Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier: 5qLq6qpHpbFxgARFfyKuOnth/u+MNhf4Chq6HtXgXHk=
Subject key identifier: 45:FA:44:41:01:F1:71:C2:A6:BF:45:F0:4F:7C:9A:74:57:BE:77:7F
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial: 0194BBCDD8E9DF7246DDB21D431A7BA6C6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number: 1126
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=)
2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: rFPosdQklh2mmmkCR0K2ra4YdmFrIQp2iOViaut0sSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:e9:df:72:46:dd:b2:1d:43:1a:7b:a6:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=45fa444101f171c2a6bf45f04f7c9a7457be777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:a9:63:66:f6:dc:91:a3:50:74:c3:1c:b2:
f7:9b:a6:48:5b:36:35:a1:99:3a:5a:d4:58:b3:cf:
95:db:93:e7:eb:59:96:24:0d:67:8f:d3:ea:93:b9:
15:9c:2c:df:4c:28:46:89:ab:25:e6:94:67:92:78:
f4:33:7f:a7:cb:72:9e:65:e2:8e:61:a0:23:5a:b5:
1a:27:9f:c0:0d:51:86:41:53:50:43:1b:e7:b9:9a:
9f:a2:1b:ab:b6:23:85:d6:ab:79:66:e4:0f:85:c4:
b0:c5:63:b9:7e:62:dc:18:f2:58:5c:2c:56:f0:98:
17:9f:0f:b2:93:ab:96:6b:34:88:ab:7a:1e:e6:c9:
48:e0:84:50:ce:de:82:08:d4:f1:13:80:d2:fc:04:
36:32:40:e1:9c:12:a6:3e:3e:f8:d0:1a:7c:52:14:
59:88:cb:c1:c1:8a:11:5b:8c:58:d8:70:b6:57:a7:
da:53:2e:8c:42:1d:33:ea:ae:8c:e0:e2:26:a7:00:
01:51:fd:8f:48:5e:99:0f:ad:af:57:76:c3:a4:d8:
65:7e:ba:30:63:4b:a9:56:78:9e:87:07:3f:57:01:
a0:42:d4:76:5b:bc:dd:5c:2e:74:dc:1a:76:42:4a:
6f:25:b7:f0:61:e5:be:bd:ee:c4:f8:83:17:dd:c1:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:44:41:01:F1:71:C2:A6:BF:45:F0:4F:7C:9A:74:57:BE:77:7F
X509v3 Authority Key Identifier:
keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a1:57:6e:cb:69:d1:45:84:91:85:57:c0:7f:2d:03:89:3b:
33:ef:c6:52:f6:f8:f2:f6:38:21:77:41:8c:f0:11:6f:f3:97:
e8:69:0d:61:02:6d:47:97:8e:77:31:65:43:1d:33:f5:8f:27:
dc:3d:a5:f0:ce:d6:16:8e:12:e6:55:6c:4f:9f:cb:81:64:87:
be:14:8a:c6:53:15:20:63:0a:c7:19:77:33:3a:96:5a:74:85:
99:c5:d2:7b:24:7e:3f:31:8b:c3:ec:4c:cc:f0:45:8d:43:9c:
fb:d1:da:93:9e:19:af:8a:2c:68:06:5e:08:aa:62:50:18:b0:
93:d9:77:a9:f5:35:c4:f1:e0:7c:2c:52:94:9e:c4:e7:e9:39:
0b:c6:8c:22:f9:cb:80:7f:ac:a5:bd:72:cf:f3:a6:4e:cb:02:
56:bc:5f:6e:e7:43:94:05:16:6e:d2:00:80:e5:23:0a:4b:eb:
12:1d:aa:d8:68:4d:d4:22:52:34:e2:a0:45:c8:c2:be:4b:66:
08:31:a2:2b:0d:94:ef:61:cf:be:f7:2a:12:f7:58:cf:1c:28:
53:28:78:50:68:5a:9e:7d:a2:d4:b4:73:c7:e4:4c:c0:19:af:
8d:29:03:7d:eb:d0:5c:34:41:e1:8a:41:33:44:51:69:9e:73:
cf:32:7c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdjp33JG3bIdQxp7psbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjE0YTkwZDQwOTVmZDI2NzY1Y2MwZTRkZjg5OWU4YzQ2
YzA2ZGYwHhcNMjUwMTMxMTAwMDE3WhcNMjUwMjAxMTAwMDE3WjAzMTEwLwYDVQQD
Eyg0NWZhNDQ0MTAxZjE3MWMyYTZiZjQ1ZjA0ZjdjOWE3NDU3YmU3NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFupY2b23JGjUHTDHLL3m6ZIWzY1
oZk6WtRYs8+V25Pn61mWJA1nj9Pqk7kVnCzfTChGiasl5pRnknj0M3+ny3KeZeKO
YaAjWrUaJ5/ADVGGQVNQQxvnuZqfohurtiOF1qt5ZuQPhcSwxWO5fmLcGPJYXCxW
8JgXnw+yk6uWazSIq3oe5slI4IRQzt6CCNTxE4DS/AQ2MkDhnBKmPj740Bp8UhRZ
iMvBwYoRW4xY2HC2V6faUy6MQh0z6q6M4OImpwABUf2PSF6ZD62vV3bDpNhlfrow
Y0upVniehwc/VwGgQtR2W7zdXC503Bp2QkpvJbfwYeW+ve7E+IMX3cEmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX6REEB8XHCpr9F8E98mnRXvnd/MB8GA1UdIwQY
MBaAFJIhSpDUCV/SZ2XMDk34mejEbAbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEt
NTdkODAzMGI2MWUxLzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEtNTdkODAzMGI2MWUx
LzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyqFXbstp
0UWEkYVXwH8tA4k7M+/GUvb48vY4IXdBjPARb/OX6GkNYQJtR5eOdzFlQx0z9Y8n
3D2l8M7WFo4S5lVsT5/LgWSHvhSKxlMVIGMKxxl3MzqWWnSFmcXSeyR+PzGLw+xM
zPBFjUOc+9Hak54Zr4osaAZeCKpiUBiwk9l3qfU1xPHgfCxSlJ7E5+k5C8aMIvnL
gH+spb1yz/OmTssCVrxfbudDlAUWbtIAgOUjCkvrEh2q2GhN1CJSNOKgRcjCvktm
CDGiKw2U72HPvvcqEvdYzxwoUyh4UGhann2i1LRzx+RMwBmvjSkDfevQXDRB4YpB
M0RRaZ5zzzJ8ww==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:26 2025 by rpki-client