Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: vGTRtjLBMTQ/8sAEbW7AxkfbWHLQZ+Ku8u2L7cL3JPo=
Subject key identifier: C7:88:E0:96:EA:F8:E7:90:3B:8E:C0:97:D5:2F:18:1A:BD:A3:6D:53
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 0194BCE06CDECF52653538B2C25CD934FF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 1328
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: PbgTXFYNX5FzGrYrgxH7NytnWio02Ee2a+lUgwls5ic=)
2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:de:cf:52:65:35:38:b2:c2:5c:d9:34:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=c788e096eaf8e7903b8ec097d52f181abda36d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:28:4f:0e:39:34:39:57:f0:ca:99:67:ed:
2d:f1:a0:cc:03:b9:eb:f2:05:75:52:2d:1e:63:0b:
bb:84:94:90:fb:e8:bd:10:4f:3b:7d:0d:b8:7e:87:
cb:21:88:53:64:06:fc:a4:68:8f:32:5d:94:09:37:
dd:0f:87:0e:b6:74:15:85:6e:de:15:60:c4:8e:e1:
5e:43:2a:8c:4d:e9:31:dd:84:d2:57:5c:44:27:1f:
59:12:21:40:b1:71:18:f0:6a:25:34:09:5f:7e:ce:
3b:19:91:ed:49:09:84:93:7f:bf:eb:94:39:50:0c:
5b:4a:cd:e2:5f:f8:b0:fd:30:1b:81:fe:05:c4:fa:
f7:f6:21:f6:af:cd:00:9a:33:2f:bf:ed:c9:62:8d:
f8:22:9a:c7:a1:4c:7b:3b:ed:d0:2f:41:17:75:f3:
31:6f:c3:06:25:c8:f4:f1:f8:0b:20:2b:aa:e3:a9:
d8:98:63:bc:6f:ea:ca:e2:8f:4a:fd:56:e3:f0:9f:
e7:ef:f8:ad:1b:27:de:eb:71:0c:08:3b:7a:76:67:
e3:05:4d:b6:ce:f6:39:39:ba:68:fd:85:fa:3e:6d:
db:1f:26:06:9f:0d:a3:ad:86:c3:d4:f3:e1:28:bc:
26:05:9e:ad:28:6d:2b:a6:f3:d4:57:ab:63:b1:82:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:88:E0:96:EA:F8:E7:90:3B:8E:C0:97:D5:2F:18:1A:BD:A3:6D:53
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ce:39:f8:90:78:55:fc:e6:14:fa:b4:f2:33:45:9a:7a:49:
85:20:75:5a:27:ee:ef:91:d2:a9:f4:bc:c9:7f:3b:cb:9d:cf:
09:45:59:e8:63:15:d9:58:d6:0b:ac:16:82:3a:02:6e:a4:bc:
a4:e7:1c:9f:2f:01:00:0f:5f:83:94:cb:ed:ba:d3:a9:78:fd:
1a:e8:d3:e9:f6:76:fb:8e:49:fd:df:de:9f:ae:ea:66:5c:07:
fc:4f:a1:ca:ab:b0:9b:69:ec:88:8e:dc:a6:85:2e:8d:4a:90:
0b:36:96:b5:17:eb:a8:87:dc:b4:ba:7d:2f:3c:73:43:69:92:
50:6b:fb:f6:5d:5d:d7:b3:6a:0f:e3:bc:cf:42:69:f0:d9:15:
be:4e:5f:72:c6:20:87:5b:e2:a7:21:26:13:d4:23:67:c3:61:
2f:72:76:34:68:75:84:0d:03:68:75:c9:63:12:36:64:b4:e0:
4b:63:40:91:03:5b:54:57:78:ec:2a:75:34:42:17:ed:12:88:
0c:a4:56:94:40:20:a2:a7:42:ff:9a:e3:f5:f7:1f:dd:d1:c2:
58:ee:ae:0c:17:18:84:c9:3f:66:48:ee:65:08:7c:fb:7b:1b:
ba:17:e7:0f:da:0d:2f:aa:6e:d5:85:e9:26:ef:4f:0c:c0:e3:
1a:5e:11:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Gzez1JlNTiywlzZNP+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTVmYmNiY2Y4OGQxYWQ5YjE5ZmM0MmM3YWExMWFkM2Qy
YTdlYTAwHhcNMjUwMTMxMTUwMDEyWhcNMjUwMjAxMTUwMDEyWjAzMTEwLwYDVQQD
EyhjNzg4ZTA5NmVhZjhlNzkwM2I4ZWMwOTdkNTJmMTgxYWJkYTM2ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQoTw45NDlX8MqZZ+0t8aDMA7nr
8gV1Ui0eYwu7hJSQ++i9EE87fQ24fofLIYhTZAb8pGiPMl2UCTfdD4cOtnQVhW7e
FWDEjuFeQyqMTekx3YTSV1xEJx9ZEiFAsXEY8GolNAlffs47GZHtSQmEk3+/65Q5
UAxbSs3iX/iw/TAbgf4FxPr39iH2r80AmjMvv+3JYo34IprHoUx7O+3QL0EXdfMx
b8MGJcj08fgLICuq46nYmGO8b+rK4o9K/Vbj8J/n7/itGyfe63EMCDt6dmfjBU22
zvY5Obpo/YX6Pm3bHyYGnw2jrYbD1PPhKLwmBZ6tKG0rpvPUV6tjsYLRWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeI4Jbq+OeQO47Al9UvGBq9o21TMB8GA1UdIwQY
MBaAFCiV+8vPiNGtmxn8QseqEa09Kn6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTIt
NDk2NmIzY2ZjODdkLzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTItNDk2NmIzY2ZjODdk
LzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc45+JB4
VfzmFPq08jNFmnpJhSB1Wifu75HSqfS8yX87y53PCUVZ6GMV2VjWC6wWgjoCbqS8
pOccny8BAA9fg5TL7brTqXj9GujT6fZ2+45J/d/en67qZlwH/E+hyquwm2nsiI7c
poUujUqQCzaWtRfrqIfctLp9LzxzQ2mSUGv79l1d17NqD+O8z0Jp8NkVvk5fcsYg
h1vipyEmE9QjZ8NhL3J2NGh1hA0DaHXJYxI2ZLTgS2NAkQNbVFd47Cp1NEIX7RKI
DKRWlEAgoqdC/5rj9fcf3dHCWO6uDBcYhMk/ZkjuZQh8+3sbuhfnD9oNL6pu1YXp
Ju9PDMDjGl4RTg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:48 2025 by rpki-client