Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: M22RFKvnpdXkkL+bF897o4TfVJyTcxjKOrZjHBQBbZ0=
Subject key identifier: B1:A9:E0:D7:29:A5:76:26:91:EB:CE:A6:07:13:FD:A8:10:66:A6:A4
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 0194BD4EB4687F0D609011F120D5AB2C9A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 0209
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: IP4M3/Y2CITkTuSKJB35Q9JCTRZwsKc5VG5rf+QORbA=)
2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b4:68:7f:0d:60:90:11:f1:20:d5:ab:2c:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=b1a9e0d729a5762691ebcea60713fda81066a6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:72:a4:ff:9a:33:7b:f2:5c:1f:ae:12:0e:
4d:93:a9:81:6b:31:2e:c0:cd:89:b9:88:dd:3f:75:
1a:a6:87:5e:2e:36:d5:17:5d:44:44:ec:27:c9:19:
f2:f1:e8:c8:47:5d:cb:c0:0d:48:52:84:8f:0a:80:
2c:50:17:3d:19:06:22:69:e7:29:e0:5d:df:b7:7b:
66:61:5d:be:38:33:ee:62:da:18:2a:e0:cd:88:03:
80:0d:46:4f:f4:8a:a4:4c:f6:e6:e1:b7:f3:74:1a:
76:03:29:73:70:83:4e:a8:2f:fc:38:50:26:6a:ee:
73:57:13:07:9a:29:d5:c3:f8:d7:15:3a:2e:56:60:
3a:d9:0c:3c:b4:83:91:ba:10:2d:74:27:14:36:17:
63:a5:cb:b1:2c:ed:90:34:43:d4:19:58:a1:ff:1d:
02:1d:1e:c2:89:9f:b9:ac:8b:3e:66:55:2e:64:32:
6a:27:38:7d:39:2c:0d:ad:da:ac:c6:ab:9b:b7:ac:
d5:4e:7a:b0:a4:81:70:7f:c3:82:b6:ba:d6:ba:67:
54:08:66:37:b8:3b:12:88:bf:75:33:db:bd:cc:65:
9c:46:0c:a4:e9:7e:0a:dd:1e:63:99:72:4c:dd:4c:
89:78:df:99:0b:40:f8:71:12:ed:7c:55:e6:da:f7:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:E0:D7:29:A5:76:26:91:EB:CE:A6:07:13:FD:A8:10:66:A6:A4
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a9:7e:d7:f7:f5:24:ef:27:5a:e4:06:16:ab:94:28:72:2b:
b6:0c:4d:43:48:1e:af:de:7a:60:fa:97:9c:a9:1f:ea:de:ca:
f8:8a:f0:23:2f:a2:9a:aa:b4:8a:8f:66:e7:95:04:05:8c:c2:
58:8c:ff:04:9f:2c:ac:86:af:43:b1:a9:39:28:67:70:1d:35:
ca:17:49:65:2f:a4:25:71:50:48:52:35:e1:59:4d:ff:e2:4e:
41:1b:ba:e7:d6:3f:50:3e:dd:33:2d:a1:54:31:a4:a0:92:ce:
73:a9:34:46:52:99:06:a8:3d:03:95:63:ad:02:01:e8:f0:72:
f6:9b:32:e7:70:13:fe:54:7d:c0:53:64:49:31:7e:de:b3:10:
33:e3:c7:d4:c0:8d:9c:88:49:aa:4a:4c:d0:6a:57:64:34:c6:
75:74:d7:ce:a8:e8:eb:f9:38:3e:f5:2d:4f:df:0b:68:99:37:
96:39:5a:fd:4e:71:f1:7a:22:ff:9c:e8:f9:61:e2:97:4d:2e:
ce:bb:a1:bd:05:aa:13:f3:4d:58:48:10:92:49:e3:15:69:96:
8b:96:4c:a4:9c:8c:0b:13:08:74:8d:c5:ad:7c:c6:45:f3:72:
ed:31:2a:fe:7e:f7:bc:2f:ea:61:8e:0d:dd:8e:9c:f6:45:f6:
6d:f7:0f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrRofw1gkBHxINWrLJpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjgzNWE3ODYwMjMxZDdiYzE2NDhkNDVmOGU5NTdmNTE1
MDViMjgwHhcNMjUwMTMxMTcwMDM5WhcNMjUwMjAxMTcwMDM5WjAzMTEwLwYDVQQD
EyhiMWE5ZTBkNzI5YTU3NjI2OTFlYmNlYTYwNzEzZmRhODEwNjZhNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YlypP+aM3vyXB+uEg5Nk6mBazEu
wM2JuYjdP3UapodeLjbVF11EROwnyRny8ejIR13LwA1IUoSPCoAsUBc9GQYiaecp
4F3ft3tmYV2+ODPuYtoYKuDNiAOADUZP9IqkTPbm4bfzdBp2AylzcINOqC/8OFAm
au5zVxMHminVw/jXFTouVmA62Qw8tIORuhAtdCcUNhdjpcuxLO2QNEPUGVih/x0C
HR7CiZ+5rIs+ZlUuZDJqJzh9OSwNrdqsxqubt6zVTnqwpIFwf8OCtrrWumdUCGY3
uDsSiL91M9u9zGWcRgyk6X4K3R5jmXJM3UyJeN+ZC0D4cRLtfFXm2vfhTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGp4NcppXYmkevOpgcT/agQZqakMB8GA1UdIwQY
MBaAFJFoNaeGAjHXvBZI1F+OlX9RUFsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEt
NGRlYmIxYWZhOTk3LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEtNGRlYmIxYWZhOTk3
LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdal+1/f1
JO8nWuQGFquUKHIrtgxNQ0ger956YPqXnKkf6t7K+IrwIy+imqq0io9m55UEBYzC
WIz/BJ8srIavQ7GpOShncB01yhdJZS+kJXFQSFI14VlN/+JOQRu659Y/UD7dMy2h
VDGkoJLOc6k0RlKZBqg9A5VjrQIB6PBy9psy53AT/lR9wFNkSTF+3rMQM+PH1MCN
nIhJqkpM0GpXZDTGdXTXzqjo6/k4PvUtT98LaJk3ljla/U5x8Xoi/5zo+WHil00u
zruhvQWqE/NNWEgQkknjFWmWi5ZMpJyMCxMIdI3FrXzGRfNy7TEq/n73vC/qYY4N
3Y6c9kX2bfcPjQ==
-----END CERTIFICATE-----
Generated at Thu May 1 12:38:28 2025 by rpki-client