Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: G94GA4P6kI3vbdWIL+GmAfao1SyHS9iVrSwctKL9uHs=
Subject key identifier: AA:D1:59:A0:00:A6:3C:53:D9:CA:7B:59:82:85:FB:DE:11:30:F2:03
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 0194BBCE15A05A413AE1FCE646B1613DA76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: nOzO8yMKdRHYnotyIrgjxESVFfoww73vhTiDiEAuXM8=)
2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:15:a0:5a:41:3a:e1:fc:e6:46:b1:61:3d:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=aad159a000a63c53d9ca7b598285fbde1130f203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:ac:76:b4:69:67:ad:8e:73:34:3d:a4:4b:
73:a6:0c:79:0b:a2:b7:7a:3b:6c:f9:22:ce:0b:30:
66:64:1e:0a:3c:07:20:c3:c1:5f:80:36:39:a0:bb:
ee:cc:b0:7e:c5:2d:d3:06:c1:53:e1:4d:cf:d6:1a:
1c:bf:3a:1e:90:90:ea:1c:63:43:31:7a:3d:78:5c:
5e:e2:d4:30:05:4f:92:b2:cf:2f:b2:86:37:c2:ad:
2c:e3:3c:f4:77:80:2d:05:76:da:ea:0c:c0:23:c8:
ca:6b:67:0b:45:3b:ac:37:81:35:76:3a:30:ca:41:
ee:b5:af:96:96:3b:fe:34:84:78:07:46:ba:8e:92:
0c:32:30:a2:53:2f:17:a1:c1:22:8c:db:4b:c4:03:
52:c0:e5:24:5b:c8:d1:75:10:07:7e:0e:5e:3a:f7:
ab:af:4f:74:28:3e:c6:b0:47:2c:38:49:2f:3a:ca:
1a:42:d2:52:d4:e9:50:fc:e0:a2:93:f9:2a:ab:21:
2f:54:4e:86:54:75:26:b9:78:b0:28:d8:6e:d2:2a:
e6:ae:27:74:d7:69:61:b1:c6:a8:d2:5a:74:51:c7:
04:8c:cd:64:14:1f:a1:ea:7c:72:bb:04:2f:20:a0:
b4:7c:82:38:f5:8b:22:6f:90:71:dd:fe:8d:88:83:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:59:A0:00:A6:3C:53:D9:CA:7B:59:82:85:FB:DE:11:30:F2:03
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:65:85:48:76:5d:cd:6a:15:2d:27:0b:77:1b:4b:0d:dd:15:
15:38:31:cd:b8:13:ef:c1:03:a0:41:7b:6c:f7:d6:33:56:3e:
fd:a8:49:de:ba:c0:02:4c:d7:2e:50:8b:fc:2a:ed:4c:25:b9:
83:c5:74:63:5b:e8:f0:51:58:2a:fe:b9:54:ef:33:75:3e:26:
c6:53:20:29:a6:fe:17:f4:05:e8:fa:4c:c5:7f:94:af:b5:5e:
77:c1:ab:e5:07:10:27:7c:af:e7:d1:aa:2e:4d:12:33:24:b3:
4e:07:f8:20:19:13:68:71:d8:01:6b:1c:e0:06:d8:fe:3f:24:
56:66:bb:f8:a9:29:d4:34:2f:08:6c:b6:5d:63:a7:02:4d:3b:
5e:be:e2:63:fb:39:ed:14:f3:92:49:1e:f9:08:16:d7:ec:5a:
83:d9:67:5f:29:9d:3d:83:c0:23:28:d2:bb:72:16:2a:6f:41:
6b:ac:89:28:27:2a:3a:58:41:05:11:75:d6:ed:ec:b7:22:de:
d5:e3:01:40:77:2e:6c:7f:3c:47:c4:60:54:c4:d5:cd:82:36:
13:3d:cf:4b:cf:a9:f4:8d:1f:57:60:72:be:e1:36:42:5d:3f:
3a:a5:1c:01:e6:1d:5c:36:b2:51:6e:73:c4:e5:0f:e6:2d:5e:
b4:02:1a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhWgWkE64fzmRrFhPadvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi
ZmY2NTIwHhcNMjUwMTMxMTAwMDMyWhcNMjUwMjAxMTAwMDMyWjAzMTEwLwYDVQQD
EyhhYWQxNTlhMDAwYTYzYzUzZDljYTdiNTk4Mjg1ZmJkZTExMzBmMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1isdrRpZ62OczQ9pEtzpgx5C6K3
ejts+SLOCzBmZB4KPAcgw8FfgDY5oLvuzLB+xS3TBsFT4U3P1hocvzoekJDqHGND
MXo9eFxe4tQwBU+Sss8vsoY3wq0s4zz0d4AtBXba6gzAI8jKa2cLRTusN4E1djow
ykHuta+Wljv+NIR4B0a6jpIMMjCiUy8XocEijNtLxANSwOUkW8jRdRAHfg5eOver
r090KD7GsEcsOEkvOsoaQtJS1OlQ/OCik/kqqyEvVE6GVHUmuXiwKNhu0irmrid0
12lhscao0lp0UccEjM1kFB+h6nxyuwQvIKC0fII49Ysib5Bx3f6NiINIZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrRWaAApjxT2cp7WYKF+94RMPIDMB8GA1UdIwQY
MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt
YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky
LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGWFSHZd
zWoVLScLdxtLDd0VFTgxzbgT78EDoEF7bPfWM1Y+/ahJ3rrAAkzXLlCL/CrtTCW5
g8V0Y1vo8FFYKv65VO8zdT4mxlMgKab+F/QF6PpMxX+Ur7Ved8Gr5QcQJ3yv59Gq
Lk0SMySzTgf4IBkTaHHYAWsc4AbY/j8kVma7+Kkp1DQvCGy2XWOnAk07Xr7iY/s5
7RTzkkke+QgW1+xag9lnXymdPYPAIyjSu3IWKm9Ba6yJKCcqOlhBBRF11u3styLe
1eMBQHcubH88R8RgVMTVzYI2Ez3PS8+p9I0fV2ByvuE2Ql0/OqUcAeYdXDayUW5z
xOUP5i1etAIaKw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:02 2025 by rpki-client