Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: 5ltCiaCGo7F9f7tAQlnTIiRcmJbT/A8b2HOPHpvhPlc=
Subject key identifier: 64:2E:96:FD:41:C5:6C:02:63:88:F8:37:D2:E2:86:14:E0:7A:74:E8
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 0194BBCE522F9A3FCBBDFD207CD75C9E4B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 10E7
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: 84RQTiq+i3Hfg7Yv5JSOh8QK6uVtV3c+8Jz/UWuJgrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:2f:9a:3f:cb:bd:fd:20:7c:d7:5c:9e:4b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=642e96fd41c56c026388f837d2e28614e07a74e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:d1:e6:c6:df:86:6f:53:cc:d8:5a:36:bf:
42:da:d1:de:3c:73:3f:53:5b:a3:f8:7d:36:55:c0:
8f:b1:1b:c5:bd:7b:ce:92:64:06:af:45:ac:26:40:
33:93:92:62:60:9b:ef:17:d1:7d:31:3d:3b:95:83:
03:bc:60:94:f0:84:d0:74:d5:4c:b5:8f:98:a7:00:
a9:61:cc:16:45:de:39:7f:19:ab:b6:75:1a:7f:b3:
85:32:99:96:18:b9:67:2d:e4:03:41:61:cb:f9:f8:
e0:d4:2e:71:cf:96:ba:8b:c4:4f:51:3b:58:c1:35:
b7:7b:e4:19:e8:17:50:70:63:86:98:d1:53:48:98:
d3:90:f7:2e:4b:69:27:ae:4e:81:32:64:61:89:7c:
6a:bf:68:df:e5:31:01:ab:85:05:58:9d:28:8a:d7:
92:79:2b:6b:72:ca:6b:96:bb:39:3f:17:92:39:8c:
79:46:d1:fd:fa:70:c6:5a:bf:9c:e8:a9:80:ed:52:
2d:df:12:d2:e6:5a:80:9b:86:34:8a:9b:d9:91:4a:
5d:27:34:1c:cf:94:c3:b3:67:5f:fb:c2:41:39:f3:
d0:57:28:21:e5:eb:dc:63:2f:73:87:40:b0:e6:ca:
c0:6a:4c:15:34:78:8a:ef:92:8e:0d:c5:05:e8:c2:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:96:FD:41:C5:6C:02:63:88:F8:37:D2:E2:86:14:E0:7A:74:E8
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:6f:5a:63:6d:bd:31:2d:22:f5:77:62:c3:09:53:10:3c:
e4:0d:23:27:90:7e:49:4e:5b:c2:53:a3:28:22:49:e0:c8:f1:
b6:d3:a3:6b:0d:4b:dc:54:26:b5:89:19:a6:51:6a:9b:e0:d8:
fd:9a:2f:8f:7f:e5:ac:04:89:83:93:18:e0:56:8c:bd:0d:cb:
fc:eb:fd:1b:9e:d6:9d:52:da:2a:a3:8e:68:e1:f0:c5:d4:69:
0a:48:ff:ae:56:7c:4a:b3:9d:65:fb:2f:a6:3c:15:99:11:1b:
14:a6:45:90:0f:12:80:08:0e:bc:89:62:d9:97:a6:a1:02:c0:
f1:f0:a5:89:61:78:39:c7:f4:85:13:01:e1:0f:de:17:21:5f:
bc:92:62:fe:70:c5:bd:b0:ea:be:0a:a6:f6:0b:58:bb:ca:ef:
ec:59:97:a3:2f:13:d4:b7:ee:71:b9:a1:bb:a8:09:63:a4:ab:
b1:fa:60:8f:9f:2b:b2:9e:43:d3:13:a0:df:88:d0:67:99:cf:
55:10:07:66:9e:83:38:a3:78:2e:aa:c3:79:4c:8b:23:c3:fc:
ff:e8:08:22:5b:c1:6d:db:43:88:84:80:5a:ff:b3:a3:e2:5e:
a8:fb:48:d1:05:36:a9:c0:9e:10:00:dc:f9:cf:73:e9:be:f8:
e1:81:c9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlIvmj/Lvf0gfNdcnktoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZGQyMzE0ZGQ5YjdjNjFkNzFkNGRiZWRhOGZhMzk2NWM0
MjQ1NzAwHhcNMjUwMTMxMTAwMDQ4WhcNMjUwMjAxMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg2NDJlOTZmZDQxYzU2YzAyNjM4OGY4MzdkMmUyODYxNGUwN2E3NGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cDR5sbfhm9TzNhaNr9C2tHePHM/
U1uj+H02VcCPsRvFvXvOkmQGr0WsJkAzk5JiYJvvF9F9MT07lYMDvGCU8ITQdNVM
tY+YpwCpYcwWRd45fxmrtnUaf7OFMpmWGLlnLeQDQWHL+fjg1C5xz5a6i8RPUTtY
wTW3e+QZ6BdQcGOGmNFTSJjTkPcuS2knrk6BMmRhiXxqv2jf5TEBq4UFWJ0oiteS
eStrcsprlrs5PxeSOYx5RtH9+nDGWr+c6KmA7VIt3xLS5lqAm4Y0ipvZkUpdJzQc
z5TDs2df+8JBOfPQVygh5evcYy9zh0Cw5srAakwVNHiK75KODcUF6MKV5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQulv1BxWwCY4j4N9LihhTgenToMB8GA1UdIwQY
MBaAFJHdIxTdm3xh1x1NvtqPo5ZcQkVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2QwakZOMmJmR0hYSFUyLTJvLWpsbHhDUlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wNjNmYTQtMTdkZS00NTk1LWJjODYt
Y2U0YjYyNTBiYjRkLzEva2QwakZOMmJmR0hYSFUyLTJvLWpsbHhDUlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wNjNmYTQtMTdkZS00NTk1LWJjODYtY2U0YjYyNTBiYjRk
LzEva2QwakZOMmJmR0hYSFUyLTJvLWpsbHhDUlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFRvWmNt
vTEtIvV3YsMJUxA85A0jJ5B+SU5bwlOjKCJJ4MjxttOjaw1L3FQmtYkZplFqm+DY
/Zovj3/lrASJg5MY4FaMvQ3L/Ov9G57WnVLaKqOOaOHwxdRpCkj/rlZ8SrOdZfsv
pjwVmREbFKZFkA8SgAgOvIli2ZemoQLA8fCliWF4Ocf0hRMB4Q/eFyFfvJJi/nDF
vbDqvgqm9gtYu8rv7FmXoy8T1Lfucbmhu6gJY6Srsfpgj58rsp5D0xOg34jQZ5nP
VRAHZp6DOKN4LqrDeUyLI8P8/+gIIlvBbdtDiISAWv+zo+JeqPtI0QU2qcCeEADc
+c9z6b744YHJeg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:28 2025 by rpki-client