Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: m6z0rmlKdcTmWP5UcWhEJ3r9HCR+NjjLpyrwhSajs6o=
Subject key identifier: 41:CC:39:F4:5F:50:FF:8C:B2:50:15:C9:E5:0D:6B:53:8E:31:2C:65
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 0194BD175FB55E59EC79560E42336FEE41D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0528
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: RhqXXFuXRi866kJkWEiZUiEPzqg59ImmeCr+RF3rclM=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:b5:5e:59:ec:79:56:0e:42:33:6f:ee:41:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=41cc39f45f50ff8cb25015c9e50d6b538e312c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:4c:db:58:3a:a0:ef:fe:e4:0b:be:ed:80:
d6:c0:49:cb:e0:ea:a7:46:90:b6:8a:a3:ff:29:f4:
78:00:29:6e:00:13:01:a8:e1:17:51:10:d7:89:d2:
1c:63:73:87:b4:ed:0b:ef:90:c0:96:81:a0:9e:9d:
fb:8d:f4:16:20:bf:a0:b5:3e:ab:b0:b2:cb:6d:f9:
2f:0b:4a:08:96:6c:33:c8:5a:04:bf:7e:75:0c:59:
50:11:ae:cc:a4:7b:6e:78:8b:fa:fa:04:2d:90:3d:
a7:bb:33:9d:04:90:fb:8f:64:4c:bb:16:40:44:06:
29:87:d7:c3:8e:42:10:fa:fb:d9:f2:04:47:03:c1:
31:fa:45:c4:dc:fe:2e:54:05:2d:29:93:9f:5a:1c:
19:ff:0f:f7:96:c2:40:2d:dc:11:3c:3d:98:0e:dd:
ff:9e:46:1b:1e:8d:89:32:38:08:d9:31:48:e8:30:
b4:40:de:d7:18:27:07:a5:6c:fc:4e:5c:3e:27:ae:
09:b4:fa:af:8d:32:98:a2:d2:de:62:8a:31:6c:d1:
9d:dc:36:6e:dd:a2:90:7e:9c:76:a2:7b:32:45:4a:
46:f6:92:8b:32:4b:16:d0:a2:26:c2:e5:76:f0:fe:
5d:51:90:6b:82:68:30:c8:ac:76:e4:00:9f:10:00:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:39:F4:5F:50:FF:8C:B2:50:15:C9:E5:0D:6B:53:8E:31:2C:65
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:e1:e9:86:71:68:44:8a:7c:ac:ae:b6:8c:53:1a:0d:bd:
75:a8:a0:6e:ff:b1:9a:3d:ff:34:9f:57:dc:c9:c0:95:1b:3a:
6e:c6:5a:ff:9e:d5:d7:d3:d5:db:e0:90:f8:13:44:cb:c9:3c:
7b:3b:78:77:42:64:c8:f3:12:9b:61:a3:14:ef:74:d4:39:d5:
8a:d1:3c:00:14:ce:c9:cf:e9:3d:62:0f:9d:51:2d:4f:65:82:
04:63:77:d8:53:d1:6c:4a:f2:43:00:97:85:9e:14:ee:b9:19:
4c:32:7d:3c:6a:ca:92:b4:f1:82:f3:50:31:c0:a9:bd:04:b0:
18:95:cd:0e:96:d6:e0:fb:78:4a:ff:33:64:20:d6:af:03:1a:
7b:13:27:c6:f0:ee:9d:c3:2f:13:35:1e:ee:8b:75:f5:5d:b4:
bd:96:25:70:d6:e2:dc:a9:2f:40:c5:08:61:f0:f5:f4:f2:4a:
db:28:08:59:79:0c:de:24:5d:fe:eb:c2:00:14:d2:3c:cf:dc:
e1:43:59:ec:a0:ba:05:71:e7:8a:6d:d3:bd:8c:65:f8:ae:3d:
a9:2e:9c:a8:e9:3b:49:69:9f:0e:35:3e:df:61:2d:07:08:39:
1c:e2:ad:9b:cd:2f:0b:44:88:68:4b:8f:a5:94:5a:1a:db:6c:
69:08:2e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1+1XlnseVYOQjNv7kHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5
MTRmYmEwHhcNMjUwMTMxMTYwMDEyWhcNMjUwMjAxMTYwMDEyWjAzMTEwLwYDVQQD
Eyg0MWNjMzlmNDVmNTBmZjhjYjI1MDE1YzllNTBkNmI1MzhlMzEyYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBZM21g6oO/+5Au+7YDWwEnL4Oqn
RpC2iqP/KfR4ACluABMBqOEXURDXidIcY3OHtO0L75DAloGgnp37jfQWIL+gtT6r
sLLLbfkvC0oIlmwzyFoEv351DFlQEa7MpHtueIv6+gQtkD2nuzOdBJD7j2RMuxZA
RAYph9fDjkIQ+vvZ8gRHA8Ex+kXE3P4uVAUtKZOfWhwZ/w/3lsJALdwRPD2YDt3/
nkYbHo2JMjgI2TFI6DC0QN7XGCcHpWz8Tlw+J64JtPqvjTKYotLeYooxbNGd3DZu
3aKQfpx2onsyRUpG9pKLMksW0KImwuV28P5dUZBrgmgwyKx25ACfEAC2CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHMOfRfUP+MslAVyeUNa1OOMSxlMB8GA1UdIwQY
MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct
YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm
LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFnh6YZx
aESKfKyutoxTGg29daigbv+xmj3/NJ9X3MnAlRs6bsZa/57V19PV2+CQ+BNEy8k8
ezt4d0JkyPMSm2GjFO901DnVitE8ABTOyc/pPWIPnVEtT2WCBGN32FPRbEryQwCX
hZ4U7rkZTDJ9PGrKkrTxgvNQMcCpvQSwGJXNDpbW4Pt4Sv8zZCDWrwMaexMnxvDu
ncMvEzUe7ot19V20vZYlcNbi3KkvQMUIYfD19PJK2ygIWXkM3iRd/uvCABTSPM/c
4UNZ7KC6BXHnim3TvYxl+K49qS6cqOk7SWmfDjU+32EtBwg5HOKtm80vC0SIaEuP
pZRaGttsaQguFw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:05 2025 by rpki-client