Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier: ZgVm4y7k+XEjpmrDjlUegjJu47wFeLykN6Oj8I4CAtY=
Subject key identifier: 4C:36:66:85:BB:89:BB:A6:28:1D:1F:10:E8:88:D5:DD:DB:21:8C:D6
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 0194BC3C6935FA23683B0173AC7022C66D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number: 09C5
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: 2XQbW+BSg3YxMdHqQg2Khm8US5bx1+sOBWr0a3qdZyM=)
2: WW00EN3MrsTzqtLNcacZPoJnrh0.roa (hash: j+ELBwy24bd0McE+tNDFFzjcwNY6uxzFX9utCzZ+kV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:35:fa:23:68:3b:01:73:ac:70:22:c6:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=4c366685bb89bba6281d1f10e888d5dddb218cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:53:c4:56:b5:54:20:0a:e0:75:df:de:d0:
74:cc:5d:5b:8e:f4:4b:cb:7b:6d:29:5b:02:eb:6b:
15:12:0f:c5:59:45:59:86:bc:cb:4c:c9:18:f6:9a:
f9:83:85:fd:32:79:2c:be:15:63:da:af:60:e0:ac:
72:04:4e:2a:03:30:7c:a1:bd:44:bd:d0:c5:fd:ee:
a3:5d:38:39:52:7a:07:13:c3:ee:e1:ed:4c:75:01:
1c:f3:4a:0c:87:83:fb:16:4c:c4:50:be:e7:b7:48:
01:ce:8b:97:6c:2b:b6:ab:b5:50:38:77:f7:2d:fa:
49:90:03:4f:f3:3a:9e:b0:2e:d4:7d:c7:d4:89:40:
25:71:0d:81:d3:8d:74:9d:e0:8d:d6:5f:f5:1b:99:
2b:af:cc:a9:fa:28:47:88:e1:b8:d7:c3:09:51:27:
13:86:b3:a2:83:ec:bf:d6:31:10:4a:ae:c6:77:f7:
9c:4e:48:c2:37:07:eb:c7:80:7e:55:68:43:e4:ad:
fd:ae:08:06:d1:13:9a:8e:70:c8:1b:25:7a:bc:96:
44:60:ab:06:5a:d0:22:5f:bb:3e:3a:61:e5:da:c5:
23:6b:8c:f7:5b:0f:2a:c9:4d:13:e8:5a:eb:69:a4:
4a:fe:23:41:8e:b6:41:09:74:f6:0d:61:bf:03:ce:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:66:85:BB:89:BB:A6:28:1D:1F:10:E8:88:D5:DD:DB:21:8C:D6
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:0c:6b:0e:06:8d:2f:ac:b6:a9:71:18:df:f2:07:a3:7f:
04:cf:70:03:9d:e7:7c:b9:a6:48:24:1d:15:a7:2a:f7:58:e3:
5c:cd:c5:9a:9c:12:a4:2c:71:f3:63:c8:f7:75:08:8f:0e:78:
c3:14:5f:f9:a6:f8:9d:40:e1:af:7f:62:b0:ef:d8:73:ca:82:
b3:b2:06:95:7d:09:b4:02:0c:c5:8b:64:00:54:33:54:17:78:
40:93:06:4f:de:c3:16:62:2e:d7:fb:f6:a5:3d:24:4c:f3:f1:
99:11:62:3c:eb:b6:93:89:69:b2:fa:2c:ea:bd:f7:5e:0c:a5:
47:ae:16:76:a6:61:94:51:42:98:60:fc:d2:08:51:35:a7:1a:
e8:98:c0:94:35:48:21:63:e7:f6:b7:2a:d4:d5:01:9d:f8:ea:
de:5d:17:51:1e:75:7c:88:b2:cc:f3:81:d5:55:f7:f6:c6:15:
c1:00:51:4e:05:b0:dd:8f:1d:c8:f6:1e:2a:09:c4:c7:e3:7c:
90:b7:d8:8f:83:d9:df:95:9f:65:f9:3f:78:eb:d6:0f:71:78:
fa:68:53:2f:2c:8a:85:70:9a:21:6a:3d:e4:d7:87:bb:b1:5f:
6f:bc:81:30:09:34:15:9f:7b:90:37:05:07:7c:48:21:1b:23:
d5:a1:14:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGk1+iNoOwFzrHAixm1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZTJkMTdmZDViYjlkNzYxMTExM2M1ODZhNDEwODAyYzc4
NWVkZjIwHhcNMjUwMTMxMTIwMTAzWhcNMjUwMjAxMTIwMTAzWjAzMTEwLwYDVQQD
Eyg0YzM2NjY4NWJiODliYmE2MjgxZDFmMTBlODg4ZDVkZGRiMjE4Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlARTxFa1VCAK4HXf3tB0zF1bjvRL
y3ttKVsC62sVEg/FWUVZhrzLTMkY9pr5g4X9MnksvhVj2q9g4KxyBE4qAzB8ob1E
vdDF/e6jXTg5UnoHE8Pu4e1MdQEc80oMh4P7FkzEUL7nt0gBzouXbCu2q7VQOHf3
LfpJkANP8zqesC7UfcfUiUAlcQ2B0410neCN1l/1G5krr8yp+ihHiOG418MJUScT
hrOig+y/1jEQSq7Gd/ecTkjCNwfrx4B+VWhD5K39rggG0ROajnDIGyV6vJZEYKsG
WtAiX7s+OmHl2sUja4z3Ww8qyU0T6FrraaRK/iNBjrZBCXT2DWG/A85gPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw2ZoW7ibumKB0fEOiI1d3bIYzWMB8GA1UdIwQY
MBaAFCri0X/Vu512ERE8WGpBCALHhe3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUt
YWI0ODg3YzYzZWE1LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUtYWI0ODg3YzYzZWE1
LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHgMaw4G
jS+stqlxGN/yB6N/BM9wA53nfLmmSCQdFacq91jjXM3FmpwSpCxx82PI93UIjw54
wxRf+ab4nUDhr39isO/Yc8qCs7IGlX0JtAIMxYtkAFQzVBd4QJMGT97DFmIu1/v2
pT0kTPPxmRFiPOu2k4lpsvos6r33XgylR64WdqZhlFFCmGD80ghRNaca6JjAlDVI
IWPn9rcq1NUBnfjq3l0XUR51fIiyzPOB1VX39sYVwQBRTgWw3Y8dyPYeKgnEx+N8
kLfYj4PZ35WfZfk/eOvWD3F4+mhTLyyKhXCaIWo95NeHu7Ffb7yBMAk0FZ97kDcF
B3xIIRsj1aEU9g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:28 2025 by rpki-client