Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: pv2P8qOwuR7nP9gNZrBRjtV9oRu8Nz0z42ErCzZxdLc=
Subject key identifier: FF:68:5D:94:DC:85:BE:00:30:66:5E:B6:13:04:4C:9B:94:4A:EC:29
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 0194BCAA0713E440E46F4CD8F4DC7FDEECDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: 90xztzd6omd4zaFol86TjClDApo/wMFF2aORW5+URBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:07:13:e4:40:e4:6f:4c:d8:f4:dc:7f:de:ec:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=ff685d94dc85be0030665eb613044c9b944aec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:f8:17:ff:e5:1c:3b:cf:8c:5e:e9:45:ca:
3a:b6:2b:e6:61:4c:88:bc:34:83:d6:6c:24:e4:57:
97:ab:3c:44:21:9b:2c:8e:cd:71:7f:79:8f:04:b5:
00:b9:fa:44:e3:d6:4d:1c:fe:ae:f7:73:fc:67:3e:
73:09:f8:82:39:7c:c8:e5:6c:d2:ed:a9:a6:69:1a:
a0:35:0a:47:f9:7e:78:09:c9:68:a9:9b:7e:1e:b6:
be:2d:9a:db:e1:d3:36:fe:8b:97:38:c2:73:c4:93:
5d:4b:de:94:a2:5c:70:0b:69:a9:44:4a:a8:7a:6b:
bb:65:f0:2e:f9:54:87:ce:67:66:a1:b8:34:b5:70:
d4:ae:b5:e7:30:98:c8:04:1c:87:79:4b:17:a2:1f:
9b:89:ee:a9:13:6b:2f:31:d4:bf:6b:4b:58:5b:4a:
da:36:51:5c:ec:6e:1a:03:5d:36:e4:03:73:d8:d1:
50:7b:f1:cb:06:a4:12:f0:ee:81:43:16:4a:64:06:
cd:0b:33:05:5d:df:94:76:39:a1:f0:6d:e1:61:25:
60:99:8f:96:69:22:ce:bc:7e:2f:be:99:10:eb:d0:
15:db:d8:d2:80:8d:48:10:26:1e:9b:30:09:db:ec:
d8:38:0e:65:e5:13:5c:bb:63:02:8d:8f:84:14:40:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:5D:94:DC:85:BE:00:30:66:5E:B6:13:04:4C:9B:94:4A:EC:29
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2e:66:89:6f:89:da:40:9d:6c:9d:54:4b:65:fe:78:a0:24:
08:78:b4:6e:8f:17:54:d8:29:35:f7:2d:18:51:58:39:78:dd:
ce:1d:88:9b:c6:1b:36:1a:06:f0:5f:7b:97:cd:86:be:6d:b6:
ad:8f:f4:7d:c8:f7:7d:52:50:1e:a1:85:ed:ff:d5:bc:d0:22:
d5:2c:fc:fc:11:a1:ae:45:04:89:37:7b:96:69:70:a3:0b:f4:
46:b8:65:f0:28:ef:17:85:26:3f:e9:37:db:61:25:ba:15:3f:
ea:3c:60:c7:0c:64:52:78:bb:95:70:ab:5d:42:91:cf:91:5e:
df:3e:42:1c:58:9a:3c:a3:b0:21:6f:3a:5a:c5:fc:6b:2e:05:
e4:88:bc:4e:20:2d:f4:7c:c6:42:e3:d7:8d:e1:f6:94:79:8f:
40:17:2c:34:55:19:2f:e9:80:14:27:da:d1:29:25:63:24:f8:
11:ba:f0:9e:e9:47:a8:d6:6b:12:48:1a:e7:91:97:21:b6:78:
ed:4c:66:30:28:9f:fd:a5:ac:cb:f5:5b:e8:34:15:ef:84:75:
04:50:f1:5b:c7:e2:7c:02:bf:78:79:42:e1:34:61:bf:e2:07:
74:72:70:ed:52:96:2a:97:ab:f7:c7:51:8d:24:39:04:cd:56:
7e:4e:9d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgcT5EDkb0zY9Nx/3uzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjYyYjQzZTk0Nzg1NDZmYzBlMTM3NWU4YjFlMGJhZmQ2
YWRlNTAwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhmZjY4NWQ5NGRjODViZTAwMzA2NjVlYjYxMzA0NGM5Yjk0NGFlYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rH4F//lHDvPjF7pRco6tivmYUyI
vDSD1mwk5FeXqzxEIZssjs1xf3mPBLUAufpE49ZNHP6u93P8Zz5zCfiCOXzI5WzS
7ammaRqgNQpH+X54CcloqZt+Hra+LZrb4dM2/ouXOMJzxJNdS96UolxwC2mpREqo
emu7ZfAu+VSHzmdmobg0tXDUrrXnMJjIBByHeUsXoh+bie6pE2svMdS/a0tYW0ra
NlFc7G4aA1025ANz2NFQe/HLBqQS8O6BQxZKZAbNCzMFXd+Udjmh8G3hYSVgmY+W
aSLOvH4vvpkQ69AV29jSgI1IECYemzAJ2+zYOA5l5RNcu2MCjY+EFECzZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9oXZTchb4AMGZethMETJuUSuwpMB8GA1UdIwQY
MBaAFJImK0PpR4VG/A4Tdeix4Lr9at5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYt
MTkzODE0ZDg0M2Q0LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYtMTkzODE0ZDg0M2Q0
LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC5miW+J
2kCdbJ1US2X+eKAkCHi0bo8XVNgpNfctGFFYOXjdzh2Im8YbNhoG8F97l82Gvm22
rY/0fcj3fVJQHqGF7f/VvNAi1Sz8/BGhrkUEiTd7lmlwowv0Rrhl8CjvF4UmP+k3
22EluhU/6jxgxwxkUni7lXCrXUKRz5Fe3z5CHFiaPKOwIW86WsX8ay4F5Ii8TiAt
9HzGQuPXjeH2lHmPQBcsNFUZL+mAFCfa0SklYyT4EbrwnulHqNZrEkga55GXIbZ4
7UxmMCif/aWsy/Vb6DQV74R1BFDxW8fifAK/eHlC4TRhv+IHdHJw7VKWKper98dR
jSQ5BM1Wfk6dTw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:35 2025 by rpki-client