Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
File: KYm1iRINOeoU_1OWO_IxV9Mkleo.mft (raw, json)
Hash identifier: TDw9pHnXyHxE0NMSnCE4ipGFXPJloNJHjbVw4vDlJTs=
Subject key identifier: A4:09:4A:FF:3E:79:3E:D9:CD:F4:A0:75:AA:55:B2:0F:2A:94:63:60
Authority key identifier: 29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
Certificate issuer: /CN=2989b589120d39ea14ff53963bf23157d32495ea
Certificate serial: 0194BD17C7E4BE06D7039F114F424CDD0610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: KYm1iRINOeoU_1OWO_IxV9Mkleo.crl (hash: JDf4NXZtdhhAvlr5bqeXzK+VUG+Yn8SacXz5q1A9z7s=)
2: qCYAPp7Dim0U2WN8VdnzBt9dUOY.roa (hash: A0zVfMWFcmAvQiJtyOik4/Esuwb1ukoj8nbTE0+n850=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c7:e4:be:06:d7:03:9f:11:4f:42:4c:dd:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989b589120d39ea14ff53963bf23157d32495ea
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=a4094aff3e793ed9cdf4a075aa55b20f2a946360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:99:fd:ff:de:a4:99:51:f2:2f:11:3a:18:
73:2d:32:13:bb:ae:c5:fd:bd:4a:bb:b2:a7:8b:ee:
00:4b:4e:07:4d:4e:87:d2:03:76:47:c2:ac:9d:3e:
88:82:5e:71:73:97:0e:77:dd:40:66:46:de:c1:23:
92:d1:54:b6:df:38:c0:9d:dd:a6:2a:30:6f:60:74:
9b:6a:1c:ce:56:a6:85:74:c0:41:23:21:3f:7b:9d:
33:f8:3d:ba:ed:28:a4:65:52:21:3c:d2:82:53:2c:
eb:dd:7d:e3:c4:28:4a:3d:46:c3:31:59:3a:5d:30:
8e:6f:bc:10:5d:8b:c0:85:29:f8:e6:a1:54:4b:80:
e6:9c:e5:5e:da:9c:00:17:66:52:5d:b0:07:12:d8:
59:05:8b:4f:c1:e8:99:7b:c2:54:1a:84:63:5e:03:
11:77:3d:a8:0d:f8:ff:ca:b7:75:e7:35:c5:dd:d5:
5b:92:ee:ba:88:8d:e4:54:fd:de:37:40:7e:06:00:
6a:bd:42:2f:0c:20:1e:97:71:06:3b:dc:b7:d5:af:
30:f9:fa:ac:e2:41:bf:21:fd:27:a2:3e:0e:8f:0a:
34:58:85:6a:cd:30:5b:16:41:2e:94:46:dc:0e:5f:
6d:79:17:94:06:e7:dc:f1:0b:07:09:fd:33:c5:e7:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:4A:FF:3E:79:3E:D9:CD:F4:A0:75:AA:55:B2:0F:2A:94:63:60
X509v3 Authority Key Identifier:
keyid:29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6d:57:90:08:e7:14:f6:0a:8e:a4:52:82:83:37:3b:e1:40:
80:bd:0e:71:c8:c8:37:74:1b:ca:45:a3:9f:89:e0:26:34:c6:
2c:d3:ca:2f:80:7e:e7:56:f0:07:3e:94:3d:95:a0:c4:c5:5b:
29:fe:ac:4d:66:e7:72:6c:df:af:33:93:8b:3d:55:4e:cb:85:
ef:54:8a:b4:15:16:a4:00:f7:0a:1c:31:db:c9:d1:9b:49:4b:
01:fb:44:4e:10:3a:9f:ae:27:46:29:01:c9:9a:e0:47:7d:c9:
64:c3:4f:ac:c2:99:65:57:3d:85:c3:96:1c:ef:12:35:94:c3:
22:e5:94:d4:e7:57:5d:d0:12:35:5b:f2:5d:50:3a:a8:7b:97:
ab:7c:ce:a2:3c:e8:e1:71:b0:1f:8a:a1:b9:f0:e0:18:a1:4a:
30:13:a6:ff:b3:a1:4c:65:7d:b6:8d:25:24:d4:54:e4:23:69:
ab:0e:1c:40:13:f7:fd:7d:7a:a6:14:1e:60:91:58:77:d5:6c:
ce:e7:d5:71:f8:41:db:b5:6b:87:41:be:08:71:15:6e:fc:63:
05:10:55:5f:12:67:3d:98:9e:da:a8:6b:76:d2:04:03:cf:2c:
e6:3c:62:a7:95:db:34:6f:dd:bf:63:0f:86:2b:e6:58:ad:0b:
ab:78:7a:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8fkvgbXA58RT0JM3QYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODliNTg5MTIwZDM5ZWExNGZmNTM5NjNiZjIzMTU3ZDMy
NDk1ZWEwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
EyhhNDA5NGFmZjNlNzkzZWQ5Y2RmNGEwNzVhYTU1YjIwZjJhOTQ2MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkyZ/f/epJlR8i8ROhhzLTITu67F
/b1Ku7Kni+4AS04HTU6H0gN2R8KsnT6Igl5xc5cOd91AZkbewSOS0VS23zjAnd2m
KjBvYHSbahzOVqaFdMBBIyE/e50z+D267SikZVIhPNKCUyzr3X3jxChKPUbDMVk6
XTCOb7wQXYvAhSn45qFUS4DmnOVe2pwAF2ZSXbAHEthZBYtPweiZe8JUGoRjXgMR
dz2oDfj/yrd15zXF3dVbku66iI3kVP3eN0B+BgBqvUIvDCAel3EGO9y31a8w+fqs
4kG/If0noj4Ojwo0WIVqzTBbFkEulEbcDl9teReUBufc8QsHCf0zxef9yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQJSv8+eT7ZzfSgdapVsg8qlGNgMB8GA1UdIwQY
MBaAFCmJtYkSDTnqFP9TljvyMVfTJJXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ltMWlSSU5PZW9VXzFPV09fSXhWOU1rbGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mMDgxNzAtOGQ5Mi00Y2ZhLWI3MzMt
ZmJkYmU1MTRkZjVhLzEvS1ltMWlSSU5PZW9VXzFPV09fSXhWOU1rbGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mMDgxNzAtOGQ5Mi00Y2ZhLWI3MzMtZmJkYmU1MTRkZjVh
LzEvS1ltMWlSSU5PZW9VXzFPV09fSXhWOU1rbGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgm1XkAjn
FPYKjqRSgoM3O+FAgL0OccjIN3QbykWjn4ngJjTGLNPKL4B+51bwBz6UPZWgxMVb
Kf6sTWbncmzfrzOTiz1VTsuF71SKtBUWpAD3Chwx28nRm0lLAftEThA6n64nRikB
yZrgR33JZMNPrMKZZVc9hcOWHO8SNZTDIuWU1OdXXdASNVvyXVA6qHuXq3zOojzo
4XGwH4qhufDgGKFKMBOm/7OhTGV9to0lJNRU5CNpqw4cQBP3/X16phQeYJFYd9Vs
zufVcfhB27Vrh0G+CHEVbvxjBRBVXxJnPZie2qhrdtIEA88s5jxip5XbNG/dv2MP
hivmWK0Lq3h6FA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:23 2025 by rpki-client