Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: 8mRdGBNRtNs2AgwPR+ZgM7xBrdQUL0mGqJWcxinXBZk=
Subject key identifier: C7:79:8B:23:FA:3C:4E:C9:21:B4:C1:4A:E2:E1:62:1A:E9:B5:0A:7E
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 0194BCE078133515577ED39AEE6464D2586B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 6B
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: Zz42efU+mUL4OKnwB4VTKKUrLtw/XnvX95hybWVSj+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:78:13:35:15:57:7e:d3:9a:ee:64:64:d2:58:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=c7798b23fa3c4ec921b4c14ae2e1621ae9b50a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:f0:ed:0d:4c:05:dc:08:23:56:74:7f:84:
37:99:ff:aa:ba:e3:8f:e3:63:02:e5:c0:bb:5d:e8:
ea:cb:80:af:92:26:3b:82:a0:07:b3:bd:5a:36:97:
44:3c:db:ce:df:5f:07:40:77:e9:11:d6:82:07:47:
fe:62:31:41:db:66:91:0e:78:5a:17:28:12:67:ee:
cc:4d:88:2a:1d:fc:fa:d5:65:4c:5e:ab:ab:35:8b:
7c:4b:47:90:3c:8f:e0:11:6a:88:65:5a:1d:3d:10:
fc:b1:42:56:18:a7:45:ee:f7:b8:42:5a:c5:5e:2a:
53:5d:8a:d0:0a:05:3c:af:63:c2:56:bb:f6:ec:56:
15:40:e9:4b:e3:2f:da:a5:9f:38:68:47:6b:3d:10:
80:33:45:24:3b:70:ee:38:7e:d5:a3:d0:11:e4:aa:
97:78:d1:aa:6d:97:e9:88:53:d6:9c:9d:b4:74:af:
22:58:95:99:0d:be:56:eb:39:4c:d4:78:ce:44:c3:
ed:c2:42:be:ee:79:a0:e6:58:75:36:f0:fb:90:54:
3f:95:e4:81:95:4e:86:30:29:44:c2:15:f9:ee:d2:
94:d1:1e:81:36:74:45:cd:3f:c3:d5:73:17:bf:13:
ae:43:87:3f:39:50:5c:b2:6c:0e:12:32:d9:4f:27:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:8B:23:FA:3C:4E:C9:21:B4:C1:4A:E2:E1:62:1A:E9:B5:0A:7E
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0a:4a:0b:c3:b2:d3:72:22:d8:84:46:8a:34:a3:8d:3a:42:
53:70:c3:55:19:c9:37:c3:0a:be:b8:3c:c0:02:70:61:3a:fc:
6d:d3:6c:de:db:a0:ef:5f:55:d3:09:61:e0:de:a3:62:d2:f4:
26:92:0e:16:46:dc:d2:60:19:fb:17:55:1b:fa:21:62:f7:85:
aa:0e:9e:fa:f6:cc:da:e9:1f:29:e3:af:32:50:21:9b:9a:e6:
65:54:14:04:f8:56:70:84:e5:34:01:73:b7:ef:af:75:e7:81:
ca:bf:40:55:54:ef:ca:f5:fa:96:32:05:f5:c0:26:1c:d4:73:
d2:41:a8:bf:91:41:d9:b3:ab:95:fb:a3:98:49:8e:38:f7:01:
04:e3:83:ce:96:86:52:ea:b0:e9:5e:d0:d7:37:cc:43:09:fd:
d3:5e:de:d4:0f:d4:1b:52:a4:e4:cb:63:eb:98:92:aa:42:e1:
43:15:b8:33:9d:78:00:9f:80:e7:0d:82:f0:be:57:99:b1:38:
1e:86:b1:14:84:e4:75:38:84:ff:1a:4c:cf:12:66:8c:a2:12:
c2:4f:19:ac:33:ce:d3:5b:7b:68:ff:78:25:cf:99:2a:3e:b7:
af:9a:6a:8a:2e:f5:95:55:46:94:7f:6c:65:b4:1e:a2:16:36:
d4:29:db:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HgTNRVXftOa7mRk0lhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjkzYjAwNTZkZTg3ZDg0YmFjY2RkODA1ZDAzNjVmYWM2
MGY2N2MwHhcNMjUwMTMxMTUwMDE0WhcNMjUwMjAxMTUwMDE0WjAzMTEwLwYDVQQD
EyhjNzc5OGIyM2ZhM2M0ZWM5MjFiNGMxNGFlMmUxNjIxYWU5YjUwYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32vw7Q1MBdwII1Z0f4Q3mf+quuOP
42MC5cC7Xejqy4CvkiY7gqAHs71aNpdEPNvO318HQHfpEdaCB0f+YjFB22aRDnha
FygSZ+7MTYgqHfz61WVMXqurNYt8S0eQPI/gEWqIZVodPRD8sUJWGKdF7ve4QlrF
XipTXYrQCgU8r2PCVrv27FYVQOlL4y/apZ84aEdrPRCAM0UkO3DuOH7Vo9AR5KqX
eNGqbZfpiFPWnJ20dK8iWJWZDb5W6zlM1HjORMPtwkK+7nmg5lh1NvD7kFQ/leSB
lU6GMClEwhX57tKU0R6BNnRFzT/D1XMXvxOuQ4c/OVBcsmwOEjLZTyc64wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd5iyP6PE7JIbTBSuLhYhrptQp+MB8GA1UdIwQY
MBaAFChpOwBW3ofYS6zN2AXQNl+sYPZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODFmMmEtNzRjMC00MGI3LThjMzct
MTUwN2I4NTNkZmM5LzEvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85ODFmMmEtNzRjMC00MGI3LThjMzctMTUwN2I4NTNkZmM5
LzEvS0drN0FGYmVoOWhMck0zWUJkQTJYNnhnOW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWApKC8Oy
03Ii2IRGijSjjTpCU3DDVRnJN8MKvrg8wAJwYTr8bdNs3tug719V0wlh4N6jYtL0
JpIOFkbc0mAZ+xdVG/ohYveFqg6e+vbM2ukfKeOvMlAhm5rmZVQUBPhWcITlNAFz
t++vdeeByr9AVVTvyvX6ljIF9cAmHNRz0kGov5FB2bOrlfujmEmOOPcBBOODzpaG
Uuqw6V7Q1zfMQwn9017e1A/UG1Kk5Mtj65iSqkLhQxW4M514AJ+A5w2C8L5XmbE4
HoaxFITkdTiE/xpMzxJmjKISwk8ZrDPO01t7aP94Jc+ZKj63r5pqii71lVVGlH9s
ZbQeohY21CnbzQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:00 2025 by rpki-client