
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: kuBYIFrefR7bKxXFZo9LQ+mym/+48nk4+0a4Ldf1J4E=
Subject key identifier: 41:03:81:6F:D5:58:4C:AB:28:7E:AA:DD:92:7C:30:D0:32:45:79:3D
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 0194BC3C631E633E37CB1CB8B14B9BC87632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0E8F
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: DIQDZ9syie9MHKKkusreW0uM36UipwJEa7tAOjAhraM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:63:1e:63:3e:37:cb:1c:b8:b1:4b:9b:c8:76:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=4103816fd5584cab287eaadd927c30d03245793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:a9:50:85:ba:d7:9e:b5:64:8e:9c:a8:0a:
3c:c4:17:46:ae:42:1c:5e:66:9e:01:94:8b:87:83:
f4:48:7e:bf:fe:c5:00:3c:97:37:01:15:48:cb:7d:
44:e7:5d:39:fb:03:36:5b:50:af:42:6c:6c:80:f9:
21:a7:85:b3:2c:a5:d9:2b:a1:f0:e1:65:24:83:54:
fa:01:b8:a8:5b:0f:3e:26:32:52:1e:14:3a:71:a8:
02:64:a8:79:8f:fb:72:eb:79:73:32:b5:65:ba:10:
f8:65:08:39:4b:45:5d:45:b7:b9:a8:ff:c0:48:90:
0a:f4:ed:31:5b:1e:d3:dc:8e:ea:da:b9:e3:31:50:
7f:61:ab:13:1f:d1:97:8a:c1:32:2e:f5:1f:da:bd:
88:bc:13:33:68:96:11:93:0d:d5:a0:db:68:64:f5:
4e:30:10:ca:c5:6c:0e:71:2b:76:dc:6a:f4:99:59:
c9:b9:0f:93:c0:fe:4c:d7:5e:87:20:52:dd:88:f8:
2f:61:a6:c1:e8:2a:a0:8d:d0:66:dd:1f:99:27:90:
66:b4:bb:30:ec:60:19:ad:10:2f:67:60:45:16:d5:
50:b2:0b:fc:65:75:d7:11:4c:7b:1d:8c:4f:12:6b:
f9:f0:df:64:e2:42:b9:b2:4a:f8:69:09:a3:8c:2d:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:03:81:6F:D5:58:4C:AB:28:7E:AA:DD:92:7C:30:D0:32:45:79:3D
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:59:af:d2:6f:db:83:30:35:ec:ff:8f:db:f4:6d:9c:2e:07:
af:a6:c8:70:22:8e:16:8f:25:e5:68:ce:77:47:a1:51:75:72:
38:36:78:52:ac:3c:d2:e0:53:d5:f1:5e:87:30:2b:10:56:09:
27:30:cb:9a:42:75:22:b4:ba:85:d5:36:3a:6d:92:31:18:a5:
8b:53:db:5a:69:c4:c0:d8:6c:f5:f9:a2:8d:5e:39:9f:2b:a5:
c6:73:7f:1f:22:cd:04:04:75:a4:27:e0:53:77:50:97:c9:d1:
9e:5c:3a:75:02:7a:fd:b2:9b:26:a1:d0:6e:0a:fe:b6:36:3b:
48:69:94:11:8c:bc:c5:85:03:52:0b:6e:1a:b9:3a:47:94:ec:
3b:9a:2b:1e:97:1f:03:22:20:ff:ac:99:79:de:66:f9:40:d3:
b8:fb:07:9e:42:e5:29:65:fd:e7:9c:80:68:46:e3:71:10:a5:
f1:f0:17:dc:20:16:f7:5b:a1:c4:64:b1:ad:4b:94:af:3c:51:
08:93:e2:8a:36:56:3b:e5:ba:4c:5c:cc:da:10:c9:2a:b4:b0:
b1:be:99:1a:0e:22:99:f1:0a:1f:0f:39:ef:23:25:41:e6:a5:
18:f5:b1:6d:f4:66:45:76:3a:47:9b:9d:85:a8:a8:18:2d:d9:
66:5d:1e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGMeYz43yxy4sUubyHYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmU4YTk1ZTU1MjlkNzhlNzIwNDdkNGUzNWQxYTdlOWFk
NWMxMWEwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
Eyg0MTAzODE2ZmQ1NTg0Y2FiMjg3ZWFhZGQ5MjdjMzBkMDMyNDU3OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tOpUIW61561ZI6cqAo8xBdGrkIc
XmaeAZSLh4P0SH6//sUAPJc3ARVIy31E5105+wM2W1CvQmxsgPkhp4WzLKXZK6Hw
4WUkg1T6AbioWw8+JjJSHhQ6cagCZKh5j/ty63lzMrVluhD4ZQg5S0VdRbe5qP/A
SJAK9O0xWx7T3I7q2rnjMVB/YasTH9GXisEyLvUf2r2IvBMzaJYRkw3VoNtoZPVO
MBDKxWwOcSt23Gr0mVnJuQ+TwP5M116HIFLdiPgvYabB6CqgjdBm3R+ZJ5BmtLsw
7GAZrRAvZ2BFFtVQsgv8ZXXXEUx7HYxPEmv58N9k4kK5skr4aQmjjC1lSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEDgW/VWEyrKH6q3ZJ8MNAyRXk9MB8GA1UdIwQY
MBaAFJP+ipXlUp145yBH1ONdGn6a1cEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAt
ZmE3MDlhMjNhYzc0LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAtZmE3MDlhMjNhYzc0
LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlmv0m/b
gzA17P+P2/RtnC4Hr6bIcCKOFo8l5WjOd0ehUXVyODZ4Uqw80uBT1fFehzArEFYJ
JzDLmkJ1IrS6hdU2Om2SMRili1PbWmnEwNhs9fmijV45nyulxnN/HyLNBAR1pCfg
U3dQl8nRnlw6dQJ6/bKbJqHQbgr+tjY7SGmUEYy8xYUDUgtuGrk6R5TsO5orHpcf
AyIg/6yZed5m+UDTuPsHnkLlKWX955yAaEbjcRCl8fAX3CAW91uhxGSxrUuUrzxR
CJPiijZWO+W6TFzM2hDJKrSwsb6ZGg4imfEKHw857yMlQealGPWxbfRmRXY6R5ud
haioGC3ZZl0eIw==
-----END CERTIFICATE-----
Generated at Thu May 1 06:57:52 2025 by rpki-client