Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: 132vQrvBuG2SX0tcjvvqiN3ZOYpMbEBmqahOW3O5rJ4=
Subject key identifier: 00:66:5D:92:57:0E:B3:09:81:92:53:45:9E:09:B0:6E:5A:E7:A6:3E
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 0194BC3C87BE87F3D0B0DDE294BB0B4CDA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 094D
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: gh0051VphlxtRsRZYmYdp9fcz+qMLZ/3//CxLl920Gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:be:87:f3:d0:b0:dd:e2:94:bb:0b:4c:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=00665d92570eb309819253459e09b06e5ae7a63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:57:9e:b2:36:0e:93:df:f2:8a:70:51:ea:
99:15:67:fc:ed:25:88:5c:ba:4b:7a:5a:ba:e7:42:
49:cf:52:ec:eb:1e:30:d9:f0:51:dd:0c:3a:5a:57:
e6:85:35:9f:d9:fe:43:92:79:61:be:9e:a4:08:c8:
96:20:66:c8:83:5f:b8:79:93:98:8d:dd:06:2c:70:
b4:53:80:c5:a7:34:74:43:33:8e:18:fa:35:bb:6f:
bb:9d:6b:2d:1d:01:f6:fb:35:ab:3d:bd:c4:ea:27:
b7:7b:56:67:72:9a:c6:8e:f1:6d:23:8c:e7:f7:f1:
e7:fd:89:ac:b5:22:39:ef:1b:00:8e:c6:dc:1d:22:
90:35:1a:d9:1f:4b:2e:20:3f:fc:9e:59:6d:5c:d3:
64:05:65:b5:10:8c:18:24:e0:65:6e:d3:c3:39:a4:
e0:48:98:b8:0a:0b:de:2c:73:78:d1:99:9a:cb:5e:
3f:a5:b8:08:89:ab:b3:2a:15:d3:4e:ed:11:cb:28:
6a:91:f3:48:d6:94:a4:64:74:c9:ab:a2:1c:8f:26:
cc:09:6b:b0:3b:56:ef:b0:12:9b:be:55:2c:ce:86:
58:0f:26:25:2d:e5:a3:83:44:d0:a1:da:d6:da:01:
85:4e:bf:56:0e:6a:a4:e2:02:b8:47:1b:f0:fd:85:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:5D:92:57:0E:B3:09:81:92:53:45:9E:09:B0:6E:5A:E7:A6:3E
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3f:f9:0e:3e:cf:e3:3a:5b:38:a6:40:31:f8:d4:2c:a4:bb:
61:b3:36:01:c2:ee:03:03:7b:e4:32:15:c3:21:4b:ce:86:92:
ca:3c:44:8e:8f:cb:c6:6e:b6:1b:92:f2:24:9b:3a:82:04:bd:
30:45:4c:c3:2c:02:95:37:1e:74:8b:11:6a:3f:d3:3a:df:52:
bf:97:26:fb:c9:09:c6:fc:d4:ac:8d:84:e2:6f:fc:be:ed:9d:
0d:e7:c8:6f:ed:6c:dc:d8:1e:59:e8:ae:5e:fb:33:4c:db:0d:
2a:3f:55:19:7a:7a:22:82:1f:ae:c9:d2:83:90:75:df:f3:a2:
24:84:72:80:98:9d:bf:58:8d:45:30:d1:6f:a7:3f:3f:92:84:
ce:d7:5e:86:14:f8:43:a5:3c:c3:d5:62:45:ea:fb:e4:08:4d:
77:fb:e7:0d:95:a2:f1:24:6c:9b:d4:c8:c8:bb:7f:33:c5:af:
92:fc:c1:7c:7d:ac:f8:8c:c2:8b:34:9a:3d:be:c4:3c:6c:f9:
83:f1:2f:fb:c8:b8:f4:a3:ee:e8:eb:da:d8:59:b7:06:02:46:
36:c9:d1:40:75:46:1c:98:26:7c:f4:ec:54:41:88:1c:f2:20:
78:e3:6f:8c:76:7d:d7:ae:0f:e5:b9:88:9a:ee:04:75:67:3e:
da:71:ad:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIe+h/PQsN3ilLsLTNo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjQyNmY0ODNjMzZhYWNkYTg3MzIzMjRhYjg4YWQ1ODAw
YzlhMmQwHhcNMjUwMTMxMTIwMTEwWhcNMjUwMjAxMTIwMTEwWjAzMTEwLwYDVQQD
EygwMDY2NWQ5MjU3MGViMzA5ODE5MjUzNDU5ZTA5YjA2ZTVhZTdhNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYpXnrI2DpPf8opwUeqZFWf87SWI
XLpLelq650JJz1Ls6x4w2fBR3Qw6WlfmhTWf2f5Dknlhvp6kCMiWIGbIg1+4eZOY
jd0GLHC0U4DFpzR0QzOOGPo1u2+7nWstHQH2+zWrPb3E6ie3e1ZncprGjvFtI4zn
9/Hn/YmstSI57xsAjsbcHSKQNRrZH0suID/8nlltXNNkBWW1EIwYJOBlbtPDOaTg
SJi4CgveLHN40Zmay14/pbgIiauzKhXTTu0RyyhqkfNI1pSkZHTJq6IcjybMCWuw
O1bvsBKbvlUszoZYDyYlLeWjg0TQodrW2gGFTr9WDmqk4gK4Rxvw/YXflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABmXZJXDrMJgZJTRZ4JsG5a56Y+MB8GA1UdIwQY
MBaAFJBkJvSDw2qs2ocyMkq4itWADJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEt
OTRjNWFkMTdhN2EwLzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEtOTRjNWFkMTdhN2Ew
LzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT/5Dj7P
4zpbOKZAMfjULKS7YbM2AcLuAwN75DIVwyFLzoaSyjxEjo/Lxm62G5LyJJs6ggS9
MEVMwywClTcedIsRaj/TOt9Sv5cm+8kJxvzUrI2E4m/8vu2dDefIb+1s3NgeWeiu
XvszTNsNKj9VGXp6IoIfrsnSg5B13/OiJIRygJidv1iNRTDRb6c/P5KEztdehhT4
Q6U8w9ViRer75AhNd/vnDZWi8SRsm9TIyLt/M8WvkvzBfH2s+IzCizSaPb7EPGz5
g/Ev+8i49KPu6Ova2Fm3BgJGNsnRQHVGHJgmfPTsVEGIHPIgeONvjHZ9164P5bmI
mu4EdWc+2nGtgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:52 2025 by rpki-client