Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: VcBDle/VctjxcdkfJkSg2L5j7enBsK2FxFv4x1sdbkk=
Subject key identifier: 65:53:EE:2B:AE:C6:7A:21:84:8E:F4:21:33:41:74:19:4C:17:FC:DD
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 0194BCA99A43A9B98699ACD529970DEFD1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: FRZsIboZTqn0YU9fTz0LIZmR8dwn/PNWVGkLWYtyI7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:43:a9:b9:86:99:ac:d5:29:97:0d:ef:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=6553ee2baec67a21848ef421334174194c17fcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:14:a4:b0:ac:e9:73:47:a2:c6:33:6a:20:
1f:6b:d5:3b:73:79:c4:4b:7f:57:93:94:c4:bf:78:
8c:42:ee:7c:89:a2:fd:ce:f2:46:9f:49:d2:93:96:
2c:ac:fc:35:71:7b:b2:f5:9e:59:36:23:98:0d:32:
ec:ca:7b:88:01:95:34:32:ce:95:6c:94:7f:48:a7:
56:97:0e:7e:e2:8d:b5:b6:a9:c8:54:8d:c8:09:6d:
8a:0b:f7:72:92:df:16:71:18:1c:cf:62:06:72:b7:
28:79:c5:2e:f7:f8:9d:3d:ca:1b:2e:d2:77:fb:4c:
fe:f2:50:94:8c:8d:c9:98:2f:d1:e8:68:0f:dd:5b:
62:f5:b1:8d:2c:8c:1f:a4:b7:90:02:de:e6:47:40:
4b:fa:3b:6f:cc:c3:2c:b0:c9:69:8e:d0:74:b5:de:
e3:da:75:c5:6d:9e:af:4f:d6:86:8f:94:42:83:69:
3a:62:2b:fc:f7:36:6b:a4:b2:ef:03:da:e1:49:b3:
33:28:c8:9d:d4:9d:4e:06:0f:f9:0e:b9:bb:c0:66:
eb:4f:ea:68:22:38:d2:ad:f0:80:cf:79:f1:40:08:
fa:ac:27:35:5a:cb:a1:78:51:57:76:66:44:cf:80:
0e:5e:f3:9d:8d:84:94:47:aa:0e:06:98:1f:7a:1a:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:53:EE:2B:AE:C6:7A:21:84:8E:F4:21:33:41:74:19:4C:17:FC:DD
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:69:09:f5:13:2b:44:ed:57:36:c5:03:4c:a7:1b:75:ae:c3:
90:c9:04:d1:46:30:b8:56:82:90:2c:7a:be:a6:6c:6f:07:ce:
ae:ca:79:03:7c:45:d8:ef:29:da:cc:b3:64:1c:08:bf:ae:ac:
d6:6f:12:f6:85:e8:b5:49:c5:d9:20:07:1c:e0:9f:b0:a0:16:
96:db:20:0d:19:f4:92:24:f7:4c:fd:e2:e5:e6:78:64:f0:f6:
fd:37:f3:8d:58:06:ab:5a:c3:16:f4:83:f6:94:32:59:da:c5:
bc:34:6c:ef:15:0f:ac:cd:8b:8d:6e:89:6d:df:7c:91:6b:46:
c0:55:4e:ea:a0:65:6a:d9:12:70:84:fb:91:40:74:5e:65:20:
af:fa:49:0c:36:fe:19:6b:0c:93:93:3e:0e:6f:b0:e1:1f:22:
ec:3e:1b:c8:3a:04:02:7c:30:e5:5f:b9:1a:a9:ed:57:69:61:
b3:ae:ce:b6:8b:f4:ba:94:6d:79:4e:29:ca:a4:1d:4c:a1:ee:
0e:f6:a9:45:6d:88:df:31:c0:af:eb:38:46:91:9f:81:10:b0:
51:fd:7a:d3:29:f2:de:47:ad:a8:1b:ec:49:19:b3:70:78:43:
6f:62:fc:77:bf:dd:a8:41:6c:1c:76:eb:8d:d6:09:35:cd:17:
3a:da:4e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZpDqbmGmazVKZcN79HnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm
MTlhNjAwHhcNMjUwMTMxMTQwMDE5WhcNMjUwMjAxMTQwMDE5WjAzMTEwLwYDVQQD
Eyg2NTUzZWUyYmFlYzY3YTIxODQ4ZWY0MjEzMzQxNzQxOTRjMTdmY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKEUpLCs6XNHosYzaiAfa9U7c3nE
S39Xk5TEv3iMQu58iaL9zvJGn0nSk5YsrPw1cXuy9Z5ZNiOYDTLsynuIAZU0Ms6V
bJR/SKdWlw5+4o21tqnIVI3ICW2KC/dykt8WcRgcz2IGcrcoecUu9/idPcobLtJ3
+0z+8lCUjI3JmC/R6GgP3Vti9bGNLIwfpLeQAt7mR0BL+jtvzMMssMlpjtB0td7j
2nXFbZ6vT9aGj5RCg2k6Yiv89zZrpLLvA9rhSbMzKMid1J1OBg/5Drm7wGbrT+po
IjjSrfCAz3nxQAj6rCc1WsuheFFXdmZEz4AOXvOdjYSUR6oOBpgfehoILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVT7iuuxnohhI70ITNBdBlMF/zdMB8GA1UdIwQY
MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt
ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl
LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2kJ9RMr
RO1XNsUDTKcbda7DkMkE0UYwuFaCkCx6vqZsbwfOrsp5A3xF2O8p2syzZBwIv66s
1m8S9oXotUnF2SAHHOCfsKAWltsgDRn0kiT3TP3i5eZ4ZPD2/TfzjVgGq1rDFvSD
9pQyWdrFvDRs7xUPrM2LjW6Jbd98kWtGwFVO6qBlatkScIT7kUB0XmUgr/pJDDb+
GWsMk5M+Dm+w4R8i7D4byDoEAnww5V+5GqntV2lhs67Otov0upRteU4pyqQdTKHu
DvapRW2I3zHAr+s4RpGfgRCwUf160yny3ketqBvsSRmzcHhDb2L8d7/dqEFsHHbr
jdYJNc0XOtpOCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:43:05 2025 by rpki-client