Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: XXP03/tkG2DkWzmftESUnLMFlwWQNPrY2Rw8SVubBgc=
Subject key identifier: A8:89:F4:1C:B7:F6:DB:E6:77:14:3B:30:0C:8B:2F:E9:C3:8B:0D:76
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 0194BC3BE1AE6F4934E96B88B6CD2C4CA4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: NOW1sxPBF7zokDAi0XxfWsR15wjEnjg2T3TGLAVX2OA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:ae:6f:49:34:e9:6b:88:b6:cd:2c:4c:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=a889f41cb7f6dbe677143b300c8b2fe9c38b0d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:7f:b1:d3:85:ac:d0:08:02:46:57:3a:27:
e4:bd:4a:b1:03:88:c4:55:1d:81:75:31:51:68:2e:
5b:ff:cd:de:47:cc:6e:dd:2b:55:ad:05:77:10:da:
85:4a:d0:9c:8a:d1:f1:93:86:71:a0:27:b3:1d:a0:
2e:21:71:cf:0d:aa:1f:08:4b:1f:e0:a1:e9:00:0e:
3c:9c:83:8f:65:03:97:6e:48:12:c4:a0:00:e6:48:
12:67:19:b6:ef:50:fb:b8:d9:fd:61:b6:a9:87:a2:
3c:52:ba:44:38:61:bf:2a:00:77:02:c2:ac:44:6b:
2d:9a:c9:1d:c0:1d:be:ba:69:3f:b3:76:40:cb:4c:
73:82:8d:5e:b8:7a:39:b6:76:0e:34:1d:d0:b7:22:
67:31:7a:d4:7d:1c:c7:a4:99:9f:60:36:90:ee:88:
e1:e4:16:fe:4c:70:06:af:e0:d0:2f:9c:6d:33:2a:
4d:4b:62:91:41:06:98:fc:a3:c7:e0:df:28:c3:8b:
e7:ae:c3:59:1d:63:64:e4:cd:22:76:a8:b0:ee:77:
4c:49:33:bf:31:d7:97:c7:44:e7:78:f8:5c:78:70:
f4:b0:7d:3b:31:a8:73:95:2c:2f:89:d9:99:69:09:
35:80:91:e6:7d:97:dd:81:c0:44:93:f7:58:f7:79:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:F4:1C:B7:F6:DB:E6:77:14:3B:30:0C:8B:2F:E9:C3:8B:0D:76
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cb:37:78:ec:23:eb:5d:09:d3:c3:94:31:79:5f:99:ff:1a:
fd:3a:91:b2:e1:ac:b9:89:a7:41:be:f2:37:e1:1e:4f:79:28:
c8:0f:fb:3a:db:ed:32:98:9d:92:9c:f1:5d:39:79:f4:2b:49:
65:d5:49:4e:3c:f4:98:15:39:b2:44:6c:a3:7d:d0:8f:4d:09:
4a:ca:f9:0c:2f:ea:d4:53:f8:08:83:77:66:d1:ea:d8:31:ab:
ff:7b:c7:df:27:3e:ef:a3:eb:dc:8b:45:9a:5f:78:64:6a:24:
64:ef:82:95:4e:2b:58:d2:f4:5e:7e:42:f8:49:9f:e7:b0:9e:
91:46:d7:a2:6b:71:74:fb:db:bf:7d:8d:36:f0:57:e8:05:23:
e2:a0:8f:cd:7b:dc:f5:58:ac:12:93:34:de:5e:59:d1:94:e5:
01:6c:3a:f5:58:e9:5e:84:7b:43:7b:2b:7a:7a:61:3e:a8:4f:
4f:5b:c6:62:f0:f2:40:d0:d1:5a:34:a5:9d:ff:5f:98:48:67:
ae:0c:75:ea:83:6d:cf:6e:c8:78:de:92:c2:95:d8:49:77:01:
37:d2:3a:b6:08:0f:ce:d2:47:11:71:6b:8d:b0:e5:bf:18:ec:
1a:f0:37:fc:95:c1:1d:25:76:7b:4d:a4:a2:48:9a:f2:01:76:
cf:a2:0a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+Gub0k06WuIts0sTKS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmVhZGI4ZDhjMjlmMmU3MDM1NTA0M2UyNjc4NjIyOTcz
NGYwYjIwHhcNMjUwMTMxMTIwMDI4WhcNMjUwMjAxMTIwMDI4WjAzMTEwLwYDVQQD
EyhhODg5ZjQxY2I3ZjZkYmU2NzcxNDNiMzAwYzhiMmZlOWMzOGIwZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3J/sdOFrNAIAkZXOifkvUqxA4jE
VR2BdTFRaC5b/83eR8xu3StVrQV3ENqFStCcitHxk4ZxoCezHaAuIXHPDaofCEsf
4KHpAA48nIOPZQOXbkgSxKAA5kgSZxm271D7uNn9Ybaph6I8UrpEOGG/KgB3AsKs
RGstmskdwB2+umk/s3ZAy0xzgo1euHo5tnYONB3QtyJnMXrUfRzHpJmfYDaQ7ojh
5Bb+THAGr+DQL5xtMypNS2KRQQaY/KPH4N8ow4vnrsNZHWNk5M0idqiw7ndMSTO/
MdeXx0TnePhceHD0sH07MahzlSwvidmZaQk1gJHmfZfdgcBEk/dY93nBxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiJ9By39tvmdxQ7MAyLL+nDiw12MB8GA1UdIwQY
MBaAFCgurbjYwp8ucDVQQ+JnhiKXNPCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZmFmNzAtNGMzOC00MDZmLThjY2Qt
YjY3ZjQwYjRlYzE0LzEvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wZmFmNzAtNGMzOC00MDZmLThjY2QtYjY3ZjQwYjRlYzE0
LzEvS0M2dHVOakNueTV3TlZCRDRtZUdJcGMwOExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAss3eOwj
610J08OUMXlfmf8a/TqRsuGsuYmnQb7yN+EeT3koyA/7OtvtMpidkpzxXTl59CtJ
ZdVJTjz0mBU5skRso33Qj00JSsr5DC/q1FP4CIN3ZtHq2DGr/3vH3yc+76Pr3ItF
ml94ZGokZO+ClU4rWNL0Xn5C+Emf57CekUbXomtxdPvbv32NNvBX6AUj4qCPzXvc
9VisEpM03l5Z0ZTlAWw69VjpXoR7Q3srenphPqhPT1vGYvDyQNDRWjSlnf9fmEhn
rgx16oNtz27IeN6SwpXYSXcBN9I6tggPztJHEXFrjbDlvxjsGvA3/JXBHSV2e02k
okia8gF2z6IK0g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client