Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: tWnVKcSO2t3sTQ8/kUsCxVSkZIlMqdLSBk5IK3oEhFA=
Subject key identifier: 80:18:60:1F:E1:5A:14:4F:21:67:C8:64:E4:6D:00:B4:53:06:CD:29
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 0194BD17E81190CDE49AE23E8BB3AE55A120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 080A
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: sz3fQ1VscfYgmmzry+hMO72AnOpHfdf9aI8lh391HBk=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:11:90:cd:e4:9a:e2:3e:8b:b3:ae:55:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=8018601fe15a144f2167c864e46d00b45306cd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:9d:87:b2:28:a7:35:4b:74:f3:47:6b:13:
ef:a9:29:be:80:90:49:ad:bb:35:a8:67:69:e6:80:
a2:6d:ad:7d:e4:bb:45:b0:89:b5:c2:be:61:46:dd:
e3:ef:f2:7e:54:5a:2e:af:1d:da:d8:00:a8:03:19:
6c:3c:e8:7a:ef:69:20:19:12:03:12:16:53:90:10:
cc:da:8e:b5:68:f8:eb:2e:bf:43:1d:b0:44:e7:e6:
33:44:63:6e:05:a2:9f:d8:f0:29:03:14:42:ad:be:
e3:4f:cd:f9:e8:c7:cd:57:d3:34:87:2f:83:94:1f:
be:1c:6c:cf:91:47:d3:76:00:30:1d:da:64:52:b4:
83:4b:b6:c1:22:ba:05:12:06:73:8c:b1:e5:3b:70:
f7:d3:de:6b:1c:e9:40:9a:a5:8e:de:dd:a0:15:71:
15:0d:7e:82:4b:1e:c9:bd:ac:d4:51:03:1a:aa:43:
91:33:ae:3b:33:d2:a4:94:cc:a7:7f:97:0f:b3:5f:
c9:04:44:33:a9:8b:29:2a:aa:f1:b2:77:ef:50:72:
d1:68:5f:29:a8:34:56:fb:83:a8:36:90:7d:1c:9e:
e4:47:41:36:eb:5a:f8:b3:47:60:30:2d:d8:c4:3f:
6a:8b:5b:51:1c:f8:74:37:39:54:90:11:9f:a9:8b:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:18:60:1F:E1:5A:14:4F:21:67:C8:64:E4:6D:00:B4:53:06:CD:29
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7f:96:48:1c:1e:35:2f:cb:6d:c7:01:ef:ce:e2:46:77:7c:
b0:f4:21:e6:d3:5e:ea:24:07:dc:50:07:26:46:f4:4e:fd:52:
d6:58:bc:11:cc:ac:f3:82:0e:2a:cf:61:1e:31:43:5e:6f:00:
70:80:f1:2c:a2:06:b0:7c:17:e5:df:2a:59:d0:c9:b8:7f:be:
05:d8:11:ca:6f:81:1d:9b:f0:ce:72:66:7c:fa:84:5f:32:89:
a7:7f:1d:42:c7:f0:9a:90:8f:17:da:84:ff:71:36:43:89:5e:
06:42:b3:3f:8b:fb:de:41:22:98:a1:b8:96:46:be:86:29:5b:
aa:b4:6a:8d:eb:6e:12:eb:57:23:b7:a9:76:56:3b:3f:2f:c8:
b2:54:df:ac:c6:7d:87:24:b7:36:0e:af:86:16:2a:20:40:83:
68:74:0e:eb:91:f2:86:59:10:d5:45:50:a2:f9:47:bc:0f:7d:
08:d3:9d:76:0f:a7:92:23:99:80:6b:be:ce:b1:d8:9e:2f:1a:
a4:b4:ad:e4:1d:07:48:29:16:a9:29:1d:79:b0:fb:68:93:14:
70:4f:bf:15:31:7e:0c:c1:58:02:d1:60:87:09:cf:ca:f6:36:
0f:d8:da:6a:59:32:4e:6c:d2:60:db:61:1a:d0:68:cd:a9:61:
fb:ad:3a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+gRkM3kmuI+i7OuVaEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTkyZWJiODNlYjhiNzNhMmEyMWU1YjAzM2RiZGViMWRm
NGYyM2QwHhcNMjUwMTMxMTYwMDQ3WhcNMjUwMjAxMTYwMDQ3WjAzMTEwLwYDVQQD
Eyg4MDE4NjAxZmUxNWExNDRmMjE2N2M4NjRlNDZkMDBiNDUzMDZjZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2idh7IopzVLdPNHaxPvqSm+gJBJ
rbs1qGdp5oCiba195LtFsIm1wr5hRt3j7/J+VFourx3a2ACoAxlsPOh672kgGRID
EhZTkBDM2o61aPjrLr9DHbBE5+YzRGNuBaKf2PApAxRCrb7jT8356MfNV9M0hy+D
lB++HGzPkUfTdgAwHdpkUrSDS7bBIroFEgZzjLHlO3D3095rHOlAmqWO3t2gFXEV
DX6CSx7JvazUUQMaqkORM647M9KklMynf5cPs1/JBEQzqYspKqrxsnfvUHLRaF8p
qDRW+4OoNpB9HJ7kR0E261r4s0dgMC3YxD9qi1tRHPh0NzlUkBGfqYuE7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAYYB/hWhRPIWfIZORtALRTBs0pMB8GA1UdIwQY
MBaAFCiZLruD64tzoqIeWwM9vesd9PI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgt
YjM2YjhlODkyYzZjLzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOThkY2UtOTkyZC00ZjY0LWJjMzgtYjM2YjhlODkyYzZj
LzEvS0prdXU0UHJpM09pb2g1YkF6Mjk2eDMwOGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArX+WSBwe
NS/LbccB787iRnd8sPQh5tNe6iQH3FAHJkb0Tv1S1li8Ecys84IOKs9hHjFDXm8A
cIDxLKIGsHwX5d8qWdDJuH++BdgRym+BHZvwznJmfPqEXzKJp38dQsfwmpCPF9qE
/3E2Q4leBkKzP4v73kEimKG4lka+hilbqrRqjetuEutXI7epdlY7Py/IslTfrMZ9
hyS3Ng6vhhYqIECDaHQO65HyhlkQ1UVQovlHvA99CNOddg+nkiOZgGu+zrHYni8a
pLSt5B0HSCkWqSkdebD7aJMUcE+/FTF+DMFYAtFghwnPyvY2D9jaalkyTmzSYNth
GtBozalh+606oA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:43 2025 by rpki-client