Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
File: KqPjBJdiCGjhestHhoLOegvRNTQ.mft (raw, json)
Hash identifier: 2y7tiDaQgrqrggu6acc0Sscx8sl8YgjUus2kP6YJkLo=
Subject key identifier: FA:C1:AD:9F:BF:F7:F6:11:E8:33:72:CA:4F:67:18:F6:27:B6:3C:97
Authority key identifier: 2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
Certificate issuer: /CN=2aa3e30497620868e17acb478682ce7a0bd13534
Certificate serial: 0194BC3CADC1013741D306B63E0B15EE77A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: KqPjBJdiCGjhestHhoLOegvRNTQ.crl (hash: vmCNQH2VtnP2BOM9iO+BaAw3ZgTTJC/6R6gF297mWrU=)
2: _F5YjzIp4N7IiS5lXnJMJsPMLEU.roa (hash: HX+68oJeKBQGUaK3TL3s9cs53fsCINCeh8CnxLw+JsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ad:c1:01:37:41:d3:06:b6:3e:0b:15:ee:77:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3e30497620868e17acb478682ce7a0bd13534
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=fac1ad9fbff7f611e83372ca4f6718f627b63c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:e4:71:5e:d6:49:90:2f:e6:5b:0b:3b:a8:
64:d9:3a:88:d9:b9:1b:28:f8:74:32:59:da:ca:65:
97:3b:04:eb:60:9a:88:d3:c1:9e:98:72:f6:08:59:
a7:ed:6d:dd:35:71:78:0d:59:56:92:e7:f6:df:7f:
a1:06:96:1b:9f:2b:01:09:9a:2b:33:c6:c7:c7:76:
4c:f2:34:47:bf:b7:98:51:a7:1c:7e:65:3b:78:99:
78:dd:d7:98:ef:06:d1:23:b5:fd:d8:12:ac:14:0d:
e4:73:17:ef:d9:8f:ed:a0:b8:67:40:7a:1e:dd:7c:
a7:28:21:6b:44:0a:36:e5:79:ce:01:65:41:4e:17:
15:7a:a1:da:5a:72:de:11:0d:3e:b3:5b:e8:82:ba:
a9:26:6b:bf:9b:06:9b:1b:16:08:4c:cc:78:19:b9:
45:6e:2c:88:78:af:4f:31:be:8b:75:6b:0a:9d:a9:
53:7d:7e:2d:03:ca:8a:3b:c7:70:cc:5e:e1:ad:86:
82:d4:c2:7b:2e:5b:96:5c:73:0a:cc:23:ea:7d:54:
26:7b:bd:8f:41:e4:5e:d0:21:c8:14:f0:71:5b:54:
02:e2:31:93:af:9d:4e:b5:c4:c2:e9:ac:97:21:8f:
87:92:78:77:20:42:e4:29:fd:05:50:ad:7d:a9:a8:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:AD:9F:BF:F7:F6:11:E8:33:72:CA:4F:67:18:F6:27:B6:3C:97
X509v3 Authority Key Identifier:
keyid:2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9e:75:83:0f:3c:92:90:d3:8f:f7:33:91:c5:74:5c:2b:b4:
d1:ec:51:1e:19:03:9e:61:b7:f2:fb:85:9f:67:69:9f:71:34:
34:45:07:0b:aa:59:27:fe:09:63:bf:d9:b2:f3:57:ef:00:b1:
c8:f8:67:50:24:ea:7b:36:d4:aa:52:7f:7e:65:5a:79:5d:ac:
a8:9f:b6:db:f1:9b:17:38:3e:32:84:78:04:5d:88:15:66:af:
0c:f4:53:18:3b:1c:ea:7d:05:ea:98:2b:42:5b:b9:b9:0a:4e:
d0:69:05:e9:b9:55:2c:15:05:92:6a:6b:08:dd:b5:66:50:39:
8b:fc:86:6d:ba:84:98:f9:d9:0d:9f:69:18:b5:6a:42:c1:6b:
61:a9:90:94:17:be:cf:a0:9d:d2:db:77:89:35:40:a1:9e:ad:
50:8b:42:e0:a6:ce:62:07:bb:c2:1e:66:f1:fe:88:28:81:5e:
86:7d:9b:94:fc:77:63:bd:a4:13:cc:80:42:b1:63:6f:68:46:
82:7a:77:b2:64:ea:34:19:fd:d1:43:5b:e6:f4:4b:a7:86:44:
a8:e4:6a:55:99:8b:f5:37:29:e1:f2:59:c3:0a:60:0d:bb:48:
1c:ab:e2:f8:c1:7f:1f:11:5a:89:e2:1a:d7:16:b6:7f:62:b9:
9e:65:48:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PK3BATdB0wa2PgsV7nehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTNlMzA0OTc2MjA4NjhlMTdhY2I0Nzg2ODJjZTdhMGJk
MTM1MzQwHhcNMjUwMTMxMTIwMTIwWhcNMjUwMjAxMTIwMTIwWjAzMTEwLwYDVQQD
EyhmYWMxYWQ5ZmJmZjdmNjExZTgzMzcyY2E0ZjY3MThmNjI3YjYzYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCLkcV7WSZAv5lsLO6hk2TqI2bkb
KPh0MlnaymWXOwTrYJqI08GemHL2CFmn7W3dNXF4DVlWkuf233+hBpYbnysBCZor
M8bHx3ZM8jRHv7eYUaccfmU7eJl43deY7wbRI7X92BKsFA3kcxfv2Y/toLhnQHoe
3XynKCFrRAo25XnOAWVBThcVeqHaWnLeEQ0+s1vogrqpJmu/mwabGxYITMx4GblF
biyIeK9PMb6LdWsKnalTfX4tA8qKO8dwzF7hrYaC1MJ7LluWXHMKzCPqfVQme72P
QeRe0CHIFPBxW1QC4jGTr51OtcTC6ayXIY+Hknh3IELkKf0FUK19qaj00QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrBrZ+/9/YR6DNyyk9nGPYntjyXMB8GA1UdIwQY
MBaAFCqj4wSXYgho4XrLR4aCznoL0TU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FQakJKZGlDR2poZXN0SGhvTE9lZ3ZSTlRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ODdiM2MtZjM0NS00MTEyLTkyNDAt
YTRjMGFiYTliYmViLzEvS3FQakJKZGlDR2poZXN0SGhvTE9lZ3ZSTlRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85ODdiM2MtZjM0NS00MTEyLTkyNDAtYTRjMGFiYTliYmVi
LzEvS3FQakJKZGlDR2poZXN0SGhvTE9lZ3ZSTlRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ51gw88
kpDTj/czkcV0XCu00exRHhkDnmG38vuFn2dpn3E0NEUHC6pZJ/4JY7/ZsvNX7wCx
yPhnUCTqezbUqlJ/fmVaeV2sqJ+22/GbFzg+MoR4BF2IFWavDPRTGDsc6n0F6pgr
Qlu5uQpO0GkF6blVLBUFkmprCN21ZlA5i/yGbbqEmPnZDZ9pGLVqQsFrYamQlBe+
z6Cd0tt3iTVAoZ6tUItC4KbOYge7wh5m8f6IKIFehn2blPx3Y72kE8yAQrFjb2hG
gnp3smTqNBn90UNb5vRLp4ZEqORqVZmL9Tcp4fJZwwpgDbtIHKvi+MF/HxFaieIa
1xa2f2K5nmVIkg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:47 2025 by rpki-client