Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: ukPksMjr+qrfdAO3atdp3KWPcI5tMAiJFRDJkq797Ms=
Subject key identifier: A2:05:3D:06:4A:94:50:01:48:7C:FC:92:EE:02:D0:CD:55:B0:3A:FC
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0195E1597BF92710CF8FAFB17CAB04B40323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 14C7
Signing time: Sat 29 Mar 2025 10:01:32 +0000
Manifest this update: Sat 29 Mar 2025 10:01:32 +0000
Manifest next update: Sun 30 Mar 2025 10:01:32 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: VpwwrxrdCLWMbru8AnOmc6R2N8U4jvqSgrAgzZXsN9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:7b:f9:27:10:cf:8f:af:b1:7c:ab:04:b4:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Mar 29 10:01:32 2025 GMT
Not After : Mar 30 10:01:32 2025 GMT
Subject: CN=a2053d064a945001487cfc92ee02d0cd55b03afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:9e:22:6e:66:88:f2:d1:0d:94:c3:d9:4d:
cd:6c:41:49:32:f0:3c:ea:64:cd:71:06:fe:d0:62:
8d:65:fa:e7:62:b2:99:fe:2c:e3:a1:d3:09:e7:70:
1b:c4:e6:77:da:ab:62:9b:84:14:18:d7:f6:30:fb:
4d:25:bb:d4:dc:da:b7:6c:1c:37:3a:6f:b3:92:ed:
fa:7b:e1:7f:55:cc:b7:24:03:39:45:02:0e:44:13:
d6:7a:f7:9d:66:3c:22:c0:95:50:07:85:1c:45:5d:
51:4b:82:aa:cb:32:5a:50:df:c2:24:29:d9:95:fb:
87:2c:70:d9:f9:ec:e9:5c:7c:b1:39:f6:21:6c:8b:
76:a4:c7:95:d1:5d:88:54:74:cf:5f:b5:31:40:16:
eb:27:58:cd:16:b1:5a:14:20:9d:ee:36:66:e9:21:
da:36:15:a7:4f:a1:76:18:56:82:bc:b9:50:b2:89:
ea:ac:13:c1:c9:c1:a4:90:51:1d:45:28:a5:5d:09:
cf:9b:4d:56:37:e5:f8:c0:1c:be:96:d9:0a:ed:ce:
3f:8d:37:0d:cd:60:42:37:87:dc:45:35:cd:a6:5f:
0f:32:5d:f2:7c:00:9a:05:6c:cc:ae:6f:a8:6b:5b:
8a:99:e9:b5:6a:82:d0:63:f9:05:ef:66:79:1f:6f:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:05:3D:06:4A:94:50:01:48:7C:FC:92:EE:02:D0:CD:55:B0:3A:FC
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fd:b7:35:87:db:41:fc:10:87:ac:f5:d7:e4:f9:49:74:8e:
1a:5e:cf:52:c1:9d:84:ae:a8:88:ca:6d:41:de:40:a9:0d:ad:
81:53:97:05:ce:72:6c:4f:fd:41:80:94:0d:7a:00:4c:70:65:
22:be:bc:8e:70:96:29:00:59:cb:99:5f:b3:23:70:33:b3:01:
85:6f:2c:65:3d:3d:b3:1c:9c:f6:a5:06:4d:a5:1c:aa:b4:aa:
54:ed:9e:75:17:41:3f:1c:a3:77:0b:17:89:23:9b:36:25:89:
02:0a:56:01:46:5f:ed:ea:b7:71:6d:e8:52:ea:1d:21:af:bb:
98:16:d8:13:cb:81:d3:f3:68:e1:ca:4b:e9:d1:45:6a:7e:5f:
b4:8e:88:33:fa:74:bf:7d:de:23:07:af:dd:87:11:66:2b:0e:
65:80:8c:9a:5a:16:13:13:6d:a6:13:c6:0e:7c:53:2b:6c:67:
df:37:75:8a:2f:34:ca:17:90:de:64:62:4c:91:a6:18:92:38:
03:09:1c:fc:00:99:1e:a4:17:cd:21:2e:ba:e3:b3:1a:02:4f:
c2:77:1a:ee:09:bc:7b:a4:b6:df:cc:bd:ae:98:1d:a9:55:9e:
e1:09:30:7f:54:f5:cc:be:af:7b:bd:3b:39:50:23:3f:52:7d:
73:98:47:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWXv5JxDPj6+xfKsEtAMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh
NDljYzcwHhcNMjUwMzI5MTAwMTMyWhcNMjUwMzMwMTAwMTMyWjAzMTEwLwYDVQQD
EyhhMjA1M2QwNjRhOTQ1MDAxNDg3Y2ZjOTJlZTAyZDBjZDU1YjAzYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HOeIm5miPLRDZTD2U3NbEFJMvA8
6mTNcQb+0GKNZfrnYrKZ/izjodMJ53AbxOZ32qtim4QUGNf2MPtNJbvU3Nq3bBw3
Om+zku36e+F/Vcy3JAM5RQIORBPWevedZjwiwJVQB4UcRV1RS4KqyzJaUN/CJCnZ
lfuHLHDZ+ezpXHyxOfYhbIt2pMeV0V2IVHTPX7UxQBbrJ1jNFrFaFCCd7jZm6SHa
NhWnT6F2GFaCvLlQsonqrBPBycGkkFEdRSilXQnPm01WN+X4wBy+ltkK7c4/jTcN
zWBCN4fcRTXNpl8PMl3yfACaBWzMrm+oa1uKmem1aoLQY/kF72Z5H28wJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIFPQZKlFABSHz8ku4C0M1VsDr8MB8GA1UdIwQY
MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt
YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl
LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv23NYfb
QfwQh6z11+T5SXSOGl7PUsGdhK6oiMptQd5AqQ2tgVOXBc5ybE/9QYCUDXoATHBl
Ir68jnCWKQBZy5lfsyNwM7MBhW8sZT09sxyc9qUGTaUcqrSqVO2edRdBPxyjdwsX
iSObNiWJAgpWAUZf7eq3cW3oUuodIa+7mBbYE8uB0/No4cpL6dFFan5ftI6IM/p0
v33eIwev3YcRZisOZYCMmloWExNtphPGDnxTK2xn3zd1ii80yheQ3mRiTJGmGJI4
Awkc/ACZHqQXzSEuuuOzGgJPwnca7gm8e6S238y9rpgdqVWe4Qkwf1T1zL6ve707
OVAjP1J9c5hHdQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:39:44 2025 by rpki-client