Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: K83Yvil5XU91mfNzwVTXzZZh0zybsJbskitczNHnrW0=
Subject key identifier: A9:2B:58:A1:5B:2C:70:1D:5D:70:39:C5:86:7B:9A:BE:3B:E0:C2:F4
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 0195E15A0221C26E0BF07882FAE7E0E462C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0A63
Signing time: Sat 29 Mar 2025 10:02:07 +0000
Manifest this update: Sat 29 Mar 2025 10:02:07 +0000
Manifest next update: Sun 30 Mar 2025 10:02:07 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: dwokvEWJOLRL/cVAAf67G45u4iSkI+UzmU8VLje7Kas=)
3: hBprFDZElX2sHj2Kaw0JJ0jN9Ro.roa (hash: 2JG09FHe5eSpxaJ9idEhdaHS+yUplvNwc1d04eIKBko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:02:21:c2:6e:0b:f0:78:82:fa:e7:e0:e4:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Mar 29 10:02:07 2025 GMT
Not After : Mar 30 10:02:07 2025 GMT
Subject: CN=a92b58a15b2c701d5d7039c5867b9abe3be0c2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:01:e4:b9:8e:d8:38:49:c8:0a:62:d4:3d:
b8:36:db:66:9f:a0:36:e6:c5:85:1f:fc:64:0b:48:
24:19:24:1e:9c:82:3a:1b:12:97:ce:8b:12:d4:ac:
32:51:28:ec:25:f4:a1:94:0e:ef:a1:0e:98:93:e1:
55:ab:26:48:6c:06:23:85:57:36:8b:21:d5:5c:e2:
1c:08:90:fc:26:b6:87:47:d6:d9:b9:c0:61:ec:52:
85:17:24:b4:07:3c:20:58:db:d8:51:ee:f0:d6:8f:
82:94:c4:1a:cb:26:c9:0a:d0:4e:a5:0f:5d:2a:ac:
e1:e6:07:85:20:f3:b6:ec:20:43:06:c5:b3:07:34:
90:22:49:43:8a:23:b8:cb:6e:56:c4:74:2c:66:56:
09:1f:81:6c:1f:72:25:15:6b:36:43:19:24:3d:6c:
56:e4:3f:21:b2:21:e7:b9:58:f8:2d:c3:b0:ae:74:
00:5d:a1:5b:d3:d0:93:5f:78:22:44:c9:b9:4c:b6:
33:a9:20:3c:4d:87:4a:57:bf:af:bc:ab:14:46:df:
de:50:db:d9:bf:ef:11:22:68:97:bc:96:90:66:a7:
42:47:35:17:23:5f:0c:c3:55:7a:ef:bd:e6:29:f9:
f0:e6:5d:c2:72:e3:dc:38:8e:84:e8:77:a1:e7:49:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:58:A1:5B:2C:70:1D:5D:70:39:C5:86:7B:9A:BE:3B:E0:C2:F4
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:26:6e:47:2f:51:71:2d:ff:82:e9:5b:9a:62:a9:34:a9:
b0:01:ea:46:e8:69:58:06:96:c5:53:1b:cd:90:51:28:c3:2a:
09:5e:8a:99:d9:e7:90:97:56:f9:8a:34:f8:2c:6b:76:51:0e:
a6:15:94:ac:28:19:30:3b:ae:58:ce:55:ea:ab:b7:6e:6d:a1:
77:fc:ff:92:e9:c2:96:ff:8c:e8:6a:7c:04:b3:8a:5f:35:35:
28:cb:68:ff:ff:66:e2:49:49:2b:33:06:e2:94:1a:9f:22:75:
16:fc:d8:fe:02:28:62:6d:02:dc:1c:e1:f1:89:51:77:a2:52:
68:a6:6d:e9:dd:78:d8:33:f3:7a:7f:12:a9:ad:71:29:a9:96:
e4:d8:31:5f:a2:d0:ec:1a:f8:e3:4a:9c:4b:da:49:00:e8:18:
4e:8a:eb:5d:93:14:e1:19:e1:62:6d:e2:15:7b:98:83:e7:05:
ab:ec:8a:aa:8b:07:d9:f7:3a:bf:b1:0c:31:bb:1d:19:d7:af:
03:7c:c8:0c:fb:7e:2d:d4:8c:fa:92:84:8a:3b:77:eb:e8:5f:
0b:5c:30:3c:1a:98:33:87:a6:5d:d5:74:8f:6e:0c:ec:ba:da:
7b:87:63:2b:ec:b3:b2:0a:1e:fb:47:a9:94:f9:f6:0e:4f:28:
7a:e2:19:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWgIhwm4L8HiC+ufg5GLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0
NGJmNDYwHhcNMjUwMzI5MTAwMjA3WhcNMjUwMzMwMTAwMjA3WjAzMTEwLwYDVQQD
EyhhOTJiNThhMTViMmM3MDFkNWQ3MDM5YzU4NjdiOWFiZTNiZTBjMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXAB5LmO2DhJyApi1D24Nttmn6A2
5sWFH/xkC0gkGSQenII6GxKXzosS1KwyUSjsJfShlA7voQ6Yk+FVqyZIbAYjhVc2
iyHVXOIcCJD8JraHR9bZucBh7FKFFyS0BzwgWNvYUe7w1o+ClMQayybJCtBOpQ9d
Kqzh5geFIPO27CBDBsWzBzSQIklDiiO4y25WxHQsZlYJH4FsH3IlFWs2QxkkPWxW
5D8hsiHnuVj4LcOwrnQAXaFb09CTX3giRMm5TLYzqSA8TYdKV7+vvKsURt/eUNvZ
v+8RImiXvJaQZqdCRzUXI18Mw1V6773mKfnw5l3CcuPcOI6E6Heh50ntzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkrWKFbLHAdXXA5xYZ7mr474ML0MB8GA1UdIwQY
MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt
MTM3MTA5MzY5NjIxLzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx
LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9Imbkcv
UXEt/4LpW5piqTSpsAHqRuhpWAaWxVMbzZBRKMMqCV6KmdnnkJdW+Yo0+CxrdlEO
phWUrCgZMDuuWM5V6qu3bm2hd/z/kunClv+M6Gp8BLOKXzU1KMto//9m4klJKzMG
4pQanyJ1FvzY/gIoYm0C3Bzh8YlRd6JSaKZt6d142DPzen8Sqa1xKamW5NgxX6LQ
7Br440qcS9pJAOgYTorrXZMU4RnhYm3iFXuYg+cFq+yKqosH2fc6v7EMMbsdGdev
A3zIDPt+LdSM+pKEijt36+hfC1wwPBqYM4emXdV0j24M7Lrae4djK+yzsgoe+0ep
lPn2Dk8oeuIZGw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:47 2025 by rpki-client