Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: LoHFE7W/l+qck1s2lU8GFJdIlyge0+sbxn3IHUf6NGM=
Subject key identifier: 6D:87:47:97:3A:1E:17:9D:5E:CD:C8:C6:68:54:18:23:34:59:D9:F0
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 0194BD4E9FB2980169FFF3D2A8E77FA0DE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0BF3
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: FD48C4xjO8mXnAytPYaENKkcVR08szaGSvKX0z/DIE8=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:b2:98:01:69:ff:f3:d2:a8:e7:7f:a0:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=6d8747973a1e179d5ecdc8c6685418233459d9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:10:0a:5f:8d:37:35:48:d7:4f:04:8b:b0:
22:83:59:46:c9:9e:59:9c:35:7c:07:54:a9:50:43:
9c:85:9c:43:6b:dd:3f:cd:1f:55:7b:18:2c:21:1e:
98:a8:ee:a8:26:2c:28:31:b4:1a:af:cb:55:26:7c:
57:80:08:23:39:b4:cf:90:17:f6:da:5a:11:90:36:
2d:f2:ad:09:bb:53:2f:e6:c1:16:8a:32:69:7f:67:
d8:ed:f5:35:8b:44:92:8f:11:22:72:4c:f7:ac:94:
d9:61:4c:35:3b:ff:3f:b8:04:9c:05:cf:b8:18:6d:
c1:7a:25:68:ee:f3:a4:de:7d:f4:8a:53:19:5b:98:
f5:34:3f:90:e8:00:1e:00:fb:b3:e1:66:ef:98:a9:
f0:12:9a:03:a9:2c:83:fa:df:c1:7a:9d:41:23:04:
22:b1:22:2d:10:e2:03:06:0b:e3:ef:90:e3:f0:45:
30:d1:07:67:bc:29:80:4b:00:c3:d8:e3:9b:d7:da:
83:24:47:2b:ca:37:89:87:99:21:70:b9:7f:a5:a3:
31:06:d3:01:ac:ea:f2:c6:14:2b:bd:1b:c4:57:9c:
6e:d9:46:9b:c4:09:bf:2a:a0:5c:6b:71:d0:d8:f0:
27:06:6e:8c:69:ea:c0:f5:f8:55:50:51:19:cf:3f:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:47:97:3A:1E:17:9D:5E:CD:C8:C6:68:54:18:23:34:59:D9:F0
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:10:b0:a6:ef:c9:f5:3f:4e:57:c6:f8:8e:40:9d:42:50:
a9:67:de:93:8e:60:db:77:d9:96:66:44:7a:2a:d4:15:07:83:
f7:0c:08:ed:e1:81:d5:4c:18:51:b8:69:47:9e:36:90:b1:99:
3d:2f:52:a0:af:40:e7:22:3d:42:79:52:8e:8a:ea:50:d7:3e:
48:3a:19:4e:f5:3b:3a:9b:87:bd:6b:08:c6:c6:5d:b6:6a:92:
23:99:77:bf:65:2c:e6:d8:e8:a1:96:e7:8a:c3:27:2a:5a:13:
62:2d:9e:a5:4d:5f:29:d2:87:97:77:d8:2f:3d:c8:ba:23:fe:
8a:86:9b:2c:0e:26:e9:4d:8e:90:5f:29:f3:ac:ae:93:77:96:
ab:5c:f2:20:bc:46:4c:df:46:24:35:2a:81:81:08:04:f0:36:
33:c2:ed:78:65:13:ef:d6:fa:49:32:c7:24:91:b0:a3:de:34:
71:a7:25:bd:db:76:54:e3:52:c6:ac:e8:68:b6:df:58:af:56:
6d:94:8f:e8:12:52:5b:d3:51:b2:88:f0:0e:2e:e7:39:db:ec:
31:52:47:58:8d:29:17:ae:04:da:5c:80:5b:de:93:71:b1:9a:
54:9c:a2:0b:da:64:d8:2d:d2:58:a3:a2:c6:d5:3d:73:54:2e:
f2:5a:b5:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tp+ymAFp//PSqOd/oN4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3
YjZiMTcwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjAxMTcwMDMzWjAzMTEwLwYDVQQD
Eyg2ZDg3NDc5NzNhMWUxNzlkNWVjZGM4YzY2ODU0MTgyMzM0NTlkOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxkQCl+NNzVI108Ei7Aig1lGyZ5Z
nDV8B1SpUEOchZxDa90/zR9VexgsIR6YqO6oJiwoMbQar8tVJnxXgAgjObTPkBf2
2loRkDYt8q0Ju1Mv5sEWijJpf2fY7fU1i0SSjxEickz3rJTZYUw1O/8/uAScBc+4
GG3BeiVo7vOk3n30ilMZW5j1ND+Q6AAeAPuz4WbvmKnwEpoDqSyD+t/Bep1BIwQi
sSItEOIDBgvj75Dj8EUw0QdnvCmASwDD2OOb19qDJEcryjeJh5khcLl/paMxBtMB
rOryxhQrvRvEV5xu2UabxAm/KqBca3HQ2PAnBm6MaerA9fhVUFEZzz/48QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2HR5c6HhedXs3IxmhUGCM0WdnwMB8GA1UdIwQY
MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct
NmQzYTg4MTUzNzY3LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3
LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnAQsKbv
yfU/TlfG+I5AnUJQqWfek45g23fZlmZEeirUFQeD9wwI7eGB1UwYUbhpR542kLGZ
PS9SoK9A5yI9QnlSjorqUNc+SDoZTvU7OpuHvWsIxsZdtmqSI5l3v2Us5tjooZbn
isMnKloTYi2epU1fKdKHl3fYLz3IuiP+ioabLA4m6U2OkF8p86yuk3eWq1zyILxG
TN9GJDUqgYEIBPA2M8LteGUT79b6STLHJJGwo940caclvdt2VONSxqzoaLbfWK9W
bZSP6BJSW9NRsojwDi7nOdvsMVJHWI0pF64E2lyAW96TcbGaVJyiC9pk2C3SWKOi
xtU9c1Qu8lq1oA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client