Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: Qab2DZPVXDWtsvA1V5gPGunbVAmSThehkbdkfuUNH4c=
Subject key identifier: B5:1C:D0:F1:6B:A1:1F:76:69:1A:1B:90:0D:5C:03:66:DC:E7:09:B6
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 0194BC051E9E1E9D45D3939FDE067244CA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: s0JTb40VA35SkkO1qxrWQzxM5QaS0S+7jsaAcmyneIs=)
2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1e:9e:1e:9d:45:d3:93:9f:de:06:72:44:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=b51cd0f16ba11f76691a1b900d5c0366dce709b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:7e:60:67:bd:53:14:a4:fd:4f:5c:2a:1d:
e9:7a:9e:5b:9a:0d:a3:eb:72:07:b2:0c:44:52:42:
a3:79:4f:ba:90:6e:8d:39:94:68:3e:00:7b:e8:b0:
24:67:9f:78:ee:a4:02:39:89:23:85:4c:fd:39:3a:
1f:b0:b8:c7:18:26:0e:fc:6e:2c:85:25:5f:3d:5a:
db:4d:d6:4d:60:7b:88:81:12:67:ce:69:c8:ea:4e:
46:88:a1:03:e1:39:6e:7b:28:0c:8c:bd:4c:35:6e:
7a:22:88:af:c6:b0:86:28:34:65:9a:c8:aa:1d:68:
4a:7c:d1:ae:56:9d:a7:e2:bb:55:6d:9b:a4:ab:6f:
07:14:7a:49:6a:85:f7:5d:33:fe:78:3d:c1:93:a9:
1f:8e:44:04:7a:67:38:43:bd:ff:13:ac:08:25:f1:
4a:47:bb:99:41:52:6c:e9:ad:e0:32:4e:8e:97:de:
ba:bc:bd:6e:d6:46:60:b9:9d:5d:94:0a:37:88:60:
1e:6e:00:f6:36:47:25:81:34:91:3f:bf:81:e6:83:
e9:79:0a:a3:a5:b3:ba:03:42:ee:88:40:eb:99:02:
34:d6:fe:ec:23:20:33:55:8b:d6:5f:ed:f6:d0:da:
64:22:06:2f:be:10:4c:8a:bd:15:e4:ab:dd:ce:71:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:D0:F1:6B:A1:1F:76:69:1A:1B:90:0D:5C:03:66:DC:E7:09:B6
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4a:6b:70:16:b6:19:4c:89:af:5a:04:60:0e:88:e9:7d:d7:
ab:6f:71:f1:50:0c:46:f4:95:1e:58:8f:95:03:7a:37:68:9b:
f7:90:3e:d3:4c:6c:60:a4:44:1e:e2:43:31:72:ce:63:a1:aa:
38:2a:bb:39:eb:ee:e8:04:d2:d5:86:b1:4e:ba:98:7e:6e:7a:
5c:78:48:97:15:65:1e:8a:40:fe:ea:b7:b9:23:fd:12:c9:d9:
a4:97:fa:26:cf:11:5a:1a:bc:8f:a7:70:ef:16:37:81:91:81:
43:06:ac:16:af:d8:ac:ef:0c:5e:42:51:ea:68:d6:6f:63:ba:
2c:7e:9c:73:3a:3d:5b:9b:b5:6b:04:d5:41:75:be:73:64:ae:
8b:b3:de:35:2c:8a:a1:57:29:57:79:8d:73:f0:1f:3f:a8:7c:
08:a0:c2:35:51:bf:a1:19:9a:be:96:a2:ce:52:86:93:73:91:
0d:fb:14:43:57:84:64:31:33:f6:d8:14:ba:c2:0f:33:ab:b2:
96:f6:65:4c:c8:a0:84:7c:94:30:66:a4:df:64:6c:39:ae:6e:
09:43:d2:a0:f5:6c:0e:ce:61:e8:ef:20:5d:a5:6a:08:c7:b3:
0c:83:cd:89:fa:2e:05:93:2b:42:c7:fe:7e:ad:3c:3d:92:98:
12:2f:bb:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BR6eHp1F05Of3gZyRMoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmUzZGZhNzdlYjAyMDFjODU2ZDFlMWViZjAzMmJjYzhi
MTI0ZDgwHhcNMjUwMTMxMTEwMDM5WhcNMjUwMjAxMTEwMDM5WjAzMTEwLwYDVQQD
EyhiNTFjZDBmMTZiYTExZjc2NjkxYTFiOTAwZDVjMDM2NmRjZTcwOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpN+YGe9UxSk/U9cKh3pep5bmg2j
63IHsgxEUkKjeU+6kG6NOZRoPgB76LAkZ5947qQCOYkjhUz9OTofsLjHGCYO/G4s
hSVfPVrbTdZNYHuIgRJnzmnI6k5GiKED4TlueygMjL1MNW56IoivxrCGKDRlmsiq
HWhKfNGuVp2n4rtVbZukq28HFHpJaoX3XTP+eD3Bk6kfjkQEemc4Q73/E6wIJfFK
R7uZQVJs6a3gMk6Ol966vL1u1kZguZ1dlAo3iGAebgD2NkclgTSRP7+B5oPpeQqj
pbO6A0LuiEDrmQI01v7sIyAzVYvWX+320NpkIgYvvhBMir0V5KvdznHzVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUc0PFroR92aRobkA1cA2bc5wm2MB8GA1UdIwQY
MBaAFCn+Pfp36wIByFbR4evwMrzIsSTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUt
YmViZWMyMzM2ZDQ4LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iZjI0MzAtMzJiMC00OTNjLWFjYmUtYmViZWMyMzM2ZDQ4
LzEvS2Y0OS1uZnJBZ0hJVnRIaDZfQXl2TWl4Sk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkprcBa2
GUyJr1oEYA6I6X3Xq29x8VAMRvSVHliPlQN6N2ib95A+00xsYKREHuJDMXLOY6Gq
OCq7Oevu6ATS1YaxTrqYfm56XHhIlxVlHopA/uq3uSP9EsnZpJf6Js8RWhq8j6dw
7xY3gZGBQwasFq/YrO8MXkJR6mjWb2O6LH6cczo9W5u1awTVQXW+c2Sui7PeNSyK
oVcpV3mNc/AfP6h8CKDCNVG/oRmavpaizlKGk3ORDfsUQ1eEZDEz9tgUusIPM6uy
lvZlTMighHyUMGak32RsOa5uCUPSoPVsDs5h6O8gXaVqCMezDIPNifouBZMrQsf+
fq08PZKYEi+7Lw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:10 2025 by rpki-client