Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: b0j7M5SqHA51M3QgIpnhU/FNkqs6Su76iwIAqKKDSEA=
Subject key identifier: 2D:D5:3F:A2:7E:0D:A0:C1:BC:79:9C:7D:20:F9:BA:75:E7:59:3B:9F
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 0194BC3C691B6853B86A1AFF9AE9144064D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 04D6
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: B+1SYRW0SUZQe72bpBM5JGnrOI3ojEBdo42lu66wRZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:1b:68:53:b8:6a:1a:ff:9a:e9:14:40:64:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=2dd53fa27e0da0c1bc799c7d20f9ba75e7593b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:db:99:a0:2f:f1:00:6c:52:08:7e:a9:61:
89:df:f2:4f:47:7a:11:e8:78:5a:59:43:e8:0b:ea:
26:2b:a3:d6:e5:4d:59:2c:84:7d:75:9f:a2:1a:a0:
d9:55:cc:0c:50:84:e6:04:6f:a8:12:60:93:0c:e2:
a1:30:1b:60:5d:26:5b:14:03:fd:81:53:87:9b:bb:
1e:eb:87:d1:e8:0e:3a:ac:7b:56:af:8b:2c:17:a1:
c7:5d:87:08:98:23:53:e2:e7:59:17:db:b1:34:e0:
ef:ef:31:73:0a:d4:b4:f3:3f:0c:b8:87:b7:2d:82:
0d:5a:34:68:32:14:3d:2d:56:4c:93:2e:38:c5:de:
9f:7f:ac:00:a4:f9:08:82:01:0d:d9:f4:43:d4:49:
5c:90:d5:22:5d:e9:2e:81:60:54:0c:aa:f8:b3:ea:
f7:36:09:a6:a2:d5:06:b6:4d:00:a1:d8:a0:2e:55:
06:6a:ea:ae:bb:38:d1:46:c6:48:1e:b2:fc:57:62:
12:7b:f8:eb:a6:d5:57:aa:a9:74:11:34:77:d6:d4:
ef:38:37:a0:74:de:c8:bb:e6:bf:b3:db:73:63:e1:
2e:ad:d3:6d:e6:70:61:b6:0d:5c:5d:51:fc:b2:eb:
d0:53:fb:d7:28:33:16:4c:10:55:4b:eb:bc:37:a7:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D5:3F:A2:7E:0D:A0:C1:BC:79:9C:7D:20:F9:BA:75:E7:59:3B:9F
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:67:e1:07:a3:3c:7c:9b:0b:57:a4:56:f2:7f:5b:0b:92:15:
42:e2:ca:a4:60:b0:6c:1c:d7:8f:7c:59:07:87:9e:66:20:b0:
05:98:34:64:5d:dc:f8:44:8d:85:6c:b3:b5:ab:22:f1:9e:31:
d8:99:fe:2b:fd:6c:82:76:21:10:a2:c2:1b:1c:ab:ec:a7:f3:
be:11:ec:23:a7:b4:a9:2b:cd:e5:b8:6d:33:2c:2e:a2:fb:04:
d6:23:69:04:f9:eb:e5:d7:36:54:09:9e:4b:4d:86:48:9c:a3:
e4:e3:0f:ab:eb:34:b6:a6:e9:9b:21:47:b9:c9:2b:b8:61:de:
93:3f:62:64:46:be:60:b2:6d:b1:07:99:2c:88:b3:71:c8:a7:
8d:aa:b7:31:f3:bf:87:2a:7d:5b:8d:b0:c8:18:aa:89:4a:12:
e8:e9:86:3a:21:f0:72:5a:dc:f4:ae:fc:a0:19:31:f9:b1:03:
71:63:ff:40:9a:e5:a3:5c:f2:6a:f2:0e:cf:d6:f4:45:3f:bb:
58:dc:33:34:f2:60:25:87:91:8f:57:d9:83:54:6c:37:7c:4e:
f5:0b:28:7d:55:75:d2:32:cf:5a:8a:a1:69:23:74:75:bb:4c:
ef:c5:a1:a9:4d:9a:ab:e8:fa:d6:b6:7a:87:08:c3:f5:35:46:
4f:8c:a7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGkbaFO4ahr/mukUQGTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3
ZmEwMWUwHhcNMjUwMTMxMTIwMTAzWhcNMjUwMjAxMTIwMTAzWjAzMTEwLwYDVQQD
EygyZGQ1M2ZhMjdlMGRhMGMxYmM3OTljN2QyMGY5YmE3NWU3NTkzYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdnbmaAv8QBsUgh+qWGJ3/JPR3oR
6HhaWUPoC+omK6PW5U1ZLIR9dZ+iGqDZVcwMUITmBG+oEmCTDOKhMBtgXSZbFAP9
gVOHm7se64fR6A46rHtWr4ssF6HHXYcImCNT4udZF9uxNODv7zFzCtS08z8MuIe3
LYINWjRoMhQ9LVZMky44xd6ff6wApPkIggEN2fRD1ElckNUiXekugWBUDKr4s+r3
NgmmotUGtk0AodigLlUGauquuzjRRsZIHrL8V2ISe/jrptVXqql0ETR31tTvODeg
dN7Iu+a/s9tzY+EurdNt5nBhtg1cXVH8suvQU/vXKDMWTBBVS+u8N6dhWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3VP6J+DaDBvHmcfSD5unXnWTufMB8GA1UdIwQY
MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt
NTEwY2YyNmJjYTY1LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1
LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2fhB6M8
fJsLV6RW8n9bC5IVQuLKpGCwbBzXj3xZB4eeZiCwBZg0ZF3c+ESNhWyztasi8Z4x
2Jn+K/1sgnYhEKLCGxyr7KfzvhHsI6e0qSvN5bhtMywuovsE1iNpBPnr5dc2VAme
S02GSJyj5OMPq+s0tqbpmyFHuckruGHekz9iZEa+YLJtsQeZLIizccinjaq3MfO/
hyp9W42wyBiqiUoS6OmGOiHwclrc9K78oBkx+bEDcWP/QJrlo1zyavIOz9b0RT+7
WNwzNPJgJYeRj1fZg1RsN3xO9QsofVV10jLPWoqhaSN0dbtM78WhqU2aq+j61rZ6
hwjD9TVGT4yndQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:39 2025 by rpki-client