Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
File: KgedPD3CTph79wxKn6u6QFsIOkU.mft (raw, json)
Hash identifier: XvqjlToT8yQnF+LTwkOWjhd7p+yLet4kPtsUQFnbmpU=
Subject key identifier: F2:C2:0F:97:7C:A0:7D:1C:DF:C8:9B:AF:0F:32:E8:AE:B5:09:30:C4
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial: 0194BBCE94E304776551909D3E8F68F7CA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: KgedPD3CTph79wxKn6u6QFsIOkU.crl (hash: Ftt2UqZAF3e7xETw+MwMja0wad6BbYMhRll22mxwmH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:e3:04:77:65:51:90:9d:3e:8f:68:f7:ca:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=f2c20f977ca07d1cdfc89baf0f32e8aeb50930c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:0a:38:c0:47:95:c7:09:5b:eb:ca:5b:67:
ff:aa:ae:a3:e1:c2:16:1d:e2:c2:58:9a:6c:61:4a:
dc:98:be:9c:10:6d:55:bf:94:10:5d:fa:61:80:79:
92:1e:ec:d5:15:ec:4d:83:17:cf:9e:63:ef:42:a5:
67:2d:39:7c:cb:1d:29:0c:fa:38:4a:fd:de:90:53:
34:33:b0:9d:a3:fd:2a:08:09:86:f3:bb:53:b9:2d:
74:05:ef:0b:78:0b:62:5b:ae:8d:c4:ab:f1:10:03:
9f:0f:a2:d3:bd:18:ad:b1:c8:7e:99:5d:15:75:93:
f8:59:74:db:a1:76:1c:4d:ed:0c:60:96:e5:60:97:
17:a5:20:38:6e:6e:0e:05:7f:86:45:da:e0:d0:5a:
c9:93:3f:3e:b8:99:81:7c:fd:c1:6a:15:0a:34:5d:
bb:fc:31:17:27:e6:a8:0d:99:d1:9d:08:b5:05:5f:
7d:41:84:6a:68:bf:5d:f6:6f:9b:ba:31:90:05:5e:
71:81:14:91:eb:a9:43:e7:68:fa:24:db:1a:ed:d0:
6b:97:fc:ed:a7:66:91:1f:ae:af:fc:f4:27:60:bb:
05:17:f7:eb:18:ee:ee:d1:95:26:61:d4:4a:b8:3c:
da:7f:44:41:18:41:84:ef:ec:90:50:28:fa:3f:dc:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:0F:97:7C:A0:7D:1C:DF:C8:9B:AF:0F:32:E8:AE:B5:09:30:C4
X509v3 Authority Key Identifier:
keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5d:12:b8:fc:64:d8:88:ec:61:01:38:fd:36:86:3f:da:65:
47:92:02:a0:7b:09:49:64:ae:64:68:1a:cf:6d:64:dd:42:9b:
6d:cc:b3:63:38:80:9f:8f:8a:6b:ae:92:e3:7f:61:bd:33:b9:
b6:1b:87:87:2b:6e:91:5e:37:05:74:bf:a6:a5:dd:36:84:3c:
d1:63:04:c5:de:40:02:52:07:01:42:95:96:90:45:5d:d5:11:
00:49:b0:86:66:9c:2f:c3:95:92:96:23:1a:d9:6e:20:5d:a2:
26:54:96:e1:99:5d:b6:a1:19:f3:72:07:7f:2f:a3:74:3c:b8:
f2:a9:44:1f:6e:11:b6:6f:df:d9:43:ee:fb:21:f1:7b:47:ad:
42:f2:da:da:e1:da:2c:4a:92:26:84:35:c0:b7:49:8f:91:4a:
7f:fa:ec:e3:2a:6d:3d:2e:db:b9:34:ea:e0:57:4a:d4:54:5a:
cb:71:5b:00:f8:7e:dc:8a:e9:cd:fc:be:e0:e2:b7:7d:43:3c:
49:be:84:84:ff:ec:d9:6e:a6:29:84:6b:e6:50:1c:39:bb:c2:
71:65:58:af:9f:2b:b4:8b:48:63:b7:77:4c:2d:2b:8a:c4:29:
eb:71:4f:8b:3a:ff:c7:dd:ee:3c:f9:8c:d3:36:1c:95:f5:81:
f8:ac:e6:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpTjBHdlUZCdPo9o98oTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDc5ZDNjM2RjMjRlOTg3YmY3MGM0YTlmYWJiYTQwNWIw
ODNhNDUwHhcNMjUwMTMxMTAwMTA1WhcNMjUwMjAxMTAwMTA1WjAzMTEwLwYDVQQD
EyhmMmMyMGY5NzdjYTA3ZDFjZGZjODliYWYwZjMyZThhZWI1MDkzMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWwKOMBHlccJW+vKW2f/qq6j4cIW
HeLCWJpsYUrcmL6cEG1Vv5QQXfphgHmSHuzVFexNgxfPnmPvQqVnLTl8yx0pDPo4
Sv3ekFM0M7Cdo/0qCAmG87tTuS10Be8LeAtiW66NxKvxEAOfD6LTvRitsch+mV0V
dZP4WXTboXYcTe0MYJblYJcXpSA4bm4OBX+GRdrg0FrJkz8+uJmBfP3BahUKNF27
/DEXJ+aoDZnRnQi1BV99QYRqaL9d9m+bujGQBV5xgRSR66lD52j6JNsa7dBrl/zt
p2aRH66v/PQnYLsFF/frGO7u0ZUmYdRKuDzaf0RBGEGE7+yQUCj6P9yNFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLCD5d8oH0c38ibrw8y6K61CTDEMB8GA1UdIwQY
MBaAFCoHnTw9wk6Ye/cMSp+rukBbCDpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYmI4YTAtM2ZiMy00MWVlLTlmNjUt
MWM4ZDllNmVkMTI0LzEvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wYmI4YTAtM2ZiMy00MWVlLTlmNjUtMWM4ZDllNmVkMTI0
LzEvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV0SuPxk
2IjsYQE4/TaGP9plR5ICoHsJSWSuZGgaz21k3UKbbcyzYziAn4+Ka66S439hvTO5
thuHhytukV43BXS/pqXdNoQ80WMExd5AAlIHAUKVlpBFXdURAEmwhmacL8OVkpYj
GtluIF2iJlSW4ZldtqEZ83IHfy+jdDy48qlEH24Rtm/f2UPu+yHxe0etQvLa2uHa
LEqSJoQ1wLdJj5FKf/rs4yptPS7buTTq4FdK1FRay3FbAPh+3Irpzfy+4OK3fUM8
Sb6EhP/s2W6mKYRr5lAcObvCcWVYr58rtItIY7d3TC0risQp63FPizr/x93uPPmM
0zYclfWB+KzmVA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:38 2025 by rpki-client