Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.mft
File: sd_KrmUzbQycpCWFpG2Yyawk9eU.mft (raw, json)
Hash identifier: zWmNdZvaHWxnmGkzzHnleoVBiNcWnGIGoTn0KvZUt4o=
Subject key identifier: 5B:33:F0:E8:82:B1:C7:E6:62:02:D8:FF:17:FC:8A:F7:0C:6D:FD:B8
Authority key identifier: B1:DF:CA:AE:65:33:6D:0C:9C:A4:25:85:A4:6D:98:C9:AC:24:F5:E5
Certificate issuer: /CN=b1dfcaae65336d0c9ca42585a46d98c9ac24f5e5
Certificate serial: 0194BCE0E9C76648E6D341F9976AB08BFEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd_KrmUzbQycpCWFpG2Yyawk9eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.mft
Manifest number: 71
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: sd_KrmUzbQycpCWFpG2Yyawk9eU.crl (hash: VBH7y7Oa5nZpgWafNW+l4sXll1+yJwsnr2iUhePdcbk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:c7:66:48:e6:d3:41:f9:97:6a:b0:8b:fe:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1dfcaae65336d0c9ca42585a46d98c9ac24f5e5
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=5b33f0e882b1c7e66202d8ff17fc8af70c6dfdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:78:9f:c9:bd:80:10:21:7e:42:c1:dc:b9:3b:
f8:a6:8b:73:05:1a:6f:57:00:63:94:c2:7e:3f:33:
0a:c3:53:3c:59:b3:b7:d7:d8:9d:73:40:b9:9f:04:
ed:62:e9:7e:ae:54:a0:08:c5:92:7e:cb:ec:6b:89:
a6:f2:3b:5d:47:d9:dc:81:47:0f:46:f1:a4:9b:a3:
0e:25:69:34:6e:96:b4:24:d8:44:80:2e:d9:ca:06:
fa:12:d7:b6:a9:fa:b9:d8:08:2c:de:ed:ea:dc:09:
77:45:4b:fd:ef:78:5d:14:1d:84:0d:2a:18:03:5e:
76:5b:af:b4:af:51:b2:f8:e7:75:ca:a5:39:52:66:
94:4a:d8:f5:b4:2c:4f:ab:20:f5:aa:3d:85:bf:dc:
70:c9:95:fa:3a:d2:79:6e:2f:b2:b2:d0:48:8a:1d:
8f:a8:b2:50:0c:00:93:aa:d7:55:5d:2d:c0:10:ff:
b3:a6:50:7e:c5:f8:1e:6a:14:8e:83:d7:1c:14:c3:
3b:0c:80:a8:e8:49:19:4f:a1:3b:28:52:a3:a7:71:
32:b8:9e:1d:5e:13:da:d6:bd:09:b6:ca:b3:1f:81:
4d:f5:97:67:52:10:0e:da:b4:ad:6b:76:33:01:48:
98:7c:54:41:44:8e:30:f1:c2:9f:2a:03:bf:b3:51:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:F0:E8:82:B1:C7:E6:62:02:D8:FF:17:FC:8A:F7:0C:6D:FD:B8
X509v3 Authority Key Identifier:
keyid:B1:DF:CA:AE:65:33:6D:0C:9C:A4:25:85:A4:6D:98:C9:AC:24:F5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd_KrmUzbQycpCWFpG2Yyawk9eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/19877d-3932-472e-9e64-c45e8924c54a/1/sd_KrmUzbQycpCWFpG2Yyawk9eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3e:c3:1e:ff:b7:fc:b7:46:c3:5d:e3:a0:0a:6d:61:dd:4a:
a8:e5:41:92:a8:eb:12:c7:3b:5e:f6:d3:3b:61:69:3c:0c:9d:
68:5c:43:8c:bd:c3:12:6a:d3:c6:d8:0b:1f:21:06:53:e3:cd:
a3:1b:4c:25:be:2c:ed:0c:f0:45:2f:8d:78:51:89:61:21:0c:
d3:ca:ea:8f:2d:cd:4c:d9:9a:16:ad:3e:a0:b3:6e:7f:13:d5:
3a:72:95:e2:8f:c3:99:a5:7a:3c:55:18:34:23:ba:34:50:fc:
80:3d:6e:7a:6a:c3:e5:2b:d8:76:b6:f7:ad:42:06:a6:c9:44:
45:89:1d:68:89:9a:a0:0f:7a:c0:a1:fc:c3:ee:1e:76:f8:cd:
05:15:51:3e:e8:10:6f:3b:a6:12:7d:7d:4b:a2:73:54:b2:8d:
83:88:98:1a:44:5f:c6:18:49:23:08:08:e1:c2:d6:cf:1b:f4:
c7:c2:f7:50:e8:5a:26:11:ce:92:22:04:05:3b:24:93:c2:59:
bc:88:b1:e2:b7:28:34:ab:19:23:dd:53:16:1c:e5:d4:cf:b6:
aa:cc:20:91:86:b8:0f:ce:84:3c:af:fa:12:12:5d:8f:d3:74:
e8:3b:cc:7d:d8:71:0e:9c:4a:db:34:a3:f9:bd:2d:c3:22:13:
04:64:23:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OnHZkjm00H5l2qwi/61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZGZjYWFlNjUzMzZkMGM5Y2E0MjU4NWE0NmQ5OGM5YWMy
NGY1ZTUwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
Eyg1YjMzZjBlODgyYjFjN2U2NjIwMmQ4ZmYxN2ZjOGFmNzBjNmRmZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Hifyb2AECF+QsHcuTv4potzBRpv
VwBjlMJ+PzMKw1M8WbO319idc0C5nwTtYul+rlSgCMWSfsvsa4mm8jtdR9ncgUcP
RvGkm6MOJWk0bpa0JNhEgC7Zygb6Ete2qfq52Ags3u3q3Al3RUv973hdFB2EDSoY
A152W6+0r1Gy+Od1yqU5UmaUStj1tCxPqyD1qj2Fv9xwyZX6OtJ5bi+ystBIih2P
qLJQDACTqtdVXS3AEP+zplB+xfgeahSOg9ccFMM7DICo6EkZT6E7KFKjp3EyuJ4d
XhPa1r0JtsqzH4FN9ZdnUhAO2rSta3YzAUiYfFRBRI4w8cKfKgO/s1EvpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsz8OiCscfmYgLY/xf8ivcMbf24MB8GA1UdIwQY
MBaAFLHfyq5lM20MnKQlhaRtmMmsJPXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RfS3JtVXpiUXljcENXRnBHMll5YXdrOWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xOTg3N2QtMzkzMi00NzJlLTllNjQt
YzQ1ZTg5MjRjNTRhLzEvc2RfS3JtVXpiUXljcENXRnBHMll5YXdrOWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xOTg3N2QtMzkzMi00NzJlLTllNjQtYzQ1ZTg5MjRjNTRh
LzEvc2RfS3JtVXpiUXljcENXRnBHMll5YXdrOWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT7DHv+3
/LdGw13joAptYd1KqOVBkqjrEsc7XvbTO2FpPAydaFxDjL3DEmrTxtgLHyEGU+PN
oxtMJb4s7QzwRS+NeFGJYSEM08rqjy3NTNmaFq0+oLNufxPVOnKV4o/DmaV6PFUY
NCO6NFD8gD1uemrD5SvYdrb3rUIGpslERYkdaImaoA96wKH8w+4edvjNBRVRPugQ
bzumEn19S6JzVLKNg4iYGkRfxhhJIwgI4cLWzxv0x8L3UOhaJhHOkiIEBTskk8JZ
vIix4rcoNKsZI91TFhzl1M+2qswgkYa4D86EPK/6EhJdj9N06DvMfdhxDpxK2zSj
+b0twyITBGQjzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:25 2025 by rpki-client