Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: 92h+wdwaa5uLEeISL0fUbzP/eQU8zk4HgeDDITpKYHo=
Subject key identifier: FF:F6:F3:A8:EE:E0:50:AD:D5:DE:21:AE:F1:58:6C:F4:89:7B:44:59
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 0194BC73208573E23DC65376D576717CD994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: +8wxQyzD8hVBKvTBnFoREYHRGTtJDJ91Hb+u9nouOdI=)
2: yaNI0_QU-og_a5wIKL7nblpP3wo.roa (hash: mocSKnatPWu2K5HO5VSBkHGD9dsGk50fbeHRajNzTSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:85:73:e2:3d:c6:53:76:d5:76:71:7c:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=fff6f3a8eee050add5de21aef1586cf4897b4459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:a2:90:b1:10:e0:95:c5:50:43:f4:f2:98:
7c:27:de:4c:25:41:ba:15:94:a0:83:fd:8d:24:3c:
ba:64:16:52:4f:a2:ec:df:5b:18:7b:f6:89:3f:5e:
31:41:2d:e3:a8:d6:22:c5:17:ad:ae:90:e1:48:99:
67:00:c3:a1:38:b4:b9:57:7d:7d:f2:11:a5:2f:9b:
da:f8:5e:6f:68:0d:c7:d7:3f:af:c6:1d:05:ee:ca:
b7:72:b3:fa:87:8b:71:f3:2d:0d:59:c7:de:5c:16:
6c:58:ee:bf:e4:3f:40:bc:64:61:a0:ac:fd:49:38:
49:83:ca:ad:29:f7:f0:79:69:6f:d2:17:60:8a:95:
fe:a4:fc:a9:d4:c5:82:fb:be:8d:d1:5c:af:82:6c:
77:cb:41:9e:e5:1f:0d:b9:19:2f:e3:39:cf:03:6a:
c8:d5:0c:2d:58:34:6c:77:30:04:f3:23:3d:e5:30:
af:28:a4:d9:be:ec:51:73:d0:98:de:83:32:f3:95:
50:8c:8b:55:90:01:31:89:f8:ac:87:79:d7:88:d1:
3d:67:81:9a:5f:eb:c1:5a:57:0f:1c:7e:20:28:87:
2b:ad:4a:d9:06:01:3a:d3:69:80:43:da:b6:4b:39:
ff:b7:d0:28:1b:98:5f:46:b0:c5:f3:d3:b3:48:29:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:F3:A8:EE:E0:50:AD:D5:DE:21:AE:F1:58:6C:F4:89:7B:44:59
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:35:f0:ac:16:78:e9:8a:d8:ff:bc:ec:1e:08:7d:e8:3c:e0:
23:b1:5a:4a:9b:1d:83:ed:ac:df:0d:63:ba:bd:91:70:f9:a8:
3b:5f:93:58:ed:2d:3b:93:05:f7:62:58:93:cd:8b:b9:bf:e5:
7f:bd:28:5d:b6:5b:d5:61:02:19:a5:f7:4e:08:63:59:2e:b7:
e7:31:0f:58:16:a9:24:61:2e:57:80:cc:65:c7:4b:78:4b:53:
21:dc:6c:73:37:38:bf:41:fb:c0:0a:36:05:43:17:d6:62:46:
f5:3b:75:4f:13:28:8d:c8:52:2c:17:a0:80:85:16:ad:94:b6:
ba:ee:2e:de:61:b0:28:1c:d7:92:ca:3f:88:ca:f1:1a:26:19:
7c:30:64:a5:60:31:dc:93:c0:0a:e9:7e:56:e2:f0:60:d5:8c:
a0:8e:b7:2b:1e:82:7b:80:9e:a5:e1:25:f9:e4:16:2b:6b:eb:
f9:06:17:44:0d:61:04:87:e8:59:82:d0:42:3e:38:b4:2f:43:
92:61:80:c7:36:b7:b1:5b:e9:d9:ca:0d:32:de:ae:a6:2e:5f:
7b:21:14:7c:df:52:96:52:12:a0:91:9d:17:f1:c9:ea:f9:20:
e6:61:c2:d8:c3:25:f3:64:b9:88:2a:02:bb:a0:72:5c:da:9b:
24:e0:ac:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyCFc+I9xlN21XZxfNmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDdlY2YxNzE0MmIzYjA5MzVmOGUzN2I4ZjdkOWMyNTNm
MGVlMTkwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EyhmZmY2ZjNhOGVlZTA1MGFkZDVkZTIxYWVmMTU4NmNmNDg5N2I0NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nOikLEQ4JXFUEP08ph8J95MJUG6
FZSgg/2NJDy6ZBZST6Ls31sYe/aJP14xQS3jqNYixRetrpDhSJlnAMOhOLS5V319
8hGlL5va+F5vaA3H1z+vxh0F7sq3crP6h4tx8y0NWcfeXBZsWO6/5D9AvGRhoKz9
SThJg8qtKffweWlv0hdgipX+pPyp1MWC+76N0Vyvgmx3y0Ge5R8NuRkv4znPA2rI
1QwtWDRsdzAE8yM95TCvKKTZvuxRc9CY3oMy85VQjItVkAExifish3nXiNE9Z4Ga
X+vBWlcPHH4gKIcrrUrZBgE602mAQ9q2Szn/t9AoG5hfRrDF89OzSCm8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/286ju4FCt1d4hrvFYbPSJe0RZMB8GA1UdIwQY
MBaAFJHX7PFxQrOwk1+ON7j32cJT8O4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGIt
YTZiMWFkMzRlMDhjLzEva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGItYTZiMWFkMzRlMDhj
LzEva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODXwrBZ4
6YrY/7zsHgh96DzgI7FaSpsdg+2s3w1jur2RcPmoO1+TWO0tO5MF92JYk82Lub/l
f70oXbZb1WECGaX3TghjWS635zEPWBapJGEuV4DMZcdLeEtTIdxsczc4v0H7wAo2
BUMX1mJG9Tt1TxMojchSLBeggIUWrZS2uu4u3mGwKBzXkso/iMrxGiYZfDBkpWAx
3JPACul+VuLwYNWMoI63Kx6Ce4CepeEl+eQWK2vr+QYXRA1hBIfoWYLQQj44tC9D
kmGAxza3sVvp2coNMt6upi5feyEUfN9SllISoJGdF/HJ6vkg5mHC2MMl82S5iCoC
u6ByXNqbJOCslw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:25 2025 by rpki-client