Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.mft
File: kMjQcCLOUC2hNl5XO4w7FITfHoc.mft (raw, json)
Hash identifier: JpGD0FM/I9vXY7jtWOZh4OQixDe03bHspVDE6X8ejf0=
Subject key identifier: 06:35:F2:CE:FD:3A:43:59:AC:26:EF:2C:71:82:69:A6:60:F7:0F:27
Authority key identifier: 90:C8:D0:70:22:CE:50:2D:A1:36:5E:57:3B:8C:3B:14:84:DF:1E:87
Certificate issuer: /CN=90c8d07022ce502da1365e573b8c3b1484df1e87
Certificate serial: 0194BC052AB88298FF8CC0BAD61E70E8E2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMjQcCLOUC2hNl5XO4w7FITfHoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.mft
Manifest number: 0213
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: kMjQcCLOUC2hNl5XO4w7FITfHoc.crl (hash: qe2iw/e0sIruC49R9WbbSuzLcBP+6TFNjkMvbxQRmJ0=)
2: ysJIpB4l74nPHUw_L6jIVjFmAEo.roa (hash: keknKfYJUcOWnQDb9GHMfNuDlkhBJBxvlbHOR/QYMiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2a:b8:82:98:ff:8c:c0:ba:d6:1e:70:e8:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c8d07022ce502da1365e573b8c3b1484df1e87
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=0635f2cefd3a4359ac26ef2c718269a660f70f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:59:17:87:fd:74:ed:a1:9d:b5:c0:90:49:
48:2b:1b:1d:8d:ad:7c:55:17:61:a5:97:7f:d8:2a:
79:45:72:40:cf:6f:96:c7:9c:33:17:75:d6:8d:a6:
83:f9:e0:a9:d4:7c:4a:9b:b4:d9:7c:82:59:8c:7d:
9c:c5:87:2c:6d:09:e0:06:3e:82:b3:e5:c1:f8:44:
da:db:5c:e9:ee:d9:1d:74:fe:ec:5e:e6:a8:b4:aa:
f4:71:ee:a8:69:32:f6:56:14:57:5b:cd:5a:6e:57:
fd:2d:bd:c0:ca:e5:be:e4:39:94:29:31:8c:6e:b2:
51:4e:5e:8c:fa:ed:3f:e7:6d:9c:c2:7b:3a:d8:d0:
34:4f:e0:0c:ce:9d:58:65:43:97:0e:ff:75:9b:38:
a8:e1:19:9e:84:83:31:15:10:2e:61:dd:42:6a:f0:
05:b1:b5:02:e9:e4:be:68:32:b6:87:00:99:98:52:
80:a5:68:ef:cf:c3:c4:c1:c6:f3:65:c4:40:88:89:
b1:47:95:be:f1:01:41:c9:77:00:dc:d4:13:62:ab:
0d:fd:22:2e:52:ab:c1:5d:71:07:73:1e:48:6f:39:
b3:28:29:7b:17:3f:6e:f8:13:36:37:8f:b6:6a:42:
f6:80:ac:c6:60:0e:6a:03:dc:14:f7:ec:a8:b0:57:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:F2:CE:FD:3A:43:59:AC:26:EF:2C:71:82:69:A6:60:F7:0F:27
X509v3 Authority Key Identifier:
keyid:90:C8:D0:70:22:CE:50:2D:A1:36:5E:57:3B:8C:3B:14:84:DF:1E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMjQcCLOUC2hNl5XO4w7FITfHoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:18:ea:07:d1:5a:6f:84:aa:cb:67:7a:bd:f9:dc:b4:7e:6b:
4d:65:b1:c0:e5:5c:85:89:87:d8:24:be:a2:72:5c:f7:42:e2:
93:5a:24:fb:01:82:45:e6:ac:20:61:54:b3:96:05:47:f5:4f:
b0:3c:63:53:36:30:c8:c7:fe:37:ba:01:ef:99:a8:74:04:65:
e5:a8:a3:dc:e9:18:29:1e:90:db:5f:cf:e2:f8:9f:3c:ee:f4:
23:91:0c:7b:00:e0:9c:a8:9b:da:fb:c3:4a:31:ba:2f:f7:6c:
12:e5:0a:6e:07:85:8c:57:0b:f3:77:d9:5b:4c:40:81:b5:ca:
b9:05:6b:6e:7a:b1:bc:56:82:07:2e:40:63:74:15:f1:27:e8:
19:0c:cd:b6:aa:92:24:89:47:ac:82:58:eb:28:51:10:ae:bb:
f7:c5:7f:ba:78:9a:a7:22:15:a9:e4:6a:e9:ca:54:6c:ad:f4:
fd:b5:de:9b:cb:6d:88:85:18:f8:82:c6:8f:f4:d2:9e:53:55:
09:15:0a:68:55:59:6f:06:e1:7f:43:cf:06:2c:99:c9:95:db:
1b:c9:75:2c:c2:67:37:59:3e:17:69:94:ab:04:36:cd:6d:4a:
a7:79:97:5f:9f:05:00:35:45:2d:10:7c:88:62:17:d7:9c:af:
82:a9:76:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSq4gpj/jMC61h5w6OLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYzhkMDcwMjJjZTUwMmRhMTM2NWU1NzNiOGMzYjE0ODRk
ZjFlODcwHhcNMjUwMTMxMTEwMDQyWhcNMjUwMjAxMTEwMDQyWjAzMTEwLwYDVQQD
EygwNjM1ZjJjZWZkM2E0MzU5YWMyNmVmMmM3MTgyNjlhNjYwZjcwZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7xZF4f9dO2hnbXAkElIKxsdja18
VRdhpZd/2Cp5RXJAz2+Wx5wzF3XWjaaD+eCp1HxKm7TZfIJZjH2cxYcsbQngBj6C
s+XB+ETa21zp7tkddP7sXuaotKr0ce6oaTL2VhRXW81ablf9Lb3AyuW+5DmUKTGM
brJRTl6M+u0/522cwns62NA0T+AMzp1YZUOXDv91mzio4RmehIMxFRAuYd1CavAF
sbUC6eS+aDK2hwCZmFKApWjvz8PEwcbzZcRAiImxR5W+8QFByXcA3NQTYqsN/SIu
UqvBXXEHcx5IbzmzKCl7Fz9u+BM2N4+2akL2gKzGYA5qA9wU9+yosFebrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY18s79OkNZrCbvLHGCaaZg9w8nMB8GA1UdIwQY
MBaAFJDI0HAizlAtoTZeVzuMOxSE3x6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva01qUWNDTE9VQzJoTmw1WE80dzdGSVRmSG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yYmRlMDEtMzY1Yy00MDg0LWE3ZDYt
OWU5ZTRjYWYzMTc1LzEva01qUWNDTE9VQzJoTmw1WE80dzdGSVRmSG9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yYmRlMDEtMzY1Yy00MDg0LWE3ZDYtOWU5ZTRjYWYzMTc1
LzEva01qUWNDTE9VQzJoTmw1WE80dzdGSVRmSG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRjqB9Fa
b4Sqy2d6vfnctH5rTWWxwOVchYmH2CS+onJc90Lik1ok+wGCReasIGFUs5YFR/VP
sDxjUzYwyMf+N7oB75modARl5aij3OkYKR6Q21/P4vifPO70I5EMewDgnKib2vvD
SjG6L/dsEuUKbgeFjFcL83fZW0xAgbXKuQVrbnqxvFaCBy5AY3QV8SfoGQzNtqqS
JIlHrIJY6yhREK6798V/uniapyIVqeRq6cpUbK30/bXem8ttiIUY+ILGj/TSnlNV
CRUKaFVZbwbhf0PPBiyZyZXbG8l1LMJnN1k+F2mUqwQ2zW1Kp3mXX58FADVFLRB8
iGIX15yvgql23w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:52 2025 by rpki-client