Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: 1M6NyoEwqLGcm0Yp5URlPTIOz1yfc81OWupVWNv2Q74=
Subject key identifier: F2:89:63:DB:23:81:AE:4D:B2:1B:71:5B:7F:0A:C2:5F:8C:6B:13:6F
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 0194BBCE45D590DF2EEAE94D5637C0F63D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: IRjrM71OJM5QObnZgNNrFRUyuDg.roa (hash: KDXjEC5+jgnVgR7YLpm66IF8Y8cfv8DKQxOxQp+OnTk=)
2: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: hS5RqgIJ9Ohu5iQ4Ahiih5nlEv1NJaf/IDqle5DzOGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:d5:90:df:2e:ea:e9:4d:56:37:c0:f6:3d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=f28963db2381ae4db21b715b7f0ac25f8c6b136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:83:2f:2a:5e:70:f8:6f:67:3d:1b:51:72:
d1:f1:28:12:88:df:63:d7:af:c0:f6:ae:a5:8d:09:
ae:d5:e6:ac:45:fd:a5:8e:f3:01:0c:51:a8:26:e9:
6a:10:5c:2f:64:e4:0c:61:ef:16:df:04:5a:7b:74:
c0:2a:ca:24:81:04:a2:95:f2:c3:a2:76:62:63:d0:
b4:b9:79:5f:f1:3c:c1:71:6e:7c:2d:a3:11:37:9f:
2b:2a:2f:18:19:92:8c:b4:83:dd:82:e2:1f:39:8a:
dd:8b:90:b2:d6:e4:c0:1d:28:fa:af:f9:88:b6:92:
ac:2b:58:9b:9e:d0:4e:b4:d7:0f:80:1e:7e:36:97:
98:d2:d5:65:30:d8:27:9b:10:88:88:14:c4:03:22:
51:f2:e8:f4:a8:13:ca:ad:ba:ce:ae:f9:ca:a5:a1:
6f:80:d3:eb:a9:78:7c:0f:bd:d1:34:c4:be:9a:63:
e4:00:64:1e:ee:48:52:3d:25:06:44:24:41:0f:cd:
b5:6c:03:42:b6:e8:8a:65:58:c6:fd:3e:18:8a:5f:
cd:dd:90:60:7e:37:d5:be:1b:bd:43:50:cb:e6:3d:
9e:9d:e8:ab:cf:c7:0a:b2:7c:fb:da:1c:e0:e4:f6:
f1:74:df:83:48:0b:d1:76:fb:db:02:e5:d1:82:85:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:63:DB:23:81:AE:4D:B2:1B:71:5B:7F:0A:C2:5F:8C:6B:13:6F
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b9:79:f6:fd:25:48:20:11:d3:38:5b:bf:ed:62:30:e2:93:
ba:9f:44:8e:0c:94:a4:77:be:de:de:e5:fb:b4:a4:86:ba:89:
6e:30:22:ad:38:a0:9c:f3:38:05:8f:a4:b9:c4:c1:8c:0e:6a:
fb:38:07:a8:8b:6c:39:30:02:4c:59:0c:c4:8e:a4:88:b1:84:
de:e4:d6:f6:da:52:c2:67:78:7c:c8:a0:f3:60:0b:d1:b4:9b:
eb:a1:49:e0:53:76:0c:0a:03:f4:42:bd:2d:03:f8:6a:b2:44:
f7:8d:b4:12:4d:a7:9f:2a:f8:40:f2:09:42:04:dd:a5:50:c9:
28:15:a8:3f:8d:93:0e:06:4f:26:01:81:18:68:0c:af:95:ef:
84:36:2a:e0:f1:12:26:98:bf:7f:e4:41:85:92:5d:81:a1:d2:
89:d0:eb:68:9c:b0:bd:fb:77:23:41:0d:b3:bb:f3:ff:af:26:
2c:19:fe:de:c2:03:14:b7:28:bc:43:20:62:77:c4:8b:db:cd:
a5:ed:35:ed:de:e6:c5:5c:a9:60:27:43:8a:7d:48:7c:8d:df:
92:58:eb:53:a0:e6:87:1f:ba:79:dd:a4:e5:b8:d6:42:67:84:
e2:7d:a7:58:0e:ed:37:71:95:0d:92:75:0a:a1:b4:de:dd:db:
94:18:c4:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkXVkN8u6ulNVjfA9j0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl
ZTNiMjMwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
EyhmMjg5NjNkYjIzODFhZTRkYjIxYjcxNWI3ZjBhYzI1ZjhjNmIxMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCCDLypecPhvZz0bUXLR8SgSiN9j
16/A9q6ljQmu1easRf2ljvMBDFGoJulqEFwvZOQMYe8W3wRae3TAKsokgQSilfLD
onZiY9C0uXlf8TzBcW58LaMRN58rKi8YGZKMtIPdguIfOYrdi5Cy1uTAHSj6r/mI
tpKsK1ibntBOtNcPgB5+NpeY0tVlMNgnmxCIiBTEAyJR8uj0qBPKrbrOrvnKpaFv
gNPrqXh8D73RNMS+mmPkAGQe7khSPSUGRCRBD821bANCtuiKZVjG/T4Yil/N3ZBg
fjfVvhu9Q1DL5j2eneirz8cKsnz72hzg5PbxdN+DSAvRdvvbAuXRgoUlFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKJY9sjga5NshtxW38Kwl+MaxNvMB8GA1UdIwQY
MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt
ZTAxYTU2ZjU4ZDM3LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3
LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErl59v0l
SCAR0zhbv+1iMOKTup9EjgyUpHe+3t7l+7SkhrqJbjAirTignPM4BY+kucTBjA5q
+zgHqItsOTACTFkMxI6kiLGE3uTW9tpSwmd4fMig82AL0bSb66FJ4FN2DAoD9EK9
LQP4arJE9420Ek2nnyr4QPIJQgTdpVDJKBWoP42TDgZPJgGBGGgMr5XvhDYq4PES
Jpi/f+RBhZJdgaHSidDraJywvft3I0ENs7vz/68mLBn+3sIDFLcovEMgYnfEi9vN
pe017d7mxVypYCdDin1IfI3fkljrU6Dmhx+6ed2k5bjWQmeE4n2nWA7tN3GVDZJ1
CqG03t3blBjEZg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:28 2025 by rpki-client