Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: iUSowe/6Xv02ayicz6GTKQR2kgAKI2WsB1D0EtS7PgQ=
Subject key identifier: D8:73:74:D6:0F:55:C4:A2:34:63:7F:9D:F0:1A:D0:79:07:F9:14:E3
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 0194BCA99AD55EEEEE256DE50D4720129793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 117D
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: UPlLj8WPP6nfZDrUQJYHQjRmEEnpcNRpb1MAvQGHtPY=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:d5:5e:ee:ee:25:6d:e5:0d:47:20:12:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=d87374d60f55c4a234637f9df01ad07907f914e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:94:b5:ae:98:f7:5c:12:de:93:c7:87:f8:
73:6d:48:67:bb:e3:83:66:88:e2:d3:05:35:d3:17:
3a:07:ee:00:af:1e:51:c0:c1:be:a7:c0:f5:f4:59:
78:b1:cb:11:ee:fb:17:18:0a:fa:01:84:94:32:a9:
ec:30:dd:1a:67:ce:bc:6a:ee:73:8b:06:cf:b4:5a:
ee:78:92:98:a3:7c:01:de:ca:c6:d2:1b:30:80:89:
72:a4:ec:a0:f0:18:3d:c8:e7:68:67:6c:e5:2d:04:
65:8b:0d:fc:0f:91:c9:8e:20:bc:42:e1:fa:35:73:
d2:4d:99:ca:4c:56:a0:fb:76:61:b0:29:2c:84:2e:
1d:e5:43:a5:a2:ff:5a:7c:e9:4f:62:be:fd:6e:7d:
3c:dc:4f:7b:a1:fb:cc:e0:d1:83:28:7b:0a:72:9e:
85:4b:8b:32:53:81:f0:04:63:1f:0d:a0:61:5e:44:
dc:f0:6c:78:42:0d:73:6b:e0:0f:96:07:74:bc:87:
46:7a:5d:3d:0d:e0:24:65:6a:ec:5e:63:ad:a0:96:
76:13:8d:93:b4:74:29:1f:50:d9:e0:7b:13:a6:92:
b4:fd:3a:6d:6f:8f:38:e0:65:21:7f:da:02:4f:b9:
41:68:e2:35:d1:53:66:ca:01:19:07:6a:2b:16:be:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:73:74:D6:0F:55:C4:A2:34:63:7F:9D:F0:1A:D0:79:07:F9:14:E3
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5e:8d:a5:68:18:5d:7e:d6:d5:67:09:10:76:67:eb:34:2c:
9a:ec:99:53:6a:a6:95:0c:1b:76:4a:05:b7:3e:4c:33:72:c5:
45:46:c3:cd:03:b3:fc:cf:60:11:62:eb:8f:c8:43:79:7d:79:
da:01:2b:0a:d3:8a:a5:53:ff:33:09:e6:e4:52:9b:16:9e:3a:
24:ed:b3:bf:2d:e1:c0:0c:b8:a0:31:67:0f:79:a9:17:c3:93:
a7:52:43:c0:25:2e:86:14:48:35:7d:f8:69:e0:4d:37:2f:5b:
06:a2:fb:56:28:32:e7:c0:ad:27:90:8e:82:93:54:71:87:d8:
29:2c:ab:af:f7:7c:37:3a:13:47:1c:d8:29:86:ac:a1:9a:cf:
09:10:75:36:d2:04:b3:b8:81:69:e4:e1:73:3c:6b:1d:f8:da:
30:5f:03:75:39:de:9e:f1:4c:60:74:68:d9:bf:44:f7:51:3c:
9f:86:55:82:b0:4f:0f:1f:4f:c3:47:a9:28:dc:78:da:62:ff:
fa:fc:a0:f7:bd:b5:dd:fa:28:9b:83:b9:7f:95:f3:05:87:a0:
40:b6:9d:ea:ec:0d:03:7f:8c:d7:6d:f4:85:33:5f:ad:7a:9f:
80:ca:ff:57:aa:c4:49:30:6c:65:54:f0:df:0c:37:95:70:e2:
f2:19:04:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZrVXu7uJW3lDUcgEpeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl
MmJmZTIwHhcNMjUwMTMxMTQwMDE5WhcNMjUwMjAxMTQwMDE5WjAzMTEwLwYDVQQD
EyhkODczNzRkNjBmNTVjNGEyMzQ2MzdmOWRmMDFhZDA3OTA3ZjkxNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFWUta6Y91wS3pPHh/hzbUhnu+OD
Zoji0wU10xc6B+4Arx5RwMG+p8D19Fl4scsR7vsXGAr6AYSUMqnsMN0aZ868au5z
iwbPtFrueJKYo3wB3srG0hswgIlypOyg8Bg9yOdoZ2zlLQRliw38D5HJjiC8QuH6
NXPSTZnKTFag+3ZhsCkshC4d5UOlov9afOlPYr79bn083E97ofvM4NGDKHsKcp6F
S4syU4HwBGMfDaBhXkTc8Gx4Qg1za+APlgd0vIdGel09DeAkZWrsXmOtoJZ2E42T
tHQpH1DZ4HsTppK0/Tptb4844GUhf9oCT7lBaOI10VNmygEZB2orFr6+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhzdNYPVcSiNGN/nfAa0HkH+RTjMB8GA1UdIwQY
MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt
ODVhNTM0ZjE4MGZkLzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk
LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlF6NpWgY
XX7W1WcJEHZn6zQsmuyZU2qmlQwbdkoFtz5MM3LFRUbDzQOz/M9gEWLrj8hDeX15
2gErCtOKpVP/Mwnm5FKbFp46JO2zvy3hwAy4oDFnD3mpF8OTp1JDwCUuhhRINX34
aeBNNy9bBqL7Vigy58CtJ5COgpNUcYfYKSyrr/d8NzoTRxzYKYasoZrPCRB1NtIE
s7iBaeThczxrHfjaMF8DdTnenvFMYHRo2b9E91E8n4ZVgrBPDx9Pw0epKNx42mL/
+vyg97213foom4O5f5XzBYegQLad6uwNA3+M1230hTNfrXqfgMr/V6rESTBsZVTw
3ww3lXDi8hkEsA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:37 2025 by rpki-client