Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: F0ugudoXrxV1L5VApSLcgPVTzNPA+fTSyXOM/37IjGY=
Subject key identifier: DF:2E:CC:6F:D8:0A:67:DC:60:C9:76:C9:48:37:E2:64:2C:19:A5:0E
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 0194BC3C095763E333C5AAB64C78A3E066B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 0FD8
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: 9ae6pzl5z12u6vEpyDxqRWpWAiDP1JA/X9ggY2DGJcE=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:57:63:e3:33:c5:aa:b6:4c:78:a3:e0:66:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=df2ecc6fd80a67dc60c976c94837e2642c19a50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:2d:1c:5f:72:10:e8:29:a7:31:e7:9f:82:
a9:84:47:ca:d2:52:71:01:40:9b:92:b8:18:81:fe:
f6:ac:ce:3d:75:d0:05:32:42:91:58:aa:84:b1:46:
7a:94:96:f1:fd:c2:52:7a:dc:07:5d:e5:53:0f:f6:
44:8e:ac:a0:d2:e9:e9:12:4c:71:2d:53:b8:b0:6a:
cb:c4:f4:14:56:12:57:49:e9:5a:14:98:42:3c:c6:
d3:20:dd:96:63:f1:c5:a9:56:72:30:ca:78:58:1a:
6c:07:3a:7a:3d:d6:c6:38:e4:c3:2b:80:07:9c:da:
fb:ec:f9:01:49:07:2b:70:0f:f9:50:b7:9f:f0:80:
06:b2:a2:10:94:87:ce:2c:aa:59:18:d5:65:25:ef:
2f:c4:6c:fb:f9:9a:7b:b0:8c:f9:15:1b:f3:45:6f:
64:8f:3e:f3:5e:e1:73:2d:2b:2c:4c:88:e2:b3:3a:
30:6e:42:7f:0f:d5:50:95:53:34:ba:11:67:bb:69:
d1:d4:f3:da:33:f6:84:81:01:55:72:27:f0:9d:b1:
c8:57:7b:fb:59:5a:c7:0d:c1:f3:e4:77:83:eb:13:
8d:c3:b1:c9:57:2d:45:aa:aa:00:27:e4:6c:28:51:
05:8f:71:d9:64:5e:8f:f1:65:3a:f5:a6:84:2e:58:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2E:CC:6F:D8:0A:67:DC:60:C9:76:C9:48:37:E2:64:2C:19:A5:0E
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:51:68:12:5e:0f:24:6b:e4:b1:53:65:b4:b8:56:41:24:65:
2e:d0:2e:fe:f6:3a:8d:50:d0:f1:18:ea:7f:6a:9a:97:97:02:
03:ad:53:6c:1b:71:0c:e4:ea:cf:33:a2:64:6d:c7:8e:b7:4f:
2c:f6:ef:10:52:d4:d3:8b:48:71:a9:89:ef:8e:e6:3e:fe:6a:
b9:14:d6:8a:fe:5f:45:91:ce:19:77:65:cc:3d:35:1f:d1:d0:
e9:4a:4a:b8:85:30:e6:65:df:33:e0:be:d6:01:af:63:1d:58:
2d:08:07:8c:3e:dd:ee:a3:d4:08:bf:5d:2e:04:3a:fc:34:11:
62:74:c9:c8:bd:dd:35:9c:67:f8:11:4f:76:d0:6f:c0:78:c6:
da:4a:bf:bb:a9:6e:d5:a2:b8:8a:de:00:66:9c:50:62:e7:4e:
95:1c:e5:5c:3d:1b:c8:ce:c4:b4:01:71:81:7e:28:ce:f3:a9:
53:81:2d:67:2a:90:0e:b7:33:10:c0:9b:64:80:37:a8:e8:19:
28:ef:f5:fa:8d:db:9e:bc:a3:1d:f7:f6:77:e8:81:03:43:6e:
7a:80:b8:73:32:6e:45:0b:cd:12:b3:f5:8a:fa:1f:9b:2e:12:
dd:8d:69:b4:cc:3b:14:a2:13:e0:85:ba:8f:70:91:1c:34:3f:
c8:c6:91:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAlXY+Mzxaq2THij4Ga0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl
ZDNlYzcwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
EyhkZjJlY2M2ZmQ4MGE2N2RjNjBjOTc2Yzk0ODM3ZTI2NDJjMTlhNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcUtHF9yEOgppzHnn4KphEfK0lJx
AUCbkrgYgf72rM49ddAFMkKRWKqEsUZ6lJbx/cJSetwHXeVTD/ZEjqyg0unpEkxx
LVO4sGrLxPQUVhJXSelaFJhCPMbTIN2WY/HFqVZyMMp4WBpsBzp6PdbGOOTDK4AH
nNr77PkBSQcrcA/5ULef8IAGsqIQlIfOLKpZGNVlJe8vxGz7+Zp7sIz5FRvzRW9k
jz7zXuFzLSssTIjiszowbkJ/D9VQlVM0uhFnu2nR1PPaM/aEgQFVcifwnbHIV3v7
WVrHDcHz5HeD6xONw7HJVy1FqqoAJ+RsKFEFj3HZZF6P8WU69aaELlhk3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8uzG/YCmfcYMl2yUg34mQsGaUOMB8GA1UdIwQY
MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt
NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5
LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1FoEl4P
JGvksVNltLhWQSRlLtAu/vY6jVDQ8Rjqf2qal5cCA61TbBtxDOTqzzOiZG3HjrdP
LPbvEFLU04tIcamJ747mPv5quRTWiv5fRZHOGXdlzD01H9HQ6UpKuIUw5mXfM+C+
1gGvYx1YLQgHjD7d7qPUCL9dLgQ6/DQRYnTJyL3dNZxn+BFPdtBvwHjG2kq/u6lu
1aK4it4AZpxQYudOlRzlXD0byM7EtAFxgX4ozvOpU4EtZyqQDrczEMCbZIA3qOgZ
KO/1+o3bnryjHff2d+iBA0NueoC4czJuRQvNErP1ivofmy4S3Y1ptMw7FKIT4IW6
j3CRHDQ/yMaRNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:57 2025 by rpki-client