Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: xmMAwFsnxN2PwzxJYlUViBkuA1u2A7XrtWL/D1t6w1I=
Subject key identifier: 4B:6E:50:3F:20:35:F5:C1:2C:C9:02:5C:8B:68:A1:B8:0C:CD:33:11
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 0194BBCDC6B5E2F83B678982004988DEEBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 03CE
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: SjgIKbC0COQRPZ1RYrpjWRLT59SRjyZx0yekJjE7uX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c6:b5:e2:f8:3b:67:89:82:00:49:88:de:eb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=4b6e503f2035f5c12cc9025c8b68a1b80ccd3311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:15:ce:b5:41:ff:6d:5d:1a:ab:82:61:2a:
d6:cf:d5:e1:d7:a0:ad:a9:10:cf:68:ee:4e:ab:41:
f3:94:18:fd:02:cb:79:88:f2:94:48:23:29:63:df:
1e:6e:2e:46:fa:77:c0:40:d8:ce:b3:41:23:77:1e:
bc:df:e1:14:e4:78:97:12:b5:1f:e8:ab:27:75:95:
29:96:9e:1c:ed:c7:d4:5f:8c:ce:43:5a:05:25:eb:
60:e9:b6:a8:4e:b5:78:6c:da:e7:e2:2e:23:a6:b9:
77:c4:24:8b:e7:30:2b:cc:0c:41:78:81:0d:53:7d:
55:ff:2d:61:94:a0:bd:7f:d2:07:9b:53:e8:00:23:
0c:93:16:4c:cd:26:63:9a:9d:3c:87:f1:21:f3:c3:
b7:c7:10:34:2b:16:c8:9a:35:a6:83:4d:94:fb:d7:
75:a5:1c:72:27:52:28:5b:9c:60:eb:09:56:37:47:
e3:a7:d7:f8:97:1e:89:7f:14:08:d3:c1:7d:63:37:
27:78:6b:4d:99:84:6c:32:00:fb:68:30:d8:ed:5b:
e3:f5:9f:2b:8a:bd:54:37:53:19:73:6d:7f:30:de:
0d:60:0c:93:9f:8b:0a:3d:ae:61:2f:54:17:cc:a2:
25:a3:c0:85:b1:0d:f4:fd:b8:02:f9:ca:6f:5c:3b:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:50:3F:20:35:F5:C1:2C:C9:02:5C:8B:68:A1:B8:0C:CD:33:11
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:29:19:b9:10:c7:8d:a6:41:91:cd:ae:59:96:07:7a:f3:da:
0b:9a:0e:98:4f:be:80:60:1f:03:75:cf:0e:05:8f:a9:7a:20:
3c:5c:70:27:09:74:a9:39:ea:a4:b5:2a:a7:53:5b:55:c3:12:
57:fa:2b:6d:b2:1d:52:8a:44:11:10:8e:b3:ad:35:bf:c5:6c:
1a:3a:88:75:80:82:b3:b5:79:d9:50:93:83:fd:3b:33:ff:64:
57:a4:3f:c9:2e:60:d5:df:94:37:3b:3f:90:29:cc:79:01:b0:
e9:70:4d:63:c9:f2:41:2d:8b:7e:d4:46:d0:83:67:ad:b3:1a:
f0:67:ff:0c:42:a5:0f:5f:4e:ee:8c:58:5d:b3:98:c7:e1:7e:
0c:04:bb:49:b9:33:22:4b:b7:65:1b:f1:01:0c:c5:e1:53:7c:
88:dd:37:12:cc:49:71:3b:c8:6b:71:64:2d:35:18:f6:af:9b:
af:03:9a:03:eb:8e:57:c0:6e:87:8c:d9:5a:7f:7c:06:62:c4:
97:7c:ff:9e:b1:a3:87:7a:ed:2a:47:05:9e:22:76:b1:6c:11:
74:a7:78:4d:18:d4:aa:c7:ef:95:16:f1:2e:87:26:88:a9:4f:
b9:fd:31:f3:ac:e6:84:07:82:d6:7e:a2:29:6b:a5:f5:bd:0b:
bb:87:f7:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zca14vg7Z4mCAEmI3uupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTU5ODMyMmE2OTkwNWE1YzZlMDI5NWEwY2ExZmI1NTY2
NmMxNGIwHhcNMjUwMTMxMTAwMDEyWhcNMjUwMjAxMTAwMDEyWjAzMTEwLwYDVQQD
Eyg0YjZlNTAzZjIwMzVmNWMxMmNjOTAyNWM4YjY4YTFiODBjY2QzMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3kVzrVB/21dGquCYSrWz9Xh16Ct
qRDPaO5Oq0HzlBj9Ast5iPKUSCMpY98ebi5G+nfAQNjOs0Ejdx683+EU5HiXErUf
6KsndZUplp4c7cfUX4zOQ1oFJetg6baoTrV4bNrn4i4jprl3xCSL5zArzAxBeIEN
U31V/y1hlKC9f9IHm1PoACMMkxZMzSZjmp08h/Eh88O3xxA0KxbImjWmg02U+9d1
pRxyJ1IoW5xg6wlWN0fjp9f4lx6JfxQI08F9YzcneGtNmYRsMgD7aDDY7Vvj9Z8r
ir1UN1MZc21/MN4NYAyTn4sKPa5hL1QXzKIlo8CFsQ30/bgC+cpvXDt1nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtuUD8gNfXBLMkCXItoobgMzTMRMB8GA1UdIwQY
MBaAFHylmDIqaZBaXG4ClaDKH7VWZsFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kYTY2YzAtYjlmOC00MDk0LWE5MzUt
NTgwZDg3Njg4NWExLzEvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kYTY2YzAtYjlmOC00MDk0LWE5MzUtNTgwZDg3Njg4NWEx
LzEvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCkZuRDH
jaZBkc2uWZYHevPaC5oOmE++gGAfA3XPDgWPqXogPFxwJwl0qTnqpLUqp1NbVcMS
V/orbbIdUopEERCOs601v8VsGjqIdYCCs7V52VCTg/07M/9kV6Q/yS5g1d+UNzs/
kCnMeQGw6XBNY8nyQS2LftRG0INnrbMa8Gf/DEKlD19O7oxYXbOYx+F+DAS7Sbkz
Iku3ZRvxAQzF4VN8iN03EsxJcTvIa3FkLTUY9q+brwOaA+uOV8Buh4zZWn98BmLE
l3z/nrGjh3rtKkcFniJ2sWwRdKd4TRjUqsfvlRbxLocmiKlPuf0x86zmhAeC1n6i
KWul9b0Lu4f3zw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:17 2025 by rpki-client