Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
File: Kf5mFpV0HYXP7c9v-890aZlZVp8.mft (raw, json)
Hash identifier: H4MxyXOkWC0YAMaNpwAAH4oymSR7XZluJorterhrYTE=
Subject key identifier: 5E:04:13:DE:BC:9E:E8:49:B8:86:99:0F:91:FC:4F:95:59:65:2E:2A
Authority key identifier: 29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
Certificate issuer: /CN=29fe661695741d85cfedcf6ffbcf74699959569f
Certificate serial: 0194BBCEAFB96B72149898D5CE232B306B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: Kf5mFpV0HYXP7c9v-890aZlZVp8.crl (hash: +2oBWlwD57aFC/HXEOMq9kv8R2UgU77jXyL2FWvxSjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:b9:6b:72:14:98:98:d5:ce:23:2b:30:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe661695741d85cfedcf6ffbcf74699959569f
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=5e0413debc9ee849b886990f91fc4f9559652e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:34:5d:9d:64:dd:fd:c8:52:19:a9:fc:18:
2f:c8:58:7f:43:35:3c:1f:30:fb:ff:35:45:83:c1:
3a:a6:81:69:f8:d0:9c:4b:73:33:d5:62:41:a0:3d:
a2:b1:45:f1:1d:16:f8:3a:8a:44:b7:71:50:04:7d:
59:49:9d:cb:c9:fe:ad:05:26:45:d2:e7:cc:44:13:
80:87:bb:27:1e:6b:b6:dd:85:a8:ff:2c:95:d3:53:
c6:5b:8f:33:a8:7a:31:d9:e7:61:f9:c6:2b:c9:89:
ee:26:7c:f3:23:25:05:c6:45:1e:ee:76:59:3f:c3:
a5:3d:d6:64:e5:18:53:a8:f4:89:92:94:73:58:67:
cd:77:9e:5e:37:d6:b3:0f:86:60:3c:c1:d6:5c:cd:
57:75:78:4c:42:2c:b4:af:2c:fe:99:b4:ca:de:68:
a4:45:f3:b7:e5:26:91:bf:90:4e:d4:60:6d:c3:ae:
0f:5b:a6:56:fe:9c:af:2f:57:f9:84:6e:b4:ee:69:
e4:74:25:6a:79:8b:f5:1c:39:c7:2e:ea:d1:80:66:
5b:fb:5a:f7:98:1f:db:e3:9e:64:aa:6c:8c:0b:4e:
75:c5:af:80:60:d2:ee:7a:ae:37:b5:0d:69:88:18:
f3:0c:54:72:2a:18:f9:76:d2:9f:1c:d3:0e:83:be:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:13:DE:BC:9E:E8:49:B8:86:99:0F:91:FC:4F:95:59:65:2E:2A
X509v3 Authority Key Identifier:
keyid:29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:27:9b:b3:9c:5c:b1:2e:b4:33:8b:c2:a0:71:af:9a:ee:f0:
92:36:c6:16:0d:1e:69:e1:07:38:4a:6c:f3:60:e7:92:de:b5:
ac:0a:38:8f:cb:17:44:f4:96:7d:2e:2d:83:b6:48:47:b4:b3:
00:c9:a6:83:b8:40:b3:37:43:6f:bb:37:60:49:d3:d4:05:97:
19:5e:7b:1c:a1:68:69:0c:2f:ff:fb:a8:15:ff:48:30:2d:1b:
61:37:ff:cb:12:06:0a:ad:af:6c:92:f1:63:70:ff:59:8f:4d:
33:b0:e3:51:87:6e:eb:11:1d:55:ab:4d:4d:d8:c7:a2:42:87:
ed:e9:ec:09:60:1d:73:ac:30:c4:f0:a5:cc:da:b4:80:1f:c3:
c3:90:08:11:94:62:5d:5a:f6:32:34:f3:15:fc:6a:8a:dd:f0:
3f:1f:ae:b9:5f:a0:f2:cd:f8:dc:5b:97:b0:9e:9d:76:cf:83:
1a:1f:71:05:92:d2:8b:a7:e7:cd:87:7b:2c:3b:a7:4f:77:d6:
a9:c2:ae:07:4f:79:eb:dc:82:89:46:d3:22:11:ba:ce:18:68:
e0:7c:2e:38:b2:4e:be:af:29:f6:7c:8d:08:5a:79:c6:3d:32:
a2:63:7b:b6:7d:89:88:1e:2d:58:d3:a1:25:9a:1a:4b:00:ab:
e4:77:f1:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zq+5a3IUmJjVziMrMGsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmU2NjE2OTU3NDFkODVjZmVkY2Y2ZmZiY2Y3NDY5OTk1
OTU2OWYwHhcNMjUwMTMxMTAwMTEyWhcNMjUwMjAxMTAwMTEyWjAzMTEwLwYDVQQD
Eyg1ZTA0MTNkZWJjOWVlODQ5Yjg4Njk5MGY5MWZjNGY5NTU5NjUyZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgw0XZ1k3f3IUhmp/BgvyFh/QzU8
HzD7/zVFg8E6poFp+NCcS3Mz1WJBoD2isUXxHRb4OopEt3FQBH1ZSZ3Lyf6tBSZF
0ufMRBOAh7snHmu23YWo/yyV01PGW48zqHox2edh+cYryYnuJnzzIyUFxkUe7nZZ
P8OlPdZk5RhTqPSJkpRzWGfNd55eN9azD4ZgPMHWXM1XdXhMQiy0ryz+mbTK3mik
RfO35SaRv5BO1GBtw64PW6ZW/pyvL1f5hG607mnkdCVqeYv1HDnHLurRgGZb+1r3
mB/b455kqmyMC051xa+AYNLueq43tQ1piBjzDFRyKhj5dtKfHNMOg75fiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4EE968nuhJuIaZD5H8T5VZZS4qMB8GA1UdIwQY
MBaAFCn+ZhaVdB2Fz+3Pb/vPdGmZWVafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgt
MmU4ODBhN2E4MmNhLzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81MWVjYzktNTY4MS00YjAyLTlkYjgtMmU4ODBhN2E4MmNh
LzEvS2Y1bUZwVjBIWVhQN2M5di04OTBhWmxaVnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiebs5xc
sS60M4vCoHGvmu7wkjbGFg0eaeEHOEps82Dnkt61rAo4j8sXRPSWfS4tg7ZIR7Sz
AMmmg7hAszdDb7s3YEnT1AWXGV57HKFoaQwv//uoFf9IMC0bYTf/yxIGCq2vbJLx
Y3D/WY9NM7DjUYdu6xEdVatNTdjHokKH7ensCWAdc6wwxPClzNq0gB/Dw5AIEZRi
XVr2MjTzFfxqit3wPx+uuV+g8s343FuXsJ6dds+DGh9xBZLSi6fnzYd7LDunT3fW
qcKuB09569yCiUbTIhG6zhho4HwuOLJOvq8p9nyNCFp5xj0yomN7tn2JiB4tWNOh
JZoaSwCr5HfxaA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:47 2025 by rpki-client