Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: xmf2W+iDVSb+HcQ4rcb+RpqsencWtHFZo7K+iK496BA=
Subject key identifier: 91:8B:87:91:2A:69:5F:14:A9:62:11:EF:52:52:C8:CC:B1:BA:01:DB
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 0194BD180FAB5CD8FCEE5C0BD5DB81DD2DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 05D2
Signing time: Fri 31 Jan 2025 16:00:58 +0000
Manifest this update: Fri 31 Jan 2025 16:00:58 +0000
Manifest next update: Sat 01 Feb 2025 16:00:58 +0000
Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: jKPoU+uzRpmk/TlU3VpvKHUn6syazcUsj/imoQssgJ8=)
2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:0f:ab:5c:d8:fc:ee:5c:0b:d5:db:81:dd:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Jan 31 16:00:58 2025 GMT
Not After : Feb 1 16:00:58 2025 GMT
Subject: CN=918b87912a695f14a96211ef5252c8ccb1ba01db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:93:27:32:d3:69:fa:9f:12:e4:05:2b:8c:
3b:48:23:c8:f6:7f:77:4d:ff:d4:72:f8:36:9c:50:
86:51:fb:b4:22:45:52:cf:57:38:21:3e:54:d7:e1:
fc:8a:48:c1:e0:70:b7:d1:48:54:4b:6b:23:af:28:
f8:b0:6e:20:e5:bd:d7:f9:69:76:62:ab:a7:b3:d0:
d1:f9:da:6c:0d:13:67:4e:c9:47:08:e4:c6:45:c5:
29:26:47:4a:a7:17:a7:a6:82:dc:d4:6c:57:df:ea:
44:23:3e:92:62:bf:6e:7e:a9:16:01:d4:96:d2:a4:
ec:c1:ac:ac:cf:7d:55:6a:be:3e:b3:47:a2:8d:63:
56:ea:e7:15:89:f8:35:72:a9:ca:d1:75:fe:31:2c:
b6:a0:da:b6:cd:dc:97:d6:f7:3a:f6:73:42:a5:23:
24:07:d4:b5:b8:58:fa:6f:e4:16:64:18:5e:cf:aa:
e9:3a:21:94:d2:bd:9a:ac:4a:1a:6d:a6:1b:9c:11:
6e:a9:d1:cc:d7:c7:21:b3:dc:12:cf:a9:0a:3e:f0:
3b:2f:f6:56:2d:22:b7:1b:24:0b:27:5b:57:2d:f8:
cf:20:50:54:b2:6c:13:16:0e:ec:01:23:38:e5:ee:
16:88:7a:bb:17:9e:cf:91:f2:3a:b3:1b:a3:52:d8:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8B:87:91:2A:69:5F:14:A9:62:11:EF:52:52:C8:CC:B1:BA:01:DB
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:6b:e0:fc:fe:1d:09:8e:f1:2f:5c:88:3a:d7:b8:6c:77:
8c:99:e1:fb:4e:f9:e9:57:fd:d4:ed:60:36:40:ae:69:b9:16:
5c:73:01:59:83:b4:db:73:45:80:50:e4:34:c6:05:6e:be:fd:
66:e0:a2:78:ee:9d:ae:b1:a2:5c:75:79:cf:3e:90:18:3e:ad:
ff:36:46:cc:4f:27:db:a7:c9:8d:3a:0e:b5:da:bc:0e:12:a7:
28:fa:e2:66:53:ff:eb:3a:cd:df:96:78:8d:78:e9:16:e4:6e:
96:a1:09:d5:b0:f1:5e:8e:5a:75:95:0e:54:5a:51:3a:31:29:
6a:5a:b5:44:28:fd:98:2e:a8:13:e6:b5:bf:eb:34:65:ea:38:
64:18:10:17:fe:65:72:66:e1:05:44:fe:97:b7:35:86:8c:26:
91:89:8d:1c:1f:ec:63:bf:b9:ce:9c:cd:99:6f:5c:53:57:a7:
4e:c1:61:6d:cb:18:6c:eb:e5:24:56:f5:cb:4f:ee:78:2a:53:
27:ba:da:f7:b6:e4:0e:1d:2f:45:45:6e:eb:a3:aa:69:d6:99:
b0:8f:32:01:60:0b:af:0f:96:2d:c0:d3:a9:8f:d9:e7:5f:45:
bc:d2:df:0d:b6:8b:e1:20:9d:ba:d3:1a:52:4d:9a:2f:54:90:
60:a1:99:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GA+rXNj87lwL1duB3S3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYWFlNTE0YzVmOTk0MDM5MTQzNTYxNGQ3OTQwNGJlZTEy
MDliM2IwHhcNMjUwMTMxMTYwMDU4WhcNMjUwMjAxMTYwMDU4WjAzMTEwLwYDVQQD
Eyg5MThiODc5MTJhNjk1ZjE0YTk2MjExZWY1MjUyYzhjY2IxYmEwMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAGTJzLTafqfEuQFK4w7SCPI9n93
Tf/Ucvg2nFCGUfu0IkVSz1c4IT5U1+H8ikjB4HC30UhUS2sjryj4sG4g5b3X+Wl2
Yquns9DR+dpsDRNnTslHCOTGRcUpJkdKpxenpoLc1GxX3+pEIz6SYr9ufqkWAdSW
0qTswaysz31Var4+s0eijWNW6ucVifg1cqnK0XX+MSy2oNq2zdyX1vc69nNCpSMk
B9S1uFj6b+QWZBhez6rpOiGU0r2arEoabaYbnBFuqdHM18chs9wSz6kKPvA7L/ZW
LSK3GyQLJ1tXLfjPIFBUsmwTFg7sASM45e4WiHq7F57PkfI6sxujUtgtkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGLh5EqaV8UqWIR71JSyMyxugHbMB8GA1UdIwQY
MBaAFPyq5RTF+ZQDkUNWFNeUBL7hIJs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEt
NjdhOThlMjU2Y2M3LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEtNjdhOThlMjU2Y2M3
LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0lr4Pz+
HQmO8S9ciDrXuGx3jJnh+0756Vf91O1gNkCuabkWXHMBWYO023NFgFDkNMYFbr79
ZuCieO6drrGiXHV5zz6QGD6t/zZGzE8n26fJjToOtdq8DhKnKPriZlP/6zrN35Z4
jXjpFuRulqEJ1bDxXo5adZUOVFpROjEpalq1RCj9mC6oE+a1v+s0Zeo4ZBgQF/5l
cmbhBUT+l7c1howmkYmNHB/sY7+5zpzNmW9cU1enTsFhbcsYbOvlJFb1y0/ueCpT
J7ra97bkDh0vRUVu66OqadaZsI8yAWALrw+WLcDTqY/Z519FvNLfDbaL4SCdutMa
Uk2aL1SQYKGZTA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:17 2025 by rpki-client