Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: kSucf2wAzA/E3DbzJDfFhwWTV1K2D/kDA2yp6G+KPhg=
Subject key identifier: 97:E5:9F:CD:AC:8B:A8:C3:4E:93:6E:4B:90:2F:88:10:B1:FB:43:21
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 0194BC3C27EA5FE20916B51B0A436010D431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1134
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: JHmkh70QvXL04ikxpdfsT47yjmTnKXbLKKV2rvPQikY=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:27:ea:5f:e2:09:16:b5:1b:0a:43:60:10:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=97e59fcdac8ba8c34e936e4b902f8810b1fb4321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:45:6d:f9:b7:28:48:36:41:6e:c2:ed:2c:
ac:73:b1:ce:94:09:16:05:01:6a:12:b4:ca:fb:b6:
5e:bd:5f:a6:2b:6a:11:02:7a:2b:54:2d:4a:b2:84:
e4:c3:29:ec:b1:a7:db:fa:b9:be:f9:44:90:44:b8:
36:d9:b7:58:e8:36:0d:77:49:31:ac:71:96:ed:96:
d1:3b:f6:e1:7b:4e:5a:90:5f:34:55:82:c9:c5:01:
27:41:c2:c6:ee:e9:25:ca:48:a7:30:18:eb:ba:68:
e0:db:59:fc:0c:72:c5:ef:c6:06:2b:79:d5:15:87:
3b:0a:10:47:26:61:b8:cb:86:cf:1f:46:80:05:77:
d9:9a:b5:10:62:e2:ac:b1:0b:00:87:22:8b:54:56:
33:0e:23:aa:83:26:a7:c2:1e:61:ba:90:2b:98:2b:
fc:6e:51:02:88:98:59:55:4d:30:0c:38:18:2a:d2:
0f:09:97:51:23:e2:ab:db:d5:7b:9d:3a:5b:8a:49:
5b:77:a0:1c:05:40:64:01:2c:8f:ff:ab:0c:dc:ab:
81:30:35:d4:fa:21:ee:95:43:eb:57:f3:51:67:2d:
7f:41:8f:5e:4c:f0:bd:dd:75:a2:a8:05:39:23:2c:
c0:25:5d:79:9c:dc:ba:35:9c:8a:0e:38:23:01:be:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:9F:CD:AC:8B:A8:C3:4E:93:6E:4B:90:2F:88:10:B1:FB:43:21
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c4:33:c4:27:ae:76:35:5f:cc:e4:85:96:60:be:47:8f:4e:
8f:0d:50:e3:04:ab:4a:e8:eb:32:bb:92:53:3d:85:86:ac:6e:
95:f6:73:61:42:93:3d:8a:57:3e:9f:ef:e4:97:22:3b:99:3d:
ab:62:24:82:f4:08:a1:db:11:95:2a:e3:9a:28:49:64:de:3d:
87:fd:73:07:d4:49:58:f6:9a:f0:47:ff:ba:41:d6:5e:ba:75:
b0:be:6b:bd:be:f5:c8:e5:d9:f4:c3:60:2a:6d:11:9a:55:35:
56:5b:bd:4a:81:dd:ec:b0:48:4b:f4:93:0a:3a:c4:3c:98:13:
58:f2:3d:36:49:bf:23:e3:c8:49:ac:35:13:84:41:5c:bf:c4:
e6:ea:c5:b8:17:42:66:24:db:cc:93:23:f5:ca:4f:ef:5a:1c:
f5:23:bc:ce:6c:42:cf:8e:8d:2c:1d:f3:a5:e2:ed:0c:6d:ae:
87:4f:4e:ac:e2:e1:06:ab:2d:d5:f4:ec:3a:4d:f7:92:b3:47:
39:5d:e1:df:95:39:84:e7:f4:78:dc:db:0d:6f:86:91:de:c7:
c6:ef:09:d8:b9:42:6a:f1:87:5b:af:f3:5b:85:1f:43:ec:0b:
79:5a:a4:55:8a:6e:75:47:4b:94:4e:22:30:e3:26:ac:bc:21:
79:5d:f0:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCfqX+IJFrUbCkNgENQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1
YzYwY2QwHhcNMjUwMTMxMTIwMDQ2WhcNMjUwMjAxMTIwMDQ2WjAzMTEwLwYDVQQD
Eyg5N2U1OWZjZGFjOGJhOGMzNGU5MzZlNGI5MDJmODgxMGIxZmI0MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW1Fbfm3KEg2QW7C7Sysc7HOlAkW
BQFqErTK+7ZevV+mK2oRAnorVC1KsoTkwynssafb+rm++USQRLg22bdY6DYNd0kx
rHGW7ZbRO/bhe05akF80VYLJxQEnQcLG7uklykinMBjrumjg21n8DHLF78YGK3nV
FYc7ChBHJmG4y4bPH0aABXfZmrUQYuKssQsAhyKLVFYzDiOqgyanwh5hupArmCv8
blECiJhZVU0wDDgYKtIPCZdRI+Kr29V7nTpbiklbd6AcBUBkASyP/6sM3KuBMDXU
+iHulUPrV/NRZy1/QY9eTPC93XWiqAU5IyzAJV15nNy6NZyKDjgjAb5L8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfln82si6jDTpNuS5AviBCx+0MhMB8GA1UdIwQY
MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt
MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1
LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMQzxCeu
djVfzOSFlmC+R49Ojw1Q4wSrSujrMruSUz2FhqxulfZzYUKTPYpXPp/v5JciO5k9
q2IkgvQIodsRlSrjmihJZN49h/1zB9RJWPaa8Ef/ukHWXrp1sL5rvb71yOXZ9MNg
Km0RmlU1Vlu9SoHd7LBIS/STCjrEPJgTWPI9Nkm/I+PISaw1E4RBXL/E5urFuBdC
ZiTbzJMj9cpP71oc9SO8zmxCz46NLB3zpeLtDG2uh09OrOLhBqst1fTsOk33krNH
OV3h35U5hOf0eNzbDW+Gkd7Hxu8J2LlCavGHW6/zW4UfQ+wLeVqkVYpudUdLlE4i
MOMmrLwheV3wQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:11 2025 by rpki-client