Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: Jqao0g64KlYYHhBw6RQqj9DE6q/LAPxWlSCuP+bG/kA=
Subject key identifier: 42:36:69:67:8C:E8:DB:7C:F6:C8:1A:72:AC:41:A8:E4:53:CE:95:3E
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 0194BBCE14275CD6FEC093F9CD2607F84221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0600
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: o7awBnefIWrUjNDVLog6S4a/qmhHtaSww60lovinEhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:14:27:5c:d6:fe:c0:93:f9:cd:26:07:f8:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=423669678ce8db7cf6c81a72ac41a8e453ce953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:9d:76:40:fc:64:20:ff:37:01:19:db:48:
ed:18:d6:23:94:14:29:f8:76:6f:74:5a:d2:f2:aa:
02:6b:20:03:34:16:2a:f3:af:80:45:9e:22:8f:a9:
e8:fd:8f:d3:36:8c:3f:4c:94:d6:a8:ff:0e:2d:b4:
32:62:a0:a7:41:dd:41:18:2b:a0:ac:aa:6c:07:7b:
8f:fd:f7:f5:dd:99:c6:90:cf:29:fa:f2:f7:32:ac:
e6:84:3b:b0:42:b6:f9:48:5c:4d:51:75:4b:e8:24:
16:ab:0f:1c:11:cb:b5:4f:50:c0:7f:2d:25:01:9c:
5a:3e:4a:6d:05:5e:12:76:12:d0:f0:be:a6:c9:8d:
4f:cd:fc:c0:fe:5a:84:d5:d6:57:09:dd:21:e3:53:
45:d1:4b:56:45:44:f3:49:32:45:3d:65:bd:04:2b:
22:b5:a3:96:bf:96:72:e7:86:c8:ef:4d:ad:d5:4f:
60:97:56:15:b1:3f:bc:33:90:6c:ed:44:bc:bf:53:
9e:97:d8:0e:5d:4e:de:3a:bd:d5:49:75:f5:92:50:
e3:7f:31:43:fe:94:96:33:7b:f7:7b:44:87:bb:89:
0c:a0:4d:97:2a:90:4b:45:b1:e2:45:71:4c:5a:f6:
9a:b1:32:02:20:d0:b1:bf:41:05:fb:95:c4:77:cb:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:36:69:67:8C:E8:DB:7C:F6:C8:1A:72:AC:41:A8:E4:53:CE:95:3E
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:36:fb:70:8c:92:d6:a2:cb:e2:b1:9b:c4:30:f8:05:28:c0:
ec:39:67:89:d0:23:29:0f:18:6e:66:c6:44:e7:04:79:0e:6c:
8f:24:df:c4:41:7f:39:e0:6a:ec:ca:a1:15:77:ca:06:51:6f:
5a:7c:c8:85:09:93:25:fb:34:73:8c:58:d3:9c:a1:bd:5f:a9:
dc:54:6a:31:01:81:e6:f6:f9:16:40:5d:f0:a3:16:16:b7:6d:
29:44:85:fd:7d:9e:e5:0a:5c:5b:42:00:71:b4:e9:73:16:5e:
cf:01:d8:02:17:87:37:dc:03:21:aa:0e:43:ed:e2:47:21:dd:
ad:7b:84:11:43:85:f2:1a:e1:1e:b5:b2:db:11:99:86:a0:bf:
2e:2f:fd:d4:a3:d6:7c:82:41:9e:84:8d:d2:e0:5c:25:5e:97:
e9:bf:85:e3:94:21:ac:bf:1d:20:cf:e2:c0:e2:48:94:a3:6d:
67:de:34:79:45:91:b3:26:65:a1:52:a9:7a:3b:19:ad:57:c6:
c5:bd:47:ee:91:cb:ab:94:c2:c8:94:39:0b:a6:09:2b:53:d5:
f6:b4:a6:fc:74:a5:61:ad:71:92:19:c1:68:f0:ad:a1:78:a1:
a2:21:50:fa:f3:d3:09:92:31:00:05:c5:db:4d:19:05:5c:15:
b1:83:9d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhQnXNb+wJP5zSYH+EIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1
NDFkMWUwHhcNMjUwMTMxMTAwMDMyWhcNMjUwMjAxMTAwMDMyWjAzMTEwLwYDVQQD
Eyg0MjM2Njk2NzhjZThkYjdjZjZjODFhNzJhYzQxYThlNDUzY2U5NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvyddkD8ZCD/NwEZ20jtGNYjlBQp
+HZvdFrS8qoCayADNBYq86+ARZ4ij6no/Y/TNow/TJTWqP8OLbQyYqCnQd1BGCug
rKpsB3uP/ff13ZnGkM8p+vL3MqzmhDuwQrb5SFxNUXVL6CQWqw8cEcu1T1DAfy0l
AZxaPkptBV4SdhLQ8L6myY1PzfzA/lqE1dZXCd0h41NF0UtWRUTzSTJFPWW9BCsi
taOWv5Zy54bI702t1U9gl1YVsT+8M5Bs7US8v1Oel9gOXU7eOr3VSXX1klDjfzFD
/pSWM3v3e0SHu4kMoE2XKpBLRbHiRXFMWvaasTICINCxv0EF+5XEd8u5AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI2aWeM6Nt89sgacqxBqORTzpU+MB8GA1UdIwQY
MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct
OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh
LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7jb7cIyS
1qLL4rGbxDD4BSjA7DlnidAjKQ8YbmbGROcEeQ5sjyTfxEF/OeBq7MqhFXfKBlFv
WnzIhQmTJfs0c4xY05yhvV+p3FRqMQGB5vb5FkBd8KMWFrdtKUSF/X2e5QpcW0IA
cbTpcxZezwHYAheHN9wDIaoOQ+3iRyHdrXuEEUOF8hrhHrWy2xGZhqC/Li/91KPW
fIJBnoSN0uBcJV6X6b+F45QhrL8dIM/iwOJIlKNtZ940eUWRsyZloVKpejsZrVfG
xb1H7pHLq5TCyJQ5C6YJK1PV9rSm/HSlYa1xkhnBaPCtoXihoiFQ+vPTCZIxAAXF
200ZBVwVsYOdjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:25 2025 by rpki-client