Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
File: kSJw6MgQ1eHznUdcGjEdd08XGlY.mft (raw, json)
Hash identifier: rHDXaw7fT2o+loQAsh+mbJxWiB+dFZ2bJsxz72itmuw=
Subject key identifier: 68:F2:53:BE:8D:B1:04:43:B8:64:C7:38:1E:7A:80:E6:94:C6:55:60
Authority key identifier: 91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
Certificate issuer: /CN=912270e8c810d5e1f39d475c1a311d774f171a56
Certificate serial: 0194BBCDFB5654F88077CADB8F432CD6E3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
Manifest number: 12EC
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: kSJw6MgQ1eHznUdcGjEdd08XGlY.crl (hash: qLDpx5BFpYoFA/A7tStOhCchGVkush31KJq6wfDFHgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:56:54:f8:80:77:ca:db:8f:43:2c:d6:e3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912270e8c810d5e1f39d475c1a311d774f171a56
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=68f253be8db10443b864c7381e7a80e694c65560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:79:03:0a:c1:b5:3d:89:ce:6c:b9:2e:31:
9f:01:90:97:d1:64:96:e1:58:b5:b1:1f:03:96:83:
2a:c2:8e:b9:31:de:fc:76:6f:75:12:e8:f5:1e:ac:
5d:e8:cd:69:8c:ad:23:52:3a:45:48:cc:9b:96:f9:
6a:8a:89:b9:41:34:8f:54:6a:48:e4:85:a0:de:85:
27:de:ae:07:a0:2c:7e:77:89:c5:e0:ac:f5:f1:b9:
1a:2c:e3:f1:cd:08:3d:92:9d:d1:54:5a:e9:87:2f:
c3:11:a7:a6:78:36:80:e6:d4:8b:48:28:87:a5:ab:
e3:96:54:20:ab:74:07:cf:59:cc:40:eb:6e:44:bd:
fa:4e:4b:14:8a:3a:44:94:15:02:59:04:52:5c:02:
16:fd:71:8e:90:a3:7a:a7:d3:b8:44:cd:e7:6d:2a:
1f:37:7a:d7:93:32:1f:11:86:4b:52:a2:5a:cd:14:
a2:0b:69:20:4d:b8:a9:c1:2a:24:80:00:03:86:73:
6a:c4:dd:9e:e5:70:fc:1d:19:6f:3f:e0:0c:76:2b:
9a:59:9a:05:7a:e3:4a:0e:65:55:78:3a:d3:aa:38:
be:3d:49:40:d0:cd:13:ce:5b:6e:c3:ca:78:e7:ff:
68:32:1e:ab:9d:e1:c6:30:91:32:e5:5e:ff:1a:3f:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:53:BE:8D:B1:04:43:B8:64:C7:38:1E:7A:80:E6:94:C6:55:60
X509v3 Authority Key Identifier:
keyid:91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:17:ec:f8:20:72:34:7e:30:86:b0:c4:40:f5:e6:ee:fc:6c:
74:f3:75:40:cb:d7:b9:cf:4f:d4:e6:be:4c:ee:ef:60:69:91:
b3:33:e5:45:af:04:ec:fa:0b:f8:77:2d:ec:8d:20:56:70:4e:
fd:55:64:a0:00:19:44:90:9d:d8:e1:9a:c1:41:5d:b0:00:eb:
76:df:ab:cb:b1:33:29:07:d0:e5:ad:67:7b:f6:2e:fd:e8:b3:
d9:23:11:e2:32:93:50:83:bb:6c:4a:1d:bf:bc:d1:e2:ee:bc:
43:0d:22:1d:36:68:1b:b8:a7:b1:aa:06:a6:51:a8:af:4c:b1:
45:2e:34:ce:60:e4:71:d6:77:63:f8:6a:53:0b:fc:2b:89:3c:
e3:e3:13:1e:36:c9:36:2d:94:d2:87:98:7b:9b:1d:e6:c8:25:
6f:a8:f9:3c:c9:71:c8:6d:d3:61:bd:4f:de:86:11:4b:f1:81:
4c:f4:c4:42:bb:6c:12:62:0d:7c:dd:70:c6:db:50:fa:64:5d:
6d:16:1c:27:0a:e8:07:0a:8e:96:01:a2:98:fa:ce:f2:76:dc:
fd:41:6b:6c:97:cd:5e:d6:c5:77:49:3a:bc:4f:fe:b6:bd:b6:
c9:a3:cd:29:13:aa:07:c3:40:60:44:84:92:05:ff:4c:15:10:
7e:02:5a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zftWVPiAd8rbj0Ms1uPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjI3MGU4YzgxMGQ1ZTFmMzlkNDc1YzFhMzExZDc3NGYx
NzFhNTYwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
Eyg2OGYyNTNiZThkYjEwNDQzYjg2NGM3MzgxZTdhODBlNjk0YzY1NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kB5AwrBtT2Jzmy5LjGfAZCX0WSW
4Vi1sR8DloMqwo65Md78dm91Euj1Hqxd6M1pjK0jUjpFSMyblvlqiom5QTSPVGpI
5IWg3oUn3q4HoCx+d4nF4Kz18bkaLOPxzQg9kp3RVFrphy/DEaemeDaA5tSLSCiH
pavjllQgq3QHz1nMQOtuRL36TksUijpElBUCWQRSXAIW/XGOkKN6p9O4RM3nbSof
N3rXkzIfEYZLUqJazRSiC2kgTbipwSokgAADhnNqxN2e5XD8HRlvP+AMdiuaWZoF
euNKDmVVeDrTqji+PUlA0M0Tzltuw8p45/9oMh6rneHGMJEy5V7/Gj/y8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjyU76NsQRDuGTHOB56gOaUxlVgMB8GA1UdIwQY
MBaAFJEicOjIENXh851HXBoxHXdPFxpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NKdzZNZ1ExZUh6blVkY0dqRWRkMDhYR2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jNTY5MzgtMzczNy00NDM1LTg4YTMt
MmM1MzFhNGM4Zjk5LzEva1NKdzZNZ1ExZUh6blVkY0dqRWRkMDhYR2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jNTY5MzgtMzczNy00NDM1LTg4YTMtMmM1MzFhNGM4Zjk5
LzEva1NKdzZNZ1ExZUh6blVkY0dqRWRkMDhYR2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxfs+CBy
NH4whrDEQPXm7vxsdPN1QMvXuc9P1Oa+TO7vYGmRszPlRa8E7PoL+Hct7I0gVnBO
/VVkoAAZRJCd2OGawUFdsADrdt+ry7EzKQfQ5a1ne/Yu/eiz2SMR4jKTUIO7bEod
v7zR4u68Qw0iHTZoG7insaoGplGor0yxRS40zmDkcdZ3Y/hqUwv8K4k84+MTHjbJ
Ni2U0oeYe5sd5sglb6j5PMlxyG3TYb1P3oYRS/GBTPTEQrtsEmINfN1wxttQ+mRd
bRYcJwroBwqOlgGimPrO8nbc/UFrbJfNXtbFd0k6vE/+tr22yaPNKROqB8NAYESE
kgX/TBUQfgJaXw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:58 2025 by rpki-client