Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
File: kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft (raw, json)
Hash identifier: Y4RaRcjcKDv+Mnxi+R7bbxNgNBkKMedjzJjUk/mPRzs=
Subject key identifier: 58:1E:54:A0:46:59:3B:21:97:23:11:49:89:48:E4:77:46:A2:D7:80
Authority key identifier: 90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
Certificate issuer: /CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Certificate serial: 0194BC3C4B7697F2A2D07DAA494B56B24812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: Wq2iqPYhNjor18Qz9IXxlr7x8mQ.roa (hash: QfZmNahEgmZ6AaDD2oA3mk7CjDsVWvRKb2LNfkM1y9A=)
2: kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl (hash: y5/TPM8Wb4MAibOYDXLwt7K3EWsf7qTGZkBbLCeQsq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:76:97:f2:a2:d0:7d:aa:49:4b:56:b2:48:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=581e54a046593b21972311498948e47746a2d780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:d1:74:ae:0b:d4:08:dc:37:97:61:35:9e:
f9:8b:be:53:2c:aa:c3:bf:ef:c3:bd:18:e6:47:e8:
f8:55:a7:16:89:45:23:a5:0d:06:0e:b2:fe:5b:de:
ec:00:9f:05:cf:0c:92:4f:e9:68:4c:1c:48:da:dc:
28:44:52:0d:ce:6a:33:7e:7c:43:37:72:98:09:7d:
1f:75:e9:b7:30:cb:0d:23:3b:30:f6:75:76:da:cd:
6e:86:d5:5c:2a:b7:34:c7:4d:c1:45:e7:9a:7f:e4:
7f:78:ee:a8:c0:aa:63:4d:fd:c1:d7:2d:12:0d:8d:
59:aa:7a:ac:0f:b7:33:95:9f:3d:d8:24:6e:60:0c:
82:0e:aa:6d:5a:54:cb:83:ac:80:6f:44:ed:93:bf:
a8:ab:4e:57:20:01:28:b0:18:bc:53:59:c8:42:da:
46:e2:a8:93:ac:f8:21:ca:75:9b:84:a2:70:05:5a:
af:63:b2:9c:2f:75:f1:b5:8e:6f:e8:7d:4e:b9:1f:
7b:54:e1:ba:44:ab:20:1e:88:14:da:04:26:85:8c:
68:3e:98:53:f0:b4:df:1a:c6:6f:0e:32:f0:f6:b8:
77:4a:c6:89:2b:c0:27:63:37:94:2f:5b:1e:35:21:
76:8d:e8:f1:76:cc:6b:ca:bc:bd:e9:54:2e:e7:c2:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:54:A0:46:59:3B:21:97:23:11:49:89:48:E4:77:46:A2:D7:80
X509v3 Authority Key Identifier:
keyid:90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:8b:64:4a:cf:2d:c6:4d:95:dc:9e:47:88:bc:9c:e0:24:
99:e3:3b:21:94:89:e1:21:e8:64:bd:57:32:5e:5e:cb:fb:4d:
da:3b:d6:42:14:7f:bd:7e:d7:aa:1a:f2:a6:dc:3a:1b:da:5d:
dd:b5:4b:70:6a:8e:de:f4:d0:6f:53:67:d3:e5:f0:81:b3:26:
2d:2b:6e:b6:23:1f:dc:03:35:bb:12:46:9f:e4:c4:56:0d:61:
96:5f:84:f6:8a:d2:2c:c3:2d:68:c5:d1:4a:44:50:91:5c:c4:
34:66:45:95:38:85:08:f8:e6:5b:a7:8a:1b:9b:0d:fe:ec:2a:
65:b5:3e:d9:88:8a:a1:b4:a6:e0:20:dc:ff:b8:e9:66:99:f9:
fc:91:bd:7b:bc:9a:47:da:03:cb:66:92:1b:ae:ac:1f:52:3b:
d3:9a:e4:5f:e8:e8:f3:8f:cc:29:6b:a9:f6:01:3b:95:c1:b5:
c2:f1:48:aa:a7:ba:ad:6a:06:1d:ca:24:2b:a8:d4:28:11:07:
73:01:a2:69:f5:44:20:c3:22:0b:25:52:f7:be:48:80:b4:88:
e4:f3:c0:f1:5e:a0:9d:e2:86:05:99:94:b0:7e:ff:66:d9:94:
f1:06:f0:f8:bf:67:43:cc:4b:b9:28:5d:8d:ad:e0:7e:f3:a9:
85:18:c8:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEt2l/Ki0H2qSUtWskgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjNhM2EwZDY2MmQxNGRhODQwNGJkMjFkYzQ4OWU2Mzk0
NTYyNGUwHhcNMjUwMTMxMTIwMDU1WhcNMjUwMjAxMTIwMDU1WjAzMTEwLwYDVQQD
Eyg1ODFlNTRhMDQ2NTkzYjIxOTcyMzExNDk4OTQ4ZTQ3NzQ2YTJkNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymDRdK4L1AjcN5dhNZ75i75TLKrD
v+/DvRjmR+j4VacWiUUjpQ0GDrL+W97sAJ8FzwyST+loTBxI2twoRFINzmozfnxD
N3KYCX0fdem3MMsNIzsw9nV22s1uhtVcKrc0x03BReeaf+R/eO6owKpjTf3B1y0S
DY1ZqnqsD7czlZ892CRuYAyCDqptWlTLg6yAb0Ttk7+oq05XIAEosBi8U1nIQtpG
4qiTrPghynWbhKJwBVqvY7KcL3XxtY5v6H1OuR97VOG6RKsgHogU2gQmhYxoPphT
8LTfGsZvDjLw9rh3SsaJK8AnYzeUL1seNSF2jejxdsxryry96VQu58JT3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgeVKBGWTshlyMRSYlI5HdGoteAMB8GA1UdIwQY
MBaAFJCzo6DWYtFNqEBL0h3EieY5RWJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xPam9OWmkwVTJvUUV2U0hjU0o1amxGWWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZmI0ZWEtNWJiYy00YzhjLThiNWQt
Mjg4Y2ZkMWMyYTNkLzEva0xPam9OWmkwVTJvUUV2U0hjU0o1amxGWWs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83ZmI0ZWEtNWJiYy00YzhjLThiNWQtMjg4Y2ZkMWMyYTNk
LzEva0xPam9OWmkwVTJvUUV2U0hjU0o1amxGWWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASe6LZErP
LcZNldyeR4i8nOAkmeM7IZSJ4SHoZL1XMl5ey/tN2jvWQhR/vX7Xqhryptw6G9pd
3bVLcGqO3vTQb1Nn0+XwgbMmLStutiMf3AM1uxJGn+TEVg1hll+E9orSLMMtaMXR
SkRQkVzENGZFlTiFCPjmW6eKG5sN/uwqZbU+2YiKobSm4CDc/7jpZpn5/JG9e7ya
R9oDy2aSG66sH1I705rkX+jo84/MKWup9gE7lcG1wvFIqqe6rWoGHcokK6jUKBEH
cwGiafVEIMMiCyVS975IgLSI5PPA8V6gneKGBZmUsH7/ZtmU8Qbw+L9nQ8xLuShd
ja3gfvOphRjIkg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:41 2025 by rpki-client