Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
File: kjlpG6eScAY69DZNMIYxNl6QEWo.mft (raw, json)
Hash identifier: 6G11rQXOECmpCMsc43PwBp/ifOjEmd4tuoBXHLkdm3I=
Subject key identifier: 21:87:10:E6:E1:B9:0B:6A:14:9C:78:44:58:E3:36:B2:A5:2E:01:DC
Authority key identifier: 92:39:69:1B:A7:92:70:06:3A:F4:36:4D:30:86:31:36:5E:90:11:6A
Certificate issuer: /CN=9239691ba79270063af4364d308631365e90116a
Certificate serial: 0194BCA9FD19B8331C12E685B7BACB78180D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjlpG6eScAY69DZNMIYxNl6QEWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
Manifest number: 0B84
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: kjlpG6eScAY69DZNMIYxNl6QEWo.crl (hash: BR93lmyhcjzHxuRf+vbHkVPZANu6U9QFlopCTlo8urQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fd:19:b8:33:1c:12:e6:85:b7:ba:cb:78:18:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9239691ba79270063af4364d308631365e90116a
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=218710e6e1b90b6a149c784458e336b2a52e01dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:45:0a:f9:ae:ae:66:c7:23:96:0d:00:e1:
45:d3:cc:c7:87:31:2c:c9:a5:57:58:1c:7d:3e:1b:
7c:e0:77:ef:ae:d6:6b:c8:f5:ee:8f:52:1e:a2:c0:
97:3a:16:c9:17:13:a4:5e:dd:96:dc:bf:69:7a:48:
c8:f6:29:9a:a4:87:d1:b3:1f:8c:d8:8d:1e:10:b8:
a5:3b:0e:7e:95:f1:19:04:4e:e9:72:2e:67:8b:94:
9b:0b:22:78:cd:5a:1a:ae:f7:3f:57:8f:37:8c:fa:
96:4a:34:a6:bf:b8:6e:dd:02:d8:ee:fd:72:73:56:
98:7a:68:4c:96:b7:f3:02:70:92:fc:a9:63:f5:ab:
de:c2:3f:b2:e0:88:a1:b6:a1:aa:c3:81:1f:90:be:
d3:c9:1e:0e:94:63:ee:a6:86:fb:ae:c6:49:fd:8a:
f0:34:1e:f8:d8:1b:09:5c:35:a0:6a:4e:8b:ba:5a:
a3:59:bf:13:32:e8:57:ff:82:c5:98:96:c4:ee:d8:
09:41:c8:4d:95:72:66:6c:f6:36:94:65:a9:d6:39:
7f:32:82:9b:e2:6e:96:ed:28:3a:65:ed:cd:0f:4e:
d1:86:5f:c7:22:4d:34:51:91:3c:28:05:14:1e:00:
70:ce:49:67:a9:9a:1b:d0:cb:3a:c3:3a:00:48:09:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:10:E6:E1:B9:0B:6A:14:9C:78:44:58:E3:36:B2:A5:2E:01:DC
X509v3 Authority Key Identifier:
keyid:92:39:69:1B:A7:92:70:06:3A:F4:36:4D:30:86:31:36:5E:90:11:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjlpG6eScAY69DZNMIYxNl6QEWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:e9:50:ef:51:77:33:c5:fc:6a:17:5a:5f:16:8b:ac:5a:
e3:e6:db:d5:52:9a:65:43:69:0a:30:95:3e:91:3c:61:bf:ca:
23:06:81:d3:e3:a4:48:5b:85:97:d8:2b:c5:01:d2:72:df:ab:
f9:e9:5d:0f:7a:bf:22:a1:57:a2:54:4d:92:50:9a:59:1e:95:
61:4f:8c:d5:24:32:0e:fe:7d:70:5b:3b:c0:c8:b3:c0:f2:7b:
ed:1d:ae:7c:c8:07:32:cc:45:78:2c:d4:87:8a:cf:10:fc:f4:
06:13:ff:a0:b6:66:b2:2a:c7:7e:03:8a:f7:4b:8f:49:82:89:
0e:44:6d:8a:e0:3e:18:7c:2c:4e:c2:bc:b8:2c:be:7e:28:5e:
7c:5b:fb:66:f7:97:c7:34:c7:da:18:39:45:a9:22:6c:8d:9c:
bf:c1:03:5a:91:3b:90:45:0f:67:a2:b4:4e:5f:10:78:8a:d6:
23:9c:32:7c:10:af:b4:c1:0a:84:7e:a2:1a:63:15:48:36:2b:
a2:b5:b1:8a:43:10:82:a7:93:d1:95:98:a8:55:38:63:dd:b7:
01:b9:25:7b:38:2a:4d:58:9a:5b:ce:fe:6b:1f:8b:cb:1b:f3:
5e:1d:f4:fa:f0:38:c5:75:7b:2c:74:68:8c:ef:15:fb:24:6a:
79:48:4c:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qf0ZuDMcEuaFt7rLeBgNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMzk2OTFiYTc5MjcwMDYzYWY0MzY0ZDMwODYzMTM2NWU5
MDExNmEwHhcNMjUwMTMxMTQwMDQ0WhcNMjUwMjAxMTQwMDQ0WjAzMTEwLwYDVQQD
EygyMTg3MTBlNmUxYjkwYjZhMTQ5Yzc4NDQ1OGUzMzZiMmE1MmUwMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJZFCvmurmbHI5YNAOFF08zHhzEs
yaVXWBx9Pht84HfvrtZryPXuj1IeosCXOhbJFxOkXt2W3L9pekjI9imapIfRsx+M
2I0eELilOw5+lfEZBE7pci5ni5SbCyJ4zVoarvc/V483jPqWSjSmv7hu3QLY7v1y
c1aYemhMlrfzAnCS/Klj9avewj+y4IihtqGqw4EfkL7TyR4OlGPupob7rsZJ/Yrw
NB742BsJXDWgak6LulqjWb8TMuhX/4LFmJbE7tgJQchNlXJmbPY2lGWp1jl/MoKb
4m6W7Sg6Ze3ND07Rhl/HIk00UZE8KAUUHgBwzklnqZob0Ms6wzoASAmR2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGHEObhuQtqFJx4RFjjNrKlLgHcMB8GA1UdIwQY
MBaAFJI5aRunknAGOvQ2TTCGMTZekBFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pscEc2ZVNjQVk2OURaTk1JWXhObDZRRVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84NmJkMDktMzJiMC00OTRjLTk3NTUt
ZjE3OTJiZDc3YTUzLzEva2pscEc2ZVNjQVk2OURaTk1JWXhObDZRRVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84NmJkMDktMzJiMC00OTRjLTk3NTUtZjE3OTJiZDc3YTUz
LzEva2pscEc2ZVNjQVk2OURaTk1JWXhObDZRRVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauXpUO9R
dzPF/GoXWl8Wi6xa4+bb1VKaZUNpCjCVPpE8Yb/KIwaB0+OkSFuFl9grxQHSct+r
+eldD3q/IqFXolRNklCaWR6VYU+M1SQyDv59cFs7wMizwPJ77R2ufMgHMsxFeCzU
h4rPEPz0BhP/oLZmsirHfgOK90uPSYKJDkRtiuA+GHwsTsK8uCy+fihefFv7ZveX
xzTH2hg5RakibI2cv8EDWpE7kEUPZ6K0Tl8QeIrWI5wyfBCvtMEKhH6iGmMVSDYr
orWxikMQgqeT0ZWYqFU4Y923AbklezgqTViaW87+ax+LyxvzXh30+vA4xXV7LHRo
jO8V+yRqeUhM+g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:32 2025 by rpki-client