Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
File: KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft (raw, json)
Hash identifier: fBeBpGL7L9J7kez+XHcZQ74cwkL9CiozWtGJQinbqvE=
Subject key identifier: D8:21:5E:6F:0A:FA:5F:CA:8B:D5:7E:C8:3E:0E:E2:7D:48:75:8D:AD
Authority key identifier: 28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
Certificate issuer: /CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Certificate serial: 0194BD4E95B72986B3B985039A4A87D5B7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
Manifest number: 07BD
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl (hash: bW8/plXscVMf0kK2fQxQwPmeFaEilF5jXoHP/MtoydA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:95:b7:29:86:b3:b9:85:03:9a:4a:87:d5:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=d8215e6f0afa5fca8bd57ec83e0ee27d48758dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:fd:e9:84:57:96:ef:1c:c2:86:9d:8b:2d:
2e:a1:e6:dc:59:b7:16:aa:7a:4c:2e:d3:42:42:7f:
0c:45:a8:27:2d:50:6c:b7:9b:00:37:98:7d:de:e1:
59:1a:7d:5d:6a:ae:01:91:c1:f0:6c:cd:a6:92:48:
fa:a1:cf:88:d3:c7:2b:6b:86:4a:ad:67:92:64:33:
09:af:17:bb:8b:dd:ba:16:e4:35:bf:9f:b7:9c:3e:
94:22:17:4d:fd:94:ff:ec:0a:3f:ba:bc:ec:2d:6a:
ca:77:62:1a:e7:ce:47:7d:94:e2:bb:61:ec:05:84:
d6:fb:7f:8d:8c:df:44:9c:db:c9:16:d5:94:6e:1b:
66:44:33:6b:6b:b6:2b:5b:50:73:42:74:cc:5d:8b:
0e:aa:43:03:dd:78:44:c3:1b:d3:74:85:7d:b0:82:
39:e9:95:52:05:de:21:c8:db:e7:8f:3a:37:76:8d:
90:0d:60:8e:cd:fa:ba:43:9c:9d:f8:a0:f8:38:c7:
fd:86:61:c6:f3:5e:84:e4:64:bb:ca:49:4f:ef:62:
7c:a9:e1:2f:ac:8f:93:f0:99:98:c7:8e:c0:d8:cd:
90:49:a2:85:2d:d4:4f:75:2a:b1:e4:69:34:33:19:
65:15:8e:4c:d0:d6:c4:1e:a3:86:c6:06:2c:99:57:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:5E:6F:0A:FA:5F:CA:8B:D5:7E:C8:3E:0E:E2:7D:48:75:8D:AD
X509v3 Authority Key Identifier:
keyid:28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:95:49:2d:9f:3d:86:72:72:7b:b0:0f:09:fe:14:cb:64:6c:
5b:1f:97:e2:cd:62:05:ad:44:96:be:34:dd:59:1b:e0:bc:47:
0d:a8:49:41:7d:72:27:3e:b8:d8:7d:63:d3:a3:68:d4:e9:8b:
5d:97:d2:fe:87:25:ff:9d:50:3a:50:61:52:d1:0a:99:19:b4:
d4:49:11:c6:c0:ea:bf:78:30:e8:81:5d:53:5b:ad:49:8a:0c:
49:0a:ab:fd:dc:86:80:e3:94:6c:75:8c:21:08:8f:f6:19:b7:
c4:8b:f7:84:57:f5:37:68:c5:5e:fd:9e:44:05:9c:67:06:10:
e5:88:ec:7a:02:41:7e:fe:61:87:5e:99:45:11:3b:56:b1:80:
ef:38:c4:08:84:ed:f0:e1:b5:e0:84:4c:e5:d2:55:e4:9a:06:
ec:8e:9c:fd:88:7f:ba:fd:56:53:83:f2:92:0b:ed:86:1d:d6:
30:d7:ce:a7:4a:8e:93:45:1a:bb:37:99:6d:ce:22:95:48:13:
a4:9c:dc:95:7d:3f:43:56:c9:40:bb:cb:00:20:87:16:b2:ce:
73:34:03:fa:35:51:70:91:db:e7:59:cc:9b:41:84:43:c1:37:
4a:7e:0a:23:30:1e:9d:eb:83:e5:0a:4d:46:4d:bb:be:12:3d:
db:a4:77:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpW3KYazuYUDmkqH1beyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MWE3ZjA3YmU1YzMxMzhjYjQzYzJjMThiMjlhYTU0Njg1
NDRiYTYwHhcNMjUwMTMxMTcwMDMxWhcNMjUwMjAxMTcwMDMxWjAzMTEwLwYDVQQD
EyhkODIxNWU2ZjBhZmE1ZmNhOGJkNTdlYzgzZTBlZTI3ZDQ4NzU4ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ev96YRXlu8cwoadiy0uoebcWbcW
qnpMLtNCQn8MRagnLVBst5sAN5h93uFZGn1daq4BkcHwbM2mkkj6oc+I08cra4ZK
rWeSZDMJrxe7i926FuQ1v5+3nD6UIhdN/ZT/7Ao/urzsLWrKd2Ia585HfZTiu2Hs
BYTW+3+NjN9EnNvJFtWUbhtmRDNra7YrW1BzQnTMXYsOqkMD3XhEwxvTdIV9sII5
6ZVSBd4hyNvnjzo3do2QDWCOzfq6Q5yd+KD4OMf9hmHG816E5GS7yklP72J8qeEv
rI+T8JmYx47A2M2QSaKFLdRPdSqx5Gk0MxllFY5M0NbEHqOGxgYsmVe1OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNghXm8K+l/Ki9V+yD4O4n1IdY2tMB8GA1UdIwQY
MBaAFCgafwe+XDE4y0PCwYspqlRoVEumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JwX0I3NWNNVGpMUThMQml5bXFWR2hVUzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2E0NGUtODQ0OS00NzFmLThlYmQt
NTJjY2Y2NWJkNjdiLzEvS0JwX0I3NWNNVGpMUThMQml5bXFWR2hVUzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hY2E0NGUtODQ0OS00NzFmLThlYmQtNTJjY2Y2NWJkNjdi
LzEvS0JwX0I3NWNNVGpMUThMQml5bXFWR2hVUzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJVJLZ89
hnJye7APCf4Uy2RsWx+X4s1iBa1Elr403Vkb4LxHDahJQX1yJz642H1j06No1OmL
XZfS/ocl/51QOlBhUtEKmRm01EkRxsDqv3gw6IFdU1utSYoMSQqr/dyGgOOUbHWM
IQiP9hm3xIv3hFf1N2jFXv2eRAWcZwYQ5YjsegJBfv5hh16ZRRE7VrGA7zjECITt
8OG14IRM5dJV5JoG7I6c/Yh/uv1WU4Pykgvthh3WMNfOp0qOk0UauzeZbc4ilUgT
pJzclX0/Q1bJQLvLACCHFrLOczQD+jVRcJHb51nMm0GEQ8E3Sn4KIzAeneuD5QpN
Rk27vhI926R3NA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:26 2025 by rpki-client