Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
File: kNsAB0OFNxZs8-WWltskCpQSvvE.mft (raw, json)
Hash identifier: 2AZHPi8Cvpqa684LVq+YqSVB8QSeI3fVUOjRzSXlB+E=
Subject key identifier: 23:8D:66:63:B0:4D:5E:9B:C9:FA:1F:2B:F4:D3:07:FB:BF:55:B1:7E
Authority key identifier: 90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1
Certificate issuer: /CN=90db0007438537166cf3e59696db240a9412bef1
Certificate serial: 019232ED51994BECDC79128997CB56A9C841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
Manifest number: 0A7A
Signing time: Fri 27 Sep 2024 10:01:06 +0000
Manifest this update: Fri 27 Sep 2024 10:01:06 +0000
Manifest next update: Sat 28 Sep 2024 10:01:06 +0000
Files and hashes: 1: EZ-uG791xT4_kyLh71Y9NKol9es.roa (hash: gxp65J5FxS0gwZJopWnRREKK5kAEfnh3NLZ6wRpIigA=)
2: kNsAB0OFNxZs8-WWltskCpQSvvE.crl (hash: mqWZc5bd3+nFi6fpydLwr4hFuYIdU1oZzskW9Pg4aps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:ed:51:99:4b:ec:dc:79:12:89:97:cb:56:a9:c8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90db0007438537166cf3e59696db240a9412bef1
Validity
Not Before: Sep 27 10:01:06 2024 GMT
Not After : Sep 28 10:01:06 2024 GMT
Subject: CN=238d6663b04d5e9bc9fa1f2bf4d307fbbf55b17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:93:ee:31:aa:1c:e2:e5:2d:5c:3f:57:c9:
6d:a3:4c:2c:8c:21:a9:4e:61:5c:a7:9c:08:77:60:
8e:d6:3c:90:1d:01:1d:98:20:97:ad:07:07:f5:7e:
50:2a:c8:d6:c4:10:e7:fa:b8:4f:dd:1b:58:e4:1c:
a2:e6:3b:89:82:52:7a:3a:0b:ef:6e:7d:1d:d0:4c:
53:fb:70:10:83:b2:a7:7c:21:4d:6d:76:63:c8:4f:
a2:8a:8e:d8:d7:ef:06:90:45:b6:1b:0f:1c:db:8b:
e9:bf:d1:fb:d9:0f:4d:91:df:5f:06:41:e2:f7:6e:
28:70:d4:5e:80:69:8d:70:1c:0d:3f:e4:f7:46:83:
16:1c:8e:f7:a8:01:52:9f:9a:19:11:61:a4:cd:6e:
8e:1b:a2:fb:7d:93:bc:23:8d:5f:40:78:91:69:29:
ee:95:0a:f4:47:a5:ae:2b:d4:f3:7e:7a:fa:8c:de:
8c:6e:c6:67:4a:5c:b0:a0:ec:41:2f:e0:71:ae:a8:
e6:da:6f:df:69:36:75:20:63:8f:d5:25:f2:50:a7:
5b:81:42:76:99:0a:50:65:a2:cd:db:19:cf:2f:5d:
12:3d:28:b2:1e:95:1a:11:7f:21:b9:47:ae:03:01:
9f:b9:27:4b:4f:87:00:25:c1:ab:1b:6c:d0:d6:ac:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8D:66:63:B0:4D:5E:9B:C9:FA:1F:2B:F4:D3:07:FB:BF:55:B1:7E
X509v3 Authority Key Identifier:
keyid:90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:7a:b1:f5:cc:6d:a4:d8:f8:a3:ea:17:ad:5b:0d:41:ad:
21:c3:8d:eb:68:8b:cd:8b:a9:ff:db:48:d7:55:13:13:6b:58:
68:4e:02:58:78:7a:06:f2:91:1a:f1:fa:54:16:9a:00:1c:39:
e2:86:27:90:c4:51:b1:74:f5:fb:d0:73:a5:25:95:02:2b:25:
d5:7d:89:cf:da:fc:2a:20:12:1e:e4:4e:a4:18:0d:ec:6e:f2:
bc:72:ed:4b:07:00:4c:e0:b6:38:28:0c:07:f7:88:03:fe:d0:
f1:a5:66:87:82:7b:ec:1b:4e:b0:95:d4:d4:ae:57:38:1b:05:
6d:76:bd:05:eb:e1:ef:fc:40:d8:c3:ce:26:37:2d:7a:6c:7d:
7d:fa:a7:28:3d:9c:19:35:79:90:61:6f:1d:64:fb:b0:78:dc:
f4:20:0a:4d:2d:d1:6b:30:40:8c:38:d1:0f:96:85:c1:c1:d0:
52:1b:ce:39:43:55:f2:54:a4:59:dc:15:9a:af:e5:de:a5:c7:
d1:b8:fc:36:31:f0:6f:6f:cd:21:c1:7e:99:72:88:92:6b:d3:
41:5e:07:f5:b7:74:7c:c2:c1:3f:4e:29:95:8a:d8:bd:7c:9d:
8e:e7:ea:95:b6:3e:51:e5:d1:9b:ec:2c:5d:10:cc:63:66:19:
e5:c7:0a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIy7VGZS+zceRKJl8tWqchBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZGIwMDA3NDM4NTM3MTY2Y2YzZTU5Njk2ZGIyNDBhOTQx
MmJlZjEwHhcNMjQwOTI3MTAwMTA2WhcNMjQwOTI4MTAwMTA2WjAzMTEwLwYDVQQD
EygyMzhkNjY2M2IwNGQ1ZTliYzlmYTFmMmJmNGQzMDdmYmJmNTViMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsuT7jGqHOLlLVw/V8lto0wsjCGp
TmFcp5wId2CO1jyQHQEdmCCXrQcH9X5QKsjWxBDn+rhP3RtY5Byi5juJglJ6Ogvv
bn0d0ExT+3AQg7KnfCFNbXZjyE+iio7Y1+8GkEW2Gw8c24vpv9H72Q9Nkd9fBkHi
924ocNRegGmNcBwNP+T3RoMWHI73qAFSn5oZEWGkzW6OG6L7fZO8I41fQHiRaSnu
lQr0R6WuK9Tzfnr6jN6MbsZnSlywoOxBL+Bxrqjm2m/faTZ1IGOP1SXyUKdbgUJ2
mQpQZaLN2xnPL10SPSiyHpUaEX8huUeuAwGfuSdLT4cAJcGrG2zQ1qzWLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCONZmOwTV6byfofK/TTB/u/VbF+MB8GA1UdIwQY
MBaAFJDbAAdDhTcWbPPllpbbJAqUEr7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05zQUIwT0ZOeFpzOC1XV2x0c2tDcFFTdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjZjMjgtODg2MC00M2RkLWI4NmEt
NmM0YzczYmZlNjE2LzEva05zQUIwT0ZOeFpzOC1XV2x0c2tDcFFTdnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kZjZjMjgtODg2MC00M2RkLWI4NmEtNmM0YzczYmZlNjE2
LzEva05zQUIwT0ZOeFpzOC1XV2x0c2tDcFFTdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMs16sfXM
baTY+KPqF61bDUGtIcON62iLzYup/9tI11UTE2tYaE4CWHh6BvKRGvH6VBaaABw5
4oYnkMRRsXT1+9BzpSWVAisl1X2Jz9r8KiASHuROpBgN7G7yvHLtSwcATOC2OCgM
B/eIA/7Q8aVmh4J77BtOsJXU1K5XOBsFbXa9Bevh7/xA2MPOJjctemx9ffqnKD2c
GTV5kGFvHWT7sHjc9CAKTS3RazBAjDjRD5aFwcHQUhvOOUNV8lSkWdwVmq/l3qXH
0bj8NjHwb2/NIcF+mXKIkmvTQV4H9bd0fMLBP04plYrYvXydjufqlbY+UeXRm+ws
XRDMY2YZ5ccKpg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:10 2025 by rpki-client