Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: pNARGlfaaCNB29+Dg8wUJKMXgM+IlWu231cSnMmpp7s=
Subject key identifier: 98:31:0C:F6:54:9E:A0:59:F4:F8:0F:9E:96:CD:84:98:23:3D:57:1C
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 0195E046E32E706B02B1FD772C09CABEA9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 135C
Signing time: Sat 29 Mar 2025 05:01:36 +0000
Manifest this update: Sat 29 Mar 2025 05:01:36 +0000
Manifest next update: Sun 30 Mar 2025 05:01:36 +0000
Files and hashes: 1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: K63swtH9izRJ+EHMm7i/0Ul3bT5K5cudw0R8Yz54zDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:e3:2e:70:6b:02:b1:fd:77:2c:09:ca:be:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Mar 29 05:01:36 2025 GMT
Not After : Mar 30 05:01:36 2025 GMT
Subject: CN=98310cf6549ea059f4f80f9e96cd8498233d571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:5f:3c:e4:7b:e8:bd:ec:fb:d2:f6:a2:cf:
1c:a9:e4:b3:d8:fe:25:09:8a:fe:da:33:9c:ec:04:
50:8e:c9:01:7b:b5:62:77:9d:a3:05:e3:21:74:a1:
34:72:fc:f0:5c:32:3d:a3:f4:73:ee:5d:42:7c:ec:
69:17:e5:3c:cb:02:c4:92:51:3b:2c:6d:bd:8e:3e:
f1:b7:2c:1b:1d:19:bc:8b:77:fe:8b:67:02:53:1b:
52:95:04:5f:05:eb:a5:b7:75:c1:03:13:04:cc:65:
ad:85:2d:6a:69:a2:7c:2c:73:0f:f9:4e:6a:a9:d1:
46:d1:6e:63:fd:5a:ed:79:62:25:dc:0a:98:c9:7e:
ea:db:56:a3:39:c1:7a:42:ab:63:5e:7f:1c:54:fb:
f1:7d:7e:61:22:fe:2a:a2:fd:b1:4b:16:41:65:9d:
2c:40:40:fe:85:a2:0a:c4:03:b6:35:cc:0d:3a:92:
e6:ca:ec:7f:40:f2:74:44:2d:1b:57:16:75:83:9e:
a0:ac:02:1e:ba:93:6c:73:1a:c5:82:d6:06:f9:d8:
90:4b:2b:c4:41:0b:07:95:99:01:ca:1c:c5:6d:fd:
a1:79:b4:e1:5b:da:2c:cf:93:b5:75:41:57:e1:0d:
2d:90:e4:0b:34:66:8b:95:eb:73:32:43:37:87:29:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:0C:F6:54:9E:A0:59:F4:F8:0F:9E:96:CD:84:98:23:3D:57:1C
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:80:d7:79:4f:5c:bf:a1:4c:46:f9:36:08:2e:2a:26:3b:86:
eb:86:dc:3c:9f:70:34:10:d9:e1:36:87:b7:76:b7:c5:3a:0f:
c9:a6:46:a1:07:a6:fe:8f:00:06:19:e1:16:ad:29:9f:12:2d:
e4:7b:cb:ae:7a:70:26:69:b2:c2:e9:da:f0:c1:06:8e:0d:70:
f8:15:38:25:78:7e:5c:23:79:d9:9c:66:3f:ba:cc:72:4d:ba:
5d:4a:3e:68:54:82:94:7c:cf:c9:ec:81:1d:9e:31:48:13:bf:
b1:df:89:1f:f3:1c:12:11:85:24:42:dc:9c:fd:06:3d:21:6e:
f3:23:e1:db:f8:fa:2a:f1:7b:46:58:f9:25:59:ef:ee:c3:af:
18:8b:b7:e4:5c:19:c9:61:df:dd:77:2c:74:d0:3e:10:05:3b:
bc:3a:b0:6c:f2:21:bf:ba:2b:39:73:60:99:50:42:4c:31:33:
6f:d1:c3:59:3b:ae:d1:7b:e5:66:c4:37:63:06:1d:93:0f:4c:
34:5d:ec:2a:ee:e3:ad:c4:9f:a1:71:3c:73:2d:92:4c:34:84:
0b:93:e9:1e:0b:67:8b:db:37:6d:e9:e7:c2:51:09:5c:f6:79:
69:01:8c:0e:04:7d:dd:6c:b9:a7:bd:fe:68:0a:b0:10:df:08:
a2:a7:d1:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRuMucGsCsf13LAnKvqmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGI3ZDFlNmU3MmQ1NWM4ZDFjNGEzZTgyNDFkNzFkY2Y4
ZTNiZjEwHhcNMjUwMzI5MDUwMTM2WhcNMjUwMzMwMDUwMTM2WjAzMTEwLwYDVQQD
Eyg5ODMxMGNmNjU0OWVhMDU5ZjRmODBmOWU5NmNkODQ5ODIzM2Q1NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8ZfPOR76L3s+9L2os8cqeSz2P4l
CYr+2jOc7ARQjskBe7Vid52jBeMhdKE0cvzwXDI9o/Rz7l1CfOxpF+U8ywLEklE7
LG29jj7xtywbHRm8i3f+i2cCUxtSlQRfBeult3XBAxMEzGWthS1qaaJ8LHMP+U5q
qdFG0W5j/VrteWIl3AqYyX7q21ajOcF6QqtjXn8cVPvxfX5hIv4qov2xSxZBZZ0s
QED+haIKxAO2NcwNOpLmyux/QPJ0RC0bVxZ1g56grAIeupNscxrFgtYG+diQSyvE
QQsHlZkByhzFbf2hebThW9osz5O1dUFX4Q0tkOQLNGaLletzMkM3hyn8fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgxDPZUnqBZ9PgPnpbNhJgjPVccMB8GA1UdIwQY
MBaAFJFLfR5uctVcjRxKPoJB1x3PjjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQt
YWJlZDc0NDE1YjhmLzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQtYWJlZDc0NDE1Yjhm
LzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIDXeU9c
v6FMRvk2CC4qJjuG64bcPJ9wNBDZ4TaHt3a3xToPyaZGoQem/o8ABhnhFq0pnxIt
5HvLrnpwJmmywuna8MEGjg1w+BU4JXh+XCN52ZxmP7rMck26XUo+aFSClHzPyeyB
HZ4xSBO/sd+JH/McEhGFJELcnP0GPSFu8yPh2/j6KvF7Rlj5JVnv7sOvGIu35FwZ
yWHf3XcsdNA+EAU7vDqwbPIhv7orOXNgmVBCTDEzb9HDWTuu0XvlZsQ3YwYdkw9M
NF3sKu7jrcSfoXE8cy2STDSEC5PpHgtni9s3bennwlEJXPZ5aQGMDgR93Wy5p73+
aAqwEN8IoqfRcw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:37:51 2025 by rpki-client