Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: SSIBrTI1wq6Su0uJrkmMmgGUaVWcXD3EnwlCGGg4KkU=
Subject key identifier: F6:6E:D2:AF:8D:F6:E3:C1:3E:E0:76:DD:84:36:CF:36:59:25:FA:90
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 0194BC3BBDC64E1F25137C2CA3FE1336C4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 06B2
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: wU3sONgzCVKTVtBNStXvjuLx0tMXgOpHB7MJZdCKUoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bd:c6:4e:1f:25:13:7c:2c:a3:fe:13:36:c4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=f66ed2af8df6e3c13ee076dd8436cf365925fa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:aa:ef:87:0c:16:92:81:4f:cd:e6:60:d0:
8c:69:8c:88:59:ce:7c:fe:54:a4:da:48:bb:a5:ac:
bf:22:49:b6:82:f7:6f:df:e0:46:22:cf:94:95:e4:
08:7e:85:ae:8e:37:c5:c8:93:c5:c6:f1:44:8c:b2:
66:1a:a7:85:5a:1a:30:3f:76:de:a1:f4:14:1a:60:
4b:ee:20:d3:15:c3:80:57:df:ef:33:8b:e1:d4:0f:
b8:e0:c0:88:30:eb:9e:3c:a0:70:dc:cf:d9:dc:1d:
b9:79:61:40:7f:5e:cd:7a:36:6f:d8:88:ed:e9:f8:
d6:4f:7d:a2:ce:a7:1f:09:e0:ae:cd:cd:8c:6d:e0:
f2:b0:58:93:cd:e8:c8:e8:79:47:5c:02:a5:06:a3:
aa:7b:48:0e:e5:cd:f6:ac:63:9d:e4:e3:ac:5a:4d:
ac:26:f4:28:3a:0a:94:91:ce:6f:cd:c6:2d:d5:3a:
8f:77:d8:35:3e:87:69:69:85:1a:be:58:fb:25:1a:
fe:47:f5:f6:f7:10:01:ea:d4:38:10:58:58:25:32:
48:de:7a:f9:ed:0e:bd:1a:5e:6e:72:52:a6:27:a1:
18:66:83:3b:1b:99:b4:d5:ae:7a:e4:91:53:92:c8:
23:bc:cb:d6:e5:08:83:49:27:bb:06:f3:1f:2e:90:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:D2:AF:8D:F6:E3:C1:3E:E0:76:DD:84:36:CF:36:59:25:FA:90
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ea:f5:d4:c4:41:69:d7:67:4c:10:b3:91:73:8a:4c:db:d3:
24:bf:de:18:46:30:0d:24:c2:a3:60:60:1c:cf:ad:f6:60:d5:
1a:aa:1d:90:31:82:82:4e:f4:93:13:fb:7d:d6:75:4a:6b:37:
1b:50:36:2b:fe:ed:f8:31:77:64:c3:24:6a:01:f7:6b:bb:c9:
e1:4e:11:83:83:ff:ee:37:96:2c:03:80:a3:df:29:71:85:63:
fe:b0:75:fc:2e:01:f6:b2:58:e2:18:bf:86:c8:11:d3:0d:13:
2a:7c:42:87:fd:24:dd:af:22:75:72:1b:f6:93:3a:92:55:29:
72:7f:ea:f0:80:d0:f1:3c:a1:93:46:e9:ec:4c:9c:cc:0c:f6:
15:8d:f2:48:89:91:de:1f:c9:16:d2:b9:4c:46:97:06:a7:9d:
ac:4c:17:60:00:ca:13:5e:20:b7:ca:ed:b1:70:96:3a:a5:54:
c6:98:4e:09:33:b9:ae:87:6d:8f:1c:4f:03:81:69:c7:6a:8e:
41:ed:38:89:ee:78:a7:0b:a6:4a:8b:43:b8:77:ae:1d:31:00:
da:bb:5a:d6:a1:07:51:40:88:ba:53:8f:8c:ab:d2:6a:be:f4:
17:6b:89:62:25:70:e8:b8:99:59:98:b5:75:6b:aa:fd:68:c1:
4b:26:66:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O73GTh8lE3wso/4TNsS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTdjYmYxN2QwYmEwYTI2YWIwMWE2NDA2MDE0MTExNGNl
MmI5ZDEwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
EyhmNjZlZDJhZjhkZjZlM2MxM2VlMDc2ZGQ4NDM2Y2YzNjU5MjVmYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZmq74cMFpKBT83mYNCMaYyIWc58
/lSk2ki7pay/Ikm2gvdv3+BGIs+UleQIfoWujjfFyJPFxvFEjLJmGqeFWhowP3be
ofQUGmBL7iDTFcOAV9/vM4vh1A+44MCIMOuePKBw3M/Z3B25eWFAf17NejZv2Ijt
6fjWT32izqcfCeCuzc2MbeDysFiTzejI6HlHXAKlBqOqe0gO5c32rGOd5OOsWk2s
JvQoOgqUkc5vzcYt1TqPd9g1PodpaYUavlj7JRr+R/X29xAB6tQ4EFhYJTJI3nr5
7Q69Gl5uclKmJ6EYZoM7G5m01a565JFTksgjvMvW5QiDSSe7BvMfLpCwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZu0q+N9uPBPuB23YQ2zzZZJfqQMB8GA1UdIwQY
MBaAFJCny/F9C6CiarAaZAYBQRFM4rnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYt
ZWRmYmZlZTcwYWY1LzEva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYtZWRmYmZlZTcwYWY1
LzEva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMur11MRB
addnTBCzkXOKTNvTJL/eGEYwDSTCo2BgHM+t9mDVGqodkDGCgk70kxP7fdZ1Sms3
G1A2K/7t+DF3ZMMkagH3a7vJ4U4Rg4P/7jeWLAOAo98pcYVj/rB1/C4B9rJY4hi/
hsgR0w0TKnxCh/0k3a8idXIb9pM6klUpcn/q8IDQ8Tyhk0bp7EyczAz2FY3ySImR
3h/JFtK5TEaXBqedrEwXYADKE14gt8rtsXCWOqVUxphOCTO5rodtjxxPA4Fpx2qO
Qe04ie54pwumSotDuHeuHTEA2rta1qEHUUCIulOPjKvSar70F2uJYiVw6LiZWZi1
dWuq/WjBSyZmQQ==
-----END CERTIFICATE-----
Generated at Wed May 14 02:33:16 2025 by rpki-client