Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
File: K33FrWYAWqG23GCT-xHzWBp5UzU.mft (raw, json)
Hash identifier: bhPskenW0qGX6AOh/xqfAWQi1fxjnRqLfAXSQSGnOBs=
Subject key identifier: 1C:E1:83:30:42:C8:46:94:97:E5:94:61:AC:1E:8C:D4:66:82:42:B4
Authority key identifier: 2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35
Certificate issuer: /CN=2b7dc5ad66005aa1b6dc6093fb11f3581a795335
Certificate serial: 0194BD17AD019B058FDCE41A14F175E90311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
Manifest number: 0774
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: K33FrWYAWqG23GCT-xHzWBp5UzU.crl (hash: cGvM3Hd1ggh/PFRTVNc52y42FfGL9voVrdo4hLOrAtE=)
2: bAAmYgSXJxW7DuOUs2kynICa5oQ.roa (hash: RwPSxGBIhdwvIJE2F5CHSeY9R8DODbrp6TJgxLwH+vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:01:9b:05:8f:dc:e4:1a:14:f1:75:e9:03:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7dc5ad66005aa1b6dc6093fb11f3581a795335
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=1ce1833042c8469497e59461ac1e8cd4668242b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:fd:26:a7:fd:56:8b:32:08:63:ae:de:e7:
6c:e7:4d:ff:54:cf:14:b5:d9:98:c1:82:0a:50:04:
19:80:f0:f1:e9:37:9e:8c:c9:96:c0:c5:33:e9:9f:
92:a4:c6:b6:08:88:db:be:d0:5e:d4:9d:9d:5a:4a:
7a:7c:59:ae:18:a9:58:e1:db:23:33:7d:a6:7f:6f:
27:d7:e9:72:96:1e:2f:eb:84:fe:9e:44:34:38:77:
e7:a9:fc:44:49:56:47:be:76:2b:a3:12:9e:62:d8:
61:f1:a2:c1:ac:ac:4a:d7:80:95:3e:65:09:98:a0:
7e:ec:78:11:f3:f2:f8:57:93:45:f5:75:9e:dc:bd:
1c:a3:b4:9d:5f:19:c1:f0:9c:55:9f:01:20:a8:66:
79:52:91:5e:e9:52:30:3d:ef:87:81:79:3c:b4:a9:
13:b2:8d:26:e8:7e:a5:c0:2a:49:40:11:d8:a3:6b:
e7:6a:b3:8a:62:e0:4b:c6:9b:9f:25:06:a5:49:ed:
6b:f0:cf:38:8b:8f:af:fd:90:4e:45:4a:ee:25:49:
87:6a:75:4a:93:2f:ce:f4:b8:a7:fb:2d:9e:0d:f6:
82:14:f6:74:c8:90:b7:14:e3:f6:a9:13:1e:89:e3:
30:b8:f6:f2:c9:96:9d:9c:87:3e:87:cf:b5:36:55:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E1:83:30:42:C8:46:94:97:E5:94:61:AC:1E:8C:D4:66:82:42:B4
X509v3 Authority Key Identifier:
keyid:2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c2:53:a9:b2:a7:18:1b:6a:9f:a3:39:b7:55:4b:26:7f:4e:
76:c5:d7:1c:ef:e4:4d:b1:81:10:f3:6f:9c:4f:92:35:5e:c4:
78:30:f5:95:1b:21:68:14:db:e1:b0:4c:b3:81:e5:62:8f:17:
93:b8:b5:83:94:bd:bb:bf:26:8f:64:99:0d:97:b9:03:a9:20:
69:c1:d9:0f:cf:73:c6:88:48:b5:ad:43:4d:1b:6c:8e:76:7e:
51:86:37:a9:76:a0:b3:ac:e4:3c:9b:61:15:3d:9d:45:de:37:
5a:76:fa:fd:98:7f:69:ec:cc:25:f8:a7:39:1b:8c:e8:bf:7e:
c7:5f:61:62:26:00:d1:f7:12:83:c4:31:57:6c:62:db:da:2b:
54:5b:1d:0e:97:4e:a8:32:34:97:15:b7:8d:c3:8f:4a:44:20:
de:13:73:f0:e4:a6:d2:10:e3:44:7d:83:17:04:dc:8d:55:df:
5a:4f:24:c4:ff:15:1f:fd:13:16:02:a1:97:7e:06:83:27:6e:
f7:95:f1:b1:6e:e4:b4:ab:fc:bf:61:69:13:ef:29:5e:65:ea:
2d:ca:1a:98:3f:4a:94:3b:1e:e7:93:77:70:e4:cb:01:6c:6d:
19:b2:d9:0c:b8:85:d7:b9:25:74:8e:69:cf:52:f0:4a:73:b7:
41:e1:11:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F60BmwWP3OQaFPF16QMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiN2RjNWFkNjYwMDVhYTFiNmRjNjA5M2ZiMTFmMzU4MWE3
OTUzMzUwHhcNMjUwMTMxMTYwMDMyWhcNMjUwMjAxMTYwMDMyWjAzMTEwLwYDVQQD
EygxY2UxODMzMDQyYzg0Njk0OTdlNTk0NjFhYzFlOGNkNDY2ODI0MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlL9Jqf9VosyCGOu3uds503/VM8U
tdmYwYIKUAQZgPDx6TeejMmWwMUz6Z+SpMa2CIjbvtBe1J2dWkp6fFmuGKlY4dsj
M32mf28n1+lylh4v64T+nkQ0OHfnqfxESVZHvnYroxKeYthh8aLBrKxK14CVPmUJ
mKB+7HgR8/L4V5NF9XWe3L0co7SdXxnB8JxVnwEgqGZ5UpFe6VIwPe+HgXk8tKkT
so0m6H6lwCpJQBHYo2vnarOKYuBLxpufJQalSe1r8M84i4+v/ZBORUruJUmHanVK
ky/O9Lin+y2eDfaCFPZ0yJC3FOP2qRMeieMwuPbyyZadnIc+h8+1NlUEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzhgzBCyEaUl+WUYawejNRmgkK0MB8GA1UdIwQY
MBaAFCt9xa1mAFqhttxgk/sR81gaeVM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzMzRnJXWUFXcUcyM0dDVC14SHpXQnA1VXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wNjg5YWItZDhlNC00YTRlLTg3OTMt
NDgxZDA3NWU2MmMzLzEvSzMzRnJXWUFXcUcyM0dDVC14SHpXQnA1VXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wNjg5YWItZDhlNC00YTRlLTg3OTMtNDgxZDA3NWU2MmMz
LzEvSzMzRnJXWUFXcUcyM0dDVC14SHpXQnA1VXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcJTqbKn
GBtqn6M5t1VLJn9OdsXXHO/kTbGBEPNvnE+SNV7EeDD1lRshaBTb4bBMs4HlYo8X
k7i1g5S9u78mj2SZDZe5A6kgacHZD89zxohIta1DTRtsjnZ+UYY3qXags6zkPJth
FT2dRd43Wnb6/Zh/aezMJfinORuM6L9+x19hYiYA0fcSg8QxV2xi29orVFsdDpdO
qDI0lxW3jcOPSkQg3hNz8OSm0hDjRH2DFwTcjVXfWk8kxP8VH/0TFgKhl34Ggydu
95XxsW7ktKv8v2FpE+8pXmXqLcoamD9KlDse55N3cOTLAWxtGbLZDLiF17kldI5p
z1LwSnO3QeERPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:03 2025 by rpki-client