Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: JAsLC8XM9fEVaNTKTlXI+dv4DNkygZr4B8Su2r+jvj8=
Subject key identifier: 21:66:23:AD:E7:53:DA:1D:49:EF:71:AC:55:E8:C2:77:87:15:F1:51
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 0194BD4E936CDF6D23087DDCCF3549455753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 0214
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 2Erepc7c7P1VRx_bLNiYu7weRzk.roa (hash: k2SMyfwtPMsgu8pAJX36t6HmVMk0LqM07DF6s7B27wo=)
2: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: gzMy8j5PfuMe0z4C59FAPeiqdUzWbejNbJRGVr5usFQ=)
3: L_UMuGgef__KCIxYo719-pYnMY0.roa (hash: qQUOKChy81kdhWvOW3DW3K7T6hbp7d9kPXUCB0/Qv9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:6c:df:6d:23:08:7d:dc:cf:35:49:45:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=216623ade753da1d49ef71ac55e8c2778715f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:78:ae:9d:f6:87:14:c2:c5:0d:a0:e8:3e:
c4:7a:10:18:e3:22:cd:28:92:87:08:ae:2a:6d:ce:
a7:fc:a5:a6:58:db:13:03:15:33:bb:fc:05:21:76:
7a:f5:56:2c:0f:84:79:25:ef:16:46:ce:35:db:93:
a1:0a:84:56:9e:6c:ad:39:bb:6d:89:b2:94:6e:1d:
76:12:28:a2:e6:10:90:6b:3a:64:10:95:fc:8c:87:
5d:e0:d7:bd:32:0c:fa:da:88:28:60:ca:44:e0:f8:
d9:13:a7:4d:8d:53:34:e4:b4:19:ad:3b:1c:9e:28:
d3:02:2d:30:00:4a:94:ea:da:32:4e:a2:ab:58:89:
95:99:d7:a9:7d:6f:19:f1:2e:c1:e2:01:cb:cc:29:
66:78:22:35:b8:b8:33:f1:9f:ba:20:16:0a:97:4b:
a6:8a:21:f8:81:f0:c8:73:d1:b5:e0:34:46:49:2e:
ba:99:d4:0b:90:0e:4a:ae:a7:b7:e5:18:c2:38:1c:
10:f8:4f:04:e0:7f:4b:b8:e8:ae:84:c9:4d:6e:f8:
06:5b:55:5e:67:90:f5:58:3a:11:81:40:58:91:28:
e3:ec:0d:2c:ed:7d:fa:27:3f:cd:53:c4:59:ed:80:
e7:46:aa:4f:5c:c8:ce:e4:88:14:59:23:f9:16:e2:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:66:23:AD:E7:53:DA:1D:49:EF:71:AC:55:E8:C2:77:87:15:F1:51
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:6f:90:84:12:f0:38:7d:e9:ca:3c:70:bf:03:bc:fc:c4:
4d:6d:45:eb:90:42:4d:fd:d3:92:cd:88:ac:e5:46:e2:09:86:
9e:47:b5:8d:56:a9:f5:cf:3d:09:fe:46:6e:d9:8d:a2:0b:cb:
2d:af:b9:c2:2c:e8:60:ca:05:64:e6:78:ae:68:5e:8d:ea:b0:
5a:82:dc:c5:61:b4:bb:03:4c:0f:ae:03:c9:ea:0a:d5:0f:5b:
5e:ef:92:8c:cc:fb:0c:4c:a9:f3:3c:76:b9:f9:a5:80:bb:4a:
6e:09:9c:66:fc:37:aa:d0:34:04:8c:da:a4:26:2a:d2:08:34:
0b:c4:60:62:1a:54:78:e9:70:a9:a5:7b:4b:90:dd:c5:e8:ca:
7d:da:b6:83:e3:2a:7a:7c:04:f7:57:98:eb:fe:c5:cb:7c:89:
b3:14:c9:4e:95:61:f4:12:cf:b5:8f:25:c7:a5:40:08:e0:bb:
53:4c:11:7d:b1:4e:a8:49:5c:d4:2e:db:43:48:48:81:72:2c:
95:02:6a:10:fa:0b:30:e6:20:09:e7:aa:c9:9d:65:24:b8:56:
fd:23:d4:b5:9e:3f:58:d5:8c:d3:54:5a:e4:68:f2:d7:34:a6:
43:bc:4d:42:1f:70:e4:07:ef:df:94:15:0a:25:53:a2:07:dc:
7a:4c:19:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpNs320jCH3czzVJRVdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODVjYzQzZDgwNmEyMWI2MzMzMDIxOWViNjM4YmIxYmE0
OWFlODAwHhcNMjUwMTMxMTcwMDMwWhcNMjUwMjAxMTcwMDMwWjAzMTEwLwYDVQQD
EygyMTY2MjNhZGU3NTNkYTFkNDllZjcxYWM1NWU4YzI3Nzg3MTVmMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkN4rp32hxTCxQ2g6D7EehAY4yLN
KJKHCK4qbc6n/KWmWNsTAxUzu/wFIXZ69VYsD4R5Je8WRs4125OhCoRWnmytObtt
ibKUbh12Eiii5hCQazpkEJX8jIdd4Ne9Mgz62ogoYMpE4PjZE6dNjVM05LQZrTsc
nijTAi0wAEqU6toyTqKrWImVmdepfW8Z8S7B4gHLzClmeCI1uLgz8Z+6IBYKl0um
iiH4gfDIc9G14DRGSS66mdQLkA5Krqe35RjCOBwQ+E8E4H9LuOiuhMlNbvgGW1Ve
Z5D1WDoRgUBYkSjj7A0s7X36Jz/NU8RZ7YDnRqpPXMjO5IgUWSP5FuIefwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFmI63nU9odSe9xrFXowneHFfFRMB8GA1UdIwQY
MBaAFCmFzEPYBqIbYzMCGetji7G6Sa6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mM2ZlZjQtNDVkYS00YjQzLTk4YzIt
NGRmODg0MGVmYjE3LzEvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9mM2ZlZjQtNDVkYS00YjQzLTk4YzItNGRmODg0MGVmYjE3
LzEvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMRvkIQS
8Dh96co8cL8DvPzETW1F65BCTf3Tks2IrOVG4gmGnke1jVap9c89Cf5GbtmNogvL
La+5wizoYMoFZOZ4rmhejeqwWoLcxWG0uwNMD64DyeoK1Q9bXu+SjMz7DEyp8zx2
ufmlgLtKbgmcZvw3qtA0BIzapCYq0gg0C8RgYhpUeOlwqaV7S5DdxejKfdq2g+Mq
enwE91eY6/7Fy3yJsxTJTpVh9BLPtY8lx6VACOC7U0wRfbFOqElc1C7bQ0hIgXIs
lQJqEPoLMOYgCeeqyZ1lJLhW/SPUtZ4/WNWM01Ra5Gjy1zSmQ7xNQh9w5Afv35QV
CiVTogfcekwZcg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:09 2025 by rpki-client