Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json)
Hash identifier: ErN0L3DEVtshNnfOIKVcLnqMz9eCzqfso5zE24ONjz0=
Subject key identifier: FD:89:8D:90:9B:10:C6:D1:AC:A0:64:09:6B:97:64:82:20:85:70:72
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 0194BCA9F58B9138EBB246436D51F5C3B1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
Manifest number: 1445
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=)
2: DCSKcvdhAWGBeDOhVh0nRRu3Jr4.roa (hash: o5Z/5OOVY2+lNWps+489dBIyhN+UZqQo2EbM+ZP8NRg=)
3: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: afW9Ua8i4aR/gKXMKFljU1XSl5lJxulwsQv+/6775Ro=)
4: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=)
5: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=)
6: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=)
7: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=)
8: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=)
9: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=)
10: r35yid910YnMRVJ0dohWLbFg9fA.roa (hash: R0fRzKPoSAK4VI2tCDaL9PTR+axXctfnY3qc7wzVVJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:8b:91:38:eb:b2:46:43:6d:51:f5:c3:b1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=fd898d909b10c6d1aca064096b97648220857072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:64:8b:28:8c:6a:55:e6:30:53:36:07:cf:
3d:5d:32:d4:4a:58:c4:db:10:3d:21:85:7f:59:54:
0f:10:36:3d:dc:6b:b2:bc:50:f8:e2:f7:c3:1e:db:
53:3e:39:96:92:12:49:8e:36:42:48:44:4f:26:7e:
62:78:f3:e7:c8:89:4a:7f:5c:b3:c7:53:c2:56:05:
ac:71:ca:fb:53:69:93:0c:cd:28:6a:45:04:5e:6d:
a9:f9:80:a5:e7:4b:36:4e:3b:29:ba:5b:bd:3a:d8:
de:d6:2c:1f:c0:76:40:fb:ed:4a:2f:20:41:8b:a1:
f7:6b:17:97:34:6b:6f:c2:58:eb:75:df:75:45:34:
c6:b0:c8:8a:f9:1c:cc:fe:5b:80:fb:56:97:bc:82:
1d:e9:8e:47:04:a3:34:56:59:39:9b:f7:6d:69:a6:
49:7b:3e:37:70:6f:2c:ff:23:22:63:d1:65:8c:66:
66:c8:3c:e0:4f:4a:f9:0a:cf:ac:47:26:f1:b3:98:
0d:1b:29:35:2a:24:b9:e7:55:d0:6d:02:97:1c:3f:
ff:85:00:98:57:4d:3b:54:68:48:48:89:13:cf:f0:
c9:6d:6b:76:53:e0:86:72:4a:40:16:e7:f7:95:5f:
14:95:7e:01:04:81:e0:2f:b6:b5:9c:8e:51:24:b6:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:8D:90:9B:10:C6:D1:AC:A0:64:09:6B:97:64:82:20:85:70:72
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:53:50:a0:55:bb:14:bf:ec:e4:eb:aa:75:ab:df:23:c6:e3:
44:b4:7f:2c:ce:81:fa:c2:00:88:e9:18:62:c9:9d:d0:b2:a4:
6e:6e:82:f9:af:cf:df:32:ca:e1:55:eb:03:28:26:bc:2d:ac:
94:05:7a:32:0c:59:f0:56:3c:96:ee:a9:95:63:9a:c0:1f:88:
0b:f4:43:ec:da:ca:ee:a6:22:04:39:e7:35:03:4a:1b:8e:64:
7c:f3:2a:06:69:2c:c6:b3:67:05:ad:2a:7b:b4:0b:54:5f:7d:
c0:b4:00:99:16:9d:14:1f:3b:99:c8:3a:24:09:da:40:e4:4c:
a3:23:cc:38:13:13:50:0d:da:45:6b:65:be:85:bd:29:9e:59:
85:2a:45:f7:09:ac:3b:19:a5:ba:d6:a5:72:14:7b:70:12:72:
2d:8e:35:8f:d8:e9:01:1f:6d:74:dd:3e:b9:ae:6a:1d:70:e0:
00:96:85:f7:17:0e:5c:f4:5b:75:c3:21:68:3d:53:a7:ef:a6:
f7:92:2c:bf:ce:5c:91:3b:c1:83:cd:bd:90:54:7d:e7:f8:28:
81:74:14:9d:f1:e9:a1:91:57:94:4a:c2:e2:79:c7:d3:69:88:
3e:76:81:22:a4:f9:c0:c6:a8:85:67:1e:d6:e2:f2:37:2a:c2:
7b:80:25:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfWLkTjrskZDbVH1w7HRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy
ZjM5NzEwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
EyhmZDg5OGQ5MDliMTBjNmQxYWNhMDY0MDk2Yjk3NjQ4MjIwODU3MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ5kiyiMalXmMFM2B889XTLUSljE
2xA9IYV/WVQPEDY93GuyvFD44vfDHttTPjmWkhJJjjZCSERPJn5iePPnyIlKf1yz
x1PCVgWsccr7U2mTDM0oakUEXm2p+YCl50s2Tjspulu9Otje1iwfwHZA++1KLyBB
i6H3axeXNGtvwljrdd91RTTGsMiK+RzM/luA+1aXvIId6Y5HBKM0Vlk5m/dtaaZJ
ez43cG8s/yMiY9FljGZmyDzgT0r5Cs+sRybxs5gNGyk1KiS551XQbQKXHD//hQCY
V007VGhISIkTz/DJbWt2U+CGckpAFuf3lV8UlX4BBIHgL7a1nI5RJLYt1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2JjZCbEMbRrKBkCWuXZIIghXByMB8GA1UdIwQY
MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt
NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2
LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1NQoFW7
FL/s5OuqdavfI8bjRLR/LM6B+sIAiOkYYsmd0LKkbm6C+a/P3zLK4VXrAygmvC2s
lAV6MgxZ8FY8lu6plWOawB+IC/RD7NrK7qYiBDnnNQNKG45kfPMqBmksxrNnBa0q
e7QLVF99wLQAmRadFB87mcg6JAnaQORMoyPMOBMTUA3aRWtlvoW9KZ5ZhSpF9wms
OxmlutalchR7cBJyLY41j9jpAR9tdN0+ua5qHXDgAJaF9xcOXPRbdcMhaD1Tp++m
95Isv85ckTvBg829kFR95/gogXQUnfHpoZFXlErC4nnH02mIPnaBIqT5wMaohWce
1uLyNyrCe4AlfQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:17 2025 by rpki-client