:87:b6:23:fa:96:2d:cd:4b:40:71:db:ae:07:97:d7:6c:
96:14:d9:1d:6a:af:fd:9c:da:b6:66:7c:ac:05:a3:a4:44:a1:
29:47:6d:fc:62:0c:53:87:d8:58:0a:92:57:53:2a:68:74:da:
1c:9b:a0:0d:b9:cf:24:5b:4c:72:0c:6c:f0:ec:21:97:0f:33:
f2:3f:67:f2:84:c6:ff:79:f7:e8:0c:5e:d7:72:8c:66:c5:e8:
e1:73:fe:30:ce:36:e0:7e:53:49:ac:3a:ca:d9:23:19:08:65:
a5:52:5d:54:18:2c:0e:2e:12:5c:d6:b3:08:7e:24:04:7d:e2:
74:46:25:2b:da:a0:f1:17:68:57:66:f6:dc:d7:70:81:eb:f4:
ad:b2:ba:33:83:c1:06:55:63:35:8a:ad:e7:58:3c:d3:b0:10:
be:2c:4e:fa:9e:ad:2d:7c:70:47:79:7e:20:f8:42:f6:fc:2b:
ba:40:2c:1f:f9:1b:ef:be:35:17:4a:f6:3b:83:d7:fd:54:d5:
df:0a:03:a4:b7:ec:40:d0:85:d3:1a:d8:5a:1d:be:f7:6f:78:
b7:01:e5:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6IcI1qwC3mEJaeCJmn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz
MWY1ZjEwHhcNMjUwMTMxMTYwMDMwWhcNMjUwMjAxMTYwMDMwWjAzMTEwLwYDVQQD
EyhiZGI0Mjg5ZTU2OGJlOTExZTRlMmNjNDRjM2RlNzRjZmE0YjE1MzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslaFYl89Ynj4h7Q6PmJhGFIuVgvR
rfxkz3FZIJXihZaomxxLPedKnAXxW6KFnXlqInMZnGCpI0asFPa85w9CVBLdOl8j
08Kbz3mekQoLYo4IAXhMOK3kOPbi/01h4DIVLN/rkER109LgA8WirYzKA+kAptrH
I+Mls1cKi4PP3GgJddOJSm/ws3p1DLopOgj4eOBx35VUSQElNrVFQCktbEIcf7ZR
cpnPvCLoJrbXY7/t/Ugwje6weY9kPM59LE3v4cD0BeBCv2OXNwPJ55Q/TtPqQzQ7
n9IDdySi/Qv2fse6MEL7Z9AC0WhBPgjwJE6iLz+iE1aUmdS1661SH4wFAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL20KJ5Wi+kR5OLMRMPedM+ksVM4MB8GA1UdIwQY
MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt
Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3
LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxhkGx7S
CXyGLno1BxYwsqsnCenF9z2MRyRmG1HtdVw6McRtC1uHtiP6li3NS0Bx264Hl9ds
lhTZHWqv/ZzatmZ8rAWjpEShKUdt/GIMU4fYWAqSV1MqaHTaHJugDbnPJFtMcgxs
8Owhlw8z8j9n8oTG/3n36Axe13KMZsXo4XP+MM424H5TSaw6ytkjGQhlpVJdVBgs
Di4SXNazCH4kBH3idEYlK9qg8RdoV2b23Ndwgev0rbK6M4PBBlVjNYqt51g807AQ
vixO+p6tLXxwR3l+IPhC9vwrukAsH/kb7741F0r2O4PX/VTV3woDpLfsQNCF0xrY
Wh2+9294twHl9w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:55 2025 by rpki-client