Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: aGazgf3zueGWhz/X4xhl6cya2FVroAqUXA5uXymswKk=
Subject key identifier: B7:96:66:6D:A4:32:54:39:D9:D3:91:4C:46:6C:44:AE:C7:28:53:37
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 0194BC729CC7EC00D42774044044A5E71FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 0206
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: oW/qgl2LLhtZhr6sD61xAxG4lnS0wQQY75Q6cHeKUIg=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9c:c7:ec:00:d4:27:74:04:40:44:a5:e7:1f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=b796666da4325439d9d3914c466c44aec7285337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:14:bc:60:0b:62:6e:56:1b:ef:41:7b:c7:bc:
d4:7e:19:c3:b3:2c:6d:d6:8a:bd:b2:e9:a6:7c:70:
d4:d4:8e:71:11:87:c2:78:74:21:cd:10:6e:8b:cf:
9c:96:dd:23:d9:d3:8c:4e:86:94:67:7f:e4:bd:bc:
00:cd:fe:f3:75:7e:41:1b:08:73:81:af:8f:9b:4d:
73:19:64:68:0d:08:6e:2a:55:09:d7:bd:26:ee:c9:
f4:3c:f1:7e:b7:6a:47:0e:28:4a:3b:e6:88:fc:33:
b7:af:46:ff:da:78:0c:b7:5c:07:af:06:87:fb:bd:
ed:ea:95:d6:ad:bd:5b:87:8f:dc:9c:55:17:27:9f:
4e:d8:19:57:e0:18:bb:39:e4:e5:f6:59:c1:14:02:
14:d6:88:d9:bd:46:7e:6b:20:97:6f:d7:62:d1:0e:
36:1e:86:93:0f:23:91:44:b0:83:c2:84:5d:0c:fa:
2a:96:20:79:e0:1e:64:ea:7f:70:38:de:bd:50:c2:
c6:37:de:d6:ec:c2:06:6c:66:fa:b6:8d:67:07:d8:
b3:1b:8f:89:f7:9c:b3:5c:65:34:3c:ec:8c:1e:16:
ab:c5:c2:b5:6c:d0:29:f7:fb:c7:e8:73:43:19:f0:
26:f5:39:60:31:0c:63:32:68:7d:29:5f:96:b5:86:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:66:6D:A4:32:54:39:D9:D3:91:4C:46:6C:44:AE:C7:28:53:37
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c6:8e:2a:fa:02:b5:6c:02:df:25:f8:48:d1:fb:f8:20:9b:
06:a7:10:30:c5:de:d2:87:0f:a1:8e:2a:56:fc:ad:97:e1:76:
d1:70:7b:ea:c0:7a:e4:b4:30:17:4b:04:10:a3:d4:7d:91:ec:
52:b7:0e:2c:3d:34:dd:3c:64:0f:f0:f5:52:31:73:55:73:93:
f5:e3:c5:e9:1b:df:51:16:e2:ca:e5:11:a4:68:e0:37:ec:4b:
b9:45:c5:9b:92:dd:17:36:79:c6:40:27:24:a7:67:38:5a:4d:
bb:d4:33:c5:8a:df:6c:87:77:e1:e2:ad:27:92:b6:61:01:2c:
45:59:35:19:fa:cc:75:18:fb:bd:2e:bd:b7:43:ca:af:39:e1:
4e:a6:87:97:9a:ba:37:c4:16:8c:ac:ca:7f:35:4b:46:32:83:
5a:f5:2e:3a:db:15:9e:1c:40:e7:7c:db:4e:16:5d:bf:8b:09:
db:6c:b2:95:af:d6:da:ab:3d:c5:16:f3:87:e6:8a:09:08:da:
1d:f2:8f:48:f6:b2:5e:9b:ac:d6:09:0a:1d:c5:00:6d:3f:9b:
42:02:22:c4:57:3c:b6:29:e1:fe:2d:85:35:0a:e8:28:76:01:
29:ca:db:2f:e1:ae:9c:c9:6c:60:9f:22:c9:83:14:cf:3e:43:
92:55:02:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpzH7ADUJ3QEQESl5x/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx
ZDliYjQwHhcNMjUwMTMxMTMwMDE1WhcNMjUwMjAxMTMwMDE1WjAzMTEwLwYDVQQD
EyhiNzk2NjY2ZGE0MzI1NDM5ZDlkMzkxNGM0NjZjNDRhZWM3Mjg1MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xS8YAtiblYb70F7x7zUfhnDsyxt
1oq9summfHDU1I5xEYfCeHQhzRBui8+clt0j2dOMToaUZ3/kvbwAzf7zdX5BGwhz
ga+Pm01zGWRoDQhuKlUJ170m7sn0PPF+t2pHDihKO+aI/DO3r0b/2ngMt1wHrwaH
+73t6pXWrb1bh4/cnFUXJ59O2BlX4Bi7OeTl9lnBFAIU1ojZvUZ+ayCXb9di0Q42
HoaTDyORRLCDwoRdDPoqliB54B5k6n9wON69UMLGN97W7MIGbGb6to1nB9izG4+J
95yzXGU0POyMHharxcK1bNAp9/vH6HNDGfAm9TlgMQxjMmh9KV+WtYZ00QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeWZm2kMlQ52dORTEZsRK7HKFM3MB8GA1UdIwQY
MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt
OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3
LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsaOKvoC
tWwC3yX4SNH7+CCbBqcQMMXe0ocPoY4qVvytl+F20XB76sB65LQwF0sEEKPUfZHs
UrcOLD003TxkD/D1UjFzVXOT9ePF6RvfURbiyuURpGjgN+xLuUXFm5LdFzZ5xkAn
JKdnOFpNu9QzxYrfbId34eKtJ5K2YQEsRVk1GfrMdRj7vS69t0PKrznhTqaHl5q6
N8QWjKzKfzVLRjKDWvUuOtsVnhxA53zbThZdv4sJ22yyla/W2qs9xRbzh+aKCQja
HfKPSPayXpus1gkKHcUAbT+bQgIixFc8tinh/i2FNQroKHYBKcrbL+GunMlsYJ8i
yYMUzz5DklUCLw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:35 2025 by rpki-client