Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
File: 001KO3R_ynAQOxfz29xQRcrOMt8.mft (raw, json)
Hash identifier: ehQzTtM4FWMvFHkdPPkmKO9TIvWOF/bgJbG+3ypH86Q=
Subject key identifier: 48:DA:ED:F2:05:7D:5D:F2:CA:E9:0D:24:43:C8:3B:1A:AE:57:14:40
Authority key identifier: D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
Certificate issuer: /CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Certificate serial: 0194BD4ED2C4BC893A8FFAED2F50326DEBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:47 +0000
Manifest this update: Fri 31 Jan 2025 17:00:47 +0000
Manifest next update: Sat 01 Feb 2025 17:00:47 +0000
Files and hashes: 1: 001KO3R_ynAQOxfz29xQRcrOMt8.crl (hash: LvBBVpvWjR8qHA+ncWJahbEi7NORgPMn4H905iP0KsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:d2:c4:bc:89:3a:8f:fa:ed:2f:50:32:6d:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Validity
Not Before: Jan 31 17:00:47 2025 GMT
Not After : Feb 1 17:00:47 2025 GMT
Subject: CN=48daedf2057d5df2cae90d2443c83b1aae571440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:47:d8:99:1a:bd:5c:03:0a:b0:57:b2:74:
42:60:31:76:4f:80:d4:17:10:d3:8d:1f:49:b3:b2:
79:99:83:01:cf:c2:61:77:29:73:5b:a0:86:4f:f2:
17:18:99:97:23:3e:2a:b8:cd:21:18:a0:4b:4f:60:
92:e8:34:16:3b:9c:1f:18:9a:32:52:21:47:58:af:
bc:de:d8:70:ae:36:a5:b1:92:10:a6:2d:a2:e7:7d:
3f:7b:cf:34:32:9a:df:9d:57:48:76:68:af:f6:4f:
92:ac:99:20:eb:b7:75:65:25:6c:e7:67:ed:c9:cd:
e6:12:33:c7:57:2d:ed:79:f5:52:1e:d5:9e:94:94:
7b:a3:aa:e7:82:ac:b6:09:03:bd:fb:eb:0b:e1:90:
95:be:01:48:6a:2d:0a:04:7b:0d:a1:23:86:28:cf:
e4:7e:50:2a:3a:7a:0f:d6:16:9f:14:81:07:02:e8:
e8:c8:14:08:65:2b:2f:ad:58:56:8c:13:4c:6c:8f:
76:6c:5c:19:92:da:6f:6d:32:6f:e5:3c:e6:ea:43:
d5:76:18:bc:f1:be:dd:0d:c5:36:ce:d4:8e:69:ca:
84:65:8e:1f:ac:81:e3:ba:7d:dc:1f:ab:a1:e3:60:
55:67:9f:23:29:a7:36:48:8f:09:b1:54:99:ef:16:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:ED:F2:05:7D:5D:F2:CA:E9:0D:24:43:C8:3B:1A:AE:57:14:40
X509v3 Authority Key Identifier:
keyid:D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:05:9f:fc:3f:36:b7:60:4c:11:92:7c:b7:df:b4:86:0d:db:
9a:a2:98:d8:15:80:80:92:73:fa:6c:e2:b8:68:e6:85:32:66:
ce:d7:9e:03:35:8f:b1:be:d7:ea:7e:46:d0:3c:29:90:c2:04:
17:c9:71:76:8d:38:ab:a9:e4:5b:a3:b1:31:cb:e6:fe:32:a4:
4a:86:b0:8f:21:88:11:70:73:d8:ce:1d:79:dd:9c:74:97:ef:
92:83:68:e1:47:ff:a1:dc:1e:86:1c:41:fb:66:0f:94:a6:9e:
42:75:5f:ad:23:b3:45:2b:58:21:b9:e9:33:7f:ed:c3:33:9e:
35:de:72:c7:fb:b6:11:36:f2:80:03:72:07:a0:09:59:ea:d2:
e4:03:5d:19:de:77:5a:4d:bb:76:c1:83:45:c9:aa:e2:9b:2e:
db:69:e7:bc:5c:7e:05:ec:32:72:50:b0:dc:7e:5d:10:c4:65:
8d:7a:e2:25:00:59:2b:c3:cf:36:e8:31:37:b8:3c:27:be:1b:
36:08:84:44:f5:05:b8:e7:0a:2d:87:a0:eb:21:03:22:a3:96:
78:bb:b9:55:ae:1e:82:14:25:d0:46:fd:08:f9:50:b6:a3:0c:
11:41:68:34:c0:86:1f:fc:d9:18:ff:d4:58:e3:ee:0e:56:c5:
a3:30:9d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TtLEvIk6j/rtL1AybeukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGQ0YTNiNzQ3ZmNhNzAxMDNiMTdmM2RiZGM1MDQ1Y2Fj
ZTMyZGYwHhcNMjUwMTMxMTcwMDQ3WhcNMjUwMjAxMTcwMDQ3WjAzMTEwLwYDVQQD
Eyg0OGRhZWRmMjA1N2Q1ZGYyY2FlOTBkMjQ0M2M4M2IxYWFlNTcxNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO5H2JkavVwDCrBXsnRCYDF2T4DU
FxDTjR9Js7J5mYMBz8JhdylzW6CGT/IXGJmXIz4quM0hGKBLT2CS6DQWO5wfGJoy
UiFHWK+83thwrjalsZIQpi2i530/e880MprfnVdIdmiv9k+SrJkg67d1ZSVs52ft
yc3mEjPHVy3tefVSHtWelJR7o6rngqy2CQO9++sL4ZCVvgFIai0KBHsNoSOGKM/k
flAqOnoP1hafFIEHAujoyBQIZSsvrVhWjBNMbI92bFwZktpvbTJv5Tzm6kPVdhi8
8b7dDcU2ztSOacqEZY4frIHjun3cH6uh42BVZ58jKac2SI8JsVSZ7xbZ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEja7fIFfV3yyukNJEPIOxquVxRAMB8GA1UdIwQY
MBaAFNNNSjt0f8pwEDsX89vcUEXKzjLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDIt
NDM3OTM0YzU4NDUzLzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDItNDM3OTM0YzU4NDUz
LzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1wWf/D82
t2BMEZJ8t9+0hg3bmqKY2BWAgJJz+mziuGjmhTJmzteeAzWPsb7X6n5G0DwpkMIE
F8lxdo04q6nkW6OxMcvm/jKkSoawjyGIEXBz2M4ded2cdJfvkoNo4Uf/odwehhxB
+2YPlKaeQnVfrSOzRStYIbnpM3/twzOeNd5yx/u2ETbygANyB6AJWerS5ANdGd53
Wk27dsGDRcmq4psu22nnvFx+BewyclCw3H5dEMRljXriJQBZK8PPNugxN7g8J74b
NgiERPUFuOcKLYeg6yEDIqOWeLu5Va4eghQl0Eb9CPlQtqMMEUFoNMCGH/zZGP/U
WOPuDlbFozCd8w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:54 2025 by rpki-client