Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: S1pCeSZRvTqsvbctfMbvsS17FgGo0fvtdtGiGKu2Y/s=
Subject key identifier: F0:8B:15:58:DC:8F:5C:E9:4E:E8:91:AB:35:83:27:6A:B4:7E:23:78
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 0194BC7324B4EE288AEC70A077A74751CFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 0747
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: BYVObl8AEcLLnr7nDLKYe7TF0nPCYyy68ML+iKPm77k=)
2: vDGDX2wIiExO6AcsphzPX7w0rD8.roa (hash: 6H+fcKSw03UJYZabhwRmpHlYumXXGe9flqc+/pdyWXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:24:b4:ee:28:8a:ec:70:a0:77:a7:47:51:cf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=f08b1558dc8f5ce94ee891ab3583276ab47e2378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:b8:04:43:c1:cd:c6:0d:31:d1:f1:dd:18:
95:6d:f7:42:3d:8e:83:33:9a:59:83:0c:65:e2:22:
06:74:29:35:7a:51:90:29:81:27:c9:b1:1b:b4:11:
94:9d:6c:65:59:86:94:3d:c2:17:0e:11:c7:c4:bc:
77:fe:63:9b:34:15:25:0b:2b:4c:7b:9f:a2:1f:dc:
60:63:a3:92:e0:75:1d:6f:91:0a:ca:25:87:f0:00:
8e:a2:80:33:b5:21:d2:70:68:a2:23:63:1b:b3:17:
46:3c:2d:76:e8:d1:46:a8:a3:18:b6:d5:bb:1e:d4:
83:57:02:f6:fe:02:c8:a1:4b:01:7b:cb:72:9e:74:
05:42:6b:10:d4:24:e2:a0:12:c6:a1:c8:a9:57:94:
90:f6:6d:67:04:b9:9a:73:6a:c0:2a:64:4e:17:07:
ad:c7:0a:16:56:8d:12:c9:9d:39:f9:48:c7:c5:34:
2c:eb:13:86:8e:34:52:9e:98:1c:0e:05:bd:40:52:
dd:b7:89:7b:f9:cd:2d:35:ce:c1:b8:e5:22:ac:48:
fc:00:01:f8:15:94:35:8e:19:62:9c:e3:dc:c6:de:
3f:6e:b8:d0:ca:28:ea:df:79:cd:1f:c4:87:b7:58:
b9:17:60:d4:97:78:62:ff:a3:00:a6:8e:3d:76:bb:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:15:58:DC:8F:5C:E9:4E:E8:91:AB:35:83:27:6A:B4:7E:23:78
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ef:5d:c4:3a:81:6b:a2:1a:c3:01:34:66:f2:e9:1c:92:d4:
30:a2:13:06:aa:c3:a3:98:cb:a0:76:65:d1:bf:8b:c5:46:1f:
64:d0:7c:d0:5d:ec:91:f1:84:b5:96:53:45:59:fd:e6:69:df:
80:ab:f4:54:1c:aa:ed:0d:ec:78:10:41:8e:af:23:d3:64:bc:
6d:47:ac:ee:6a:33:2d:5e:b6:b3:34:8e:5b:0f:69:0f:3f:1a:
0f:14:b6:45:fa:91:5a:bd:fd:33:f4:52:c3:73:13:9b:51:cc:
35:09:2a:da:34:12:7d:51:e8:87:b5:a8:36:b3:6b:44:c0:30:
ac:1b:00:64:04:a4:df:cd:67:a5:9b:10:f7:cd:23:f8:14:84:
2e:f2:87:9c:1c:26:d3:5d:09:72:6c:0d:b4:e7:20:52:6a:49:
33:42:2b:19:ae:8b:af:ef:70:b9:5c:1a:9a:ca:51:d4:ea:01:
fa:88:6c:52:5f:09:85:e9:dd:18:94:c9:2f:4b:57:bb:d9:8b:
9d:67:a9:83:62:71:df:91:e1:03:7b:09:2b:a5:dd:2b:5b:fc:
b3:56:fd:3d:f1:d5:14:85:ef:f4:bb:b2:bd:1e:34:71:87:50:
93:9f:ca:fc:5b:ff:e6:8f:2b:5b:6b:26:a5:66:b4:65:9a:90:
8c:b8:03:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyS07iiK7HCgd6dHUc/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjBmMTVkMjc4Mzc5NDgzYWFhMDYxM2NiZjU5MmU3MmNj
ODFlNDgwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EyhmMDhiMTU1OGRjOGY1Y2U5NGVlODkxYWIzNTgzMjc2YWI0N2UyMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ64BEPBzcYNMdHx3RiVbfdCPY6D
M5pZgwxl4iIGdCk1elGQKYEnybEbtBGUnWxlWYaUPcIXDhHHxLx3/mObNBUlCytM
e5+iH9xgY6OS4HUdb5EKyiWH8ACOooAztSHScGiiI2MbsxdGPC126NFGqKMYttW7
HtSDVwL2/gLIoUsBe8tynnQFQmsQ1CTioBLGocipV5SQ9m1nBLmac2rAKmROFwet
xwoWVo0SyZ05+UjHxTQs6xOGjjRSnpgcDgW9QFLdt4l7+c0tNc7BuOUirEj8AAH4
FZQ1jhlinOPcxt4/brjQyijq33nNH8SHt1i5F2DUl3hi/6MApo49drtxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCLFVjcj1zpTuiRqzWDJ2q0fiN4MB8GA1UdIwQY
MBaAFChg8V0ng3lIOqoGE8v1kucsyB5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUt
MzIxYzE0ZGQ0NjM5LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUtMzIxYzE0ZGQ0NjM5
LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsu9dxDqB
a6IawwE0ZvLpHJLUMKITBqrDo5jLoHZl0b+LxUYfZNB80F3skfGEtZZTRVn95mnf
gKv0VByq7Q3seBBBjq8j02S8bUes7mozLV62szSOWw9pDz8aDxS2RfqRWr39M/RS
w3MTm1HMNQkq2jQSfVHoh7WoNrNrRMAwrBsAZASk381npZsQ980j+BSELvKHnBwm
010JcmwNtOcgUmpJM0IrGa6Lr+9wuVwamspR1OoB+ohsUl8JhendGJTJL0tXu9mL
nWepg2Jx35HhA3sJK6XdK1v8s1b9PfHVFIXv9LuyvR40cYdQk5/K/Fv/5o8rW2sm
pWa0ZZqQjLgDWA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:52 2025 by rpki-client