Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier: 1Rxc7RK3sbyxpKm8CuEfxTi9pDqv2x6kSa3vsQFsGyk=
Subject key identifier: 4C:8A:D4:D0:D6:82:20:C2:CD:F2:77:CF:A2:88:F2:D2:EF:29:0A:B7
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial: 0194BC3BEFD831B147C8F4D5F2A5D49A7F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number: 0AA6
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: cMvT6xEqEo83MfyxWv3Z60kLOlc9x80iJnT1gU9LJYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ef:d8:31:b1:47:c8:f4:d5:f2:a5:d4:9a:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=4c8ad4d0d68220c2cdf277cfa288f2d2ef290ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:58:8e:cc:b6:ee:07:38:2a:05:7d:88:e4:
7e:c4:b6:0a:9a:11:d0:8a:fd:75:3d:f1:4b:e1:ac:
a9:2a:fc:a2:47:cb:e2:94:f2:f0:55:1b:c3:a5:c6:
e0:9e:a4:d0:3b:b0:1c:fc:58:e5:78:b3:37:ae:99:
94:c7:7b:52:42:bb:f7:8c:01:a6:37:f9:b7:21:63:
5c:13:65:a1:da:17:a5:00:28:28:92:cb:40:88:b5:
e2:2b:b1:70:53:eb:ce:10:37:d6:55:f5:75:34:d2:
57:ad:80:a2:bc:7e:e0:51:d8:df:dc:b6:61:66:8f:
8d:05:ae:f6:00:2b:fc:30:e9:16:29:0a:c0:f2:41:
73:c4:0c:32:34:2a:38:bf:bc:ea:36:e9:da:5b:66:
da:e4:9b:33:87:3f:26:7c:13:d0:2d:02:b2:49:a4:
e9:f8:32:4e:33:4d:fa:fe:dd:72:bb:11:67:bf:68:
72:cd:a9:13:43:52:2d:37:1f:3f:4a:dd:0c:c0:d8:
21:8a:82:e4:a8:f5:0a:5a:0e:d4:c8:1d:73:2b:a7:
d8:0f:7c:e5:5e:61:fe:f0:47:a3:03:6e:a4:c2:1f:
29:6f:49:36:94:5a:bd:f5:01:1b:11:64:8d:de:44:
90:88:d0:b8:2c:1f:d4:14:4f:61:20:6f:dc:96:54:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:D4:D0:D6:82:20:C2:CD:F2:77:CF:A2:88:F2:D2:EF:29:0A:B7
X509v3 Authority Key Identifier:
keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:af:11:de:a9:c1:bc:f7:77:29:8d:e4:29:55:3a:eb:b4:
3b:25:98:11:03:79:ee:90:17:2d:24:2d:19:00:a9:f2:61:05:
72:6e:f0:f7:a4:da:a9:7f:1d:1f:c9:26:f1:5f:77:32:d8:86:
6d:a9:6d:ee:85:52:ad:df:3f:7a:30:5e:aa:2f:58:0b:67:dd:
bb:a1:18:fc:01:9f:e8:01:6a:a0:06:15:2c:ce:77:46:07:91:
8a:e7:24:7a:6f:1a:e0:f4:5a:ab:65:a1:71:83:e2:e0:ea:cd:
b1:34:03:f3:27:a7:c1:9d:04:31:f4:2e:c3:27:dd:7a:9a:a8:
4d:e9:14:59:92:92:2f:bc:c7:84:a3:4d:ef:f8:35:b5:59:9a:
1e:20:93:64:5b:6a:31:0d:5e:2d:b6:b6:6f:06:74:ae:10:19:
01:a2:c6:97:e9:89:68:4f:06:90:91:fe:d7:db:65:09:f9:28:
a5:7b:aa:e7:9b:50:c0:29:d6:e9:9e:de:9d:7a:98:76:0b:fa:
11:58:bf:f4:f4:ae:49:ca:ff:4c:82:f1:8e:72:77:17:cd:96:
f8:bc:d8:a7:4f:58:e6:68:5e:b6:06:6a:4e:7b:44:12:56:bd:
87:00:2e:8d:1f:0d:cc:cd:89:0f:4b:21:8c:28:89:6c:29:9e:
16:30:07:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+/YMbFHyPTV8qXUmn9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNzgzMGQ5NDFlZTA5MGE4ZTMyMzQ4Zjk3YjgzMDhmZDFj
ZTA5ZmQwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
Eyg0YzhhZDRkMGQ2ODIyMGMyY2RmMjc3Y2ZhMjg4ZjJkMmVmMjkwYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbhYjsy27gc4KgV9iOR+xLYKmhHQ
iv11PfFL4aypKvyiR8vilPLwVRvDpcbgnqTQO7Ac/FjleLM3rpmUx3tSQrv3jAGm
N/m3IWNcE2Wh2helACgokstAiLXiK7FwU+vOEDfWVfV1NNJXrYCivH7gUdjf3LZh
Zo+NBa72ACv8MOkWKQrA8kFzxAwyNCo4v7zqNunaW2ba5Jszhz8mfBPQLQKySaTp
+DJOM036/t1yuxFnv2hyzakTQ1ItNx8/St0MwNghioLkqPUKWg7UyB1zK6fYD3zl
XmH+8EejA26kwh8pb0k2lFq99QEbEWSN3kSQiNC4LB/UFE9hIG/cllQMIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyK1NDWgiDCzfJ3z6KI8tLvKQq3MB8GA1UdIwQY
MBaAFJF4MNlB7gkKjjI0j5e4MI/Rzgn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mZjJmZDAtNjI0ZC00N2Y4LWJlOWYt
ZDFmMTgwM2IxODEyLzEva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mZjJmZDAtNjI0ZC00N2Y4LWJlOWYtZDFmMTgwM2IxODEy
LzEva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkR2vEd6p
wbz3dymN5ClVOuu0OyWYEQN57pAXLSQtGQCp8mEFcm7w96TaqX8dH8km8V93MtiG
balt7oVSrd8/ejBeqi9YC2fdu6EY/AGf6AFqoAYVLM53RgeRiuckem8a4PRaq2Wh
cYPi4OrNsTQD8yenwZ0EMfQuwyfdepqoTekUWZKSL7zHhKNN7/g1tVmaHiCTZFtq
MQ1eLba2bwZ0rhAZAaLGl+mJaE8GkJH+19tlCfkopXuq55tQwCnW6Z7enXqYdgv6
EVi/9PSuScr/TILxjnJ3F82W+LzYp09Y5mhetgZqTntEEla9hwAujR8NzM2JD0sh
jCiJbCmeFjAHRA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:06 2025 by rpki-client