Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: OBQUYsfx4EZfKVXKQHIuRHh1iXwoM+lmbEr3vMjsSIU=
Subject key identifier: C9:FA:02:68:4E:B4:01:63:F9:CC:8A:EA:7D:1E:01:19:93:A1:0F:E5
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0195E0467344CE82E33FA1D71F7D635D03F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 05:01:08 +0000
Manifest this update: Sat 29 Mar 2025 05:01:08 +0000
Manifest next update: Sun 30 Mar 2025 05:01:08 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: n6NwfikPSbefSyjF/VsQswyogc80DSJkdit5rhaLk9k=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:73:44:ce:82:e3:3f:a1:d7:1f:7d:63:5d:03:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Mar 29 05:01:08 2025 GMT
Not After : Mar 30 05:01:08 2025 GMT
Subject: CN=c9fa02684eb40163f9cc8aea7d1e011993a10fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:f9:0d:e0:9a:1b:f9:c0:99:69:37:66:5a:
42:d8:09:1c:01:f5:15:8b:89:a9:42:a4:53:19:d6:
24:b2:fc:a7:09:64:7a:8e:55:f4:24:7c:e1:dd:b6:
bb:2d:28:13:94:39:71:bf:bf:6b:a4:f6:88:c1:fc:
a8:e4:ca:8e:ee:1e:96:67:66:63:a3:f4:c5:55:9d:
2c:a8:4f:c6:bb:dc:19:6d:8b:71:cc:45:54:02:81:
9f:ff:e4:31:18:3c:74:65:8c:aa:04:6e:f7:f9:a0:
41:de:04:24:c4:24:15:74:73:a6:e9:fa:21:19:2d:
97:0e:10:d1:79:d9:38:1f:2a:36:a4:1b:8d:b5:5c:
87:98:0c:bc:36:0e:05:c6:76:26:fc:e5:e4:aa:5f:
39:c5:99:6d:d6:31:e1:ed:37:7c:48:ec:a8:eb:db:
96:99:50:73:30:ef:ca:ab:bb:af:99:3f:00:b7:aa:
a9:2b:e1:eb:40:ca:d2:bf:1a:0d:8b:de:bc:0e:8e:
0f:79:4c:cc:08:98:1f:6e:7c:2d:fe:09:96:45:61:
62:e8:ae:45:ef:91:60:6d:89:0b:28:9a:d1:8e:19:
70:a5:cb:7a:06:85:7f:33:af:3a:6d:74:93:a4:80:
2d:c8:26:36:cc:8b:b8:a6:78:9b:98:73:4f:44:e5:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FA:02:68:4E:B4:01:63:F9:CC:8A:EA:7D:1E:01:19:93:A1:0F:E5
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d1:e3:52:50:97:a3:83:3e:f1:b7:38:93:71:91:a7:f8:e2:
63:c2:e0:f4:d5:ff:e5:a5:5b:af:c6:cd:9e:54:21:79:b4:f2:
73:ff:6e:2b:70:05:b7:c4:05:49:0f:43:c1:50:f8:1c:4f:30:
a4:2c:66:69:b0:3b:02:11:eb:e6:10:c1:2a:79:ef:97:b6:4a:
8b:23:5d:87:16:89:20:c8:f6:c3:c2:0e:6d:33:e8:58:97:7a:
ab:2c:1e:a6:e0:ec:8d:5a:84:c9:fd:71:8d:8e:2a:71:2d:95:
36:dd:0d:cc:85:78:86:eb:61:77:99:08:12:60:29:2c:eb:c2:
28:d6:ec:a6:d6:bc:a9:9d:72:0d:44:fd:53:54:5c:bb:0f:af:
b9:50:8b:81:25:38:9f:65:51:60:90:80:50:71:c4:49:b1:5f:
51:8f:53:6a:51:9d:b1:b3:24:49:2e:f3:e6:63:8a:c7:55:54:
4c:70:c4:f3:54:cb:76:d8:33:9f:09:91:db:43:7f:67:5f:2c:
a1:31:f0:b0:63:e3:a6:b8:fa:a7:d3:22:47:20:3d:32:2a:08:
4c:95:c0:b8:b7:78:48:a0:01:c7:65:46:b2:89:33:ba:48:1b:
b2:40:86:6a:92:3b:d8:cb:f0:3b:5b:18:f3:57:71:9c:a9:7e:
2c:21:42:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRnNEzoLjP6HXH31jXQPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy
YzczMmYwHhcNMjUwMzI5MDUwMTA4WhcNMjUwMzMwMDUwMTA4WjAzMTEwLwYDVQQD
EyhjOWZhMDI2ODRlYjQwMTYzZjljYzhhZWE3ZDFlMDExOTkzYTEwZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8/5DeCaG/nAmWk3ZlpC2AkcAfUV
i4mpQqRTGdYksvynCWR6jlX0JHzh3ba7LSgTlDlxv79rpPaIwfyo5MqO7h6WZ2Zj
o/TFVZ0sqE/Gu9wZbYtxzEVUAoGf/+QxGDx0ZYyqBG73+aBB3gQkxCQVdHOm6foh
GS2XDhDRedk4Hyo2pBuNtVyHmAy8Ng4FxnYm/OXkql85xZlt1jHh7Td8SOyo69uW
mVBzMO/Kq7uvmT8At6qpK+HrQMrSvxoNi968Do4PeUzMCJgfbnwt/gmWRWFi6K5F
75FgbYkLKJrRjhlwpct6BoV/M686bXSTpIAtyCY2zIu4pnibmHNPROVZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn6AmhOtAFj+cyK6n0eARmToQ/lMB8GA1UdIwQY
MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt
ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm
LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtHjUlCX
o4M+8bc4k3GRp/jiY8Lg9NX/5aVbr8bNnlQhebTyc/9uK3AFt8QFSQ9DwVD4HE8w
pCxmabA7AhHr5hDBKnnvl7ZKiyNdhxaJIMj2w8IObTPoWJd6qywepuDsjVqEyf1x
jY4qcS2VNt0NzIV4huthd5kIEmApLOvCKNbspta8qZ1yDUT9U1Rcuw+vuVCLgSU4
n2VRYJCAUHHESbFfUY9TalGdsbMkSS7z5mOKx1VUTHDE81TLdtgznwmR20N/Z18s
oTHwsGPjprj6p9MiRyA9MioITJXAuLd4SKABx2VGsokzukgbskCGapI72MvwO1sY
81dxnKl+LCFCtQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:39 2025 by rpki-client