Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: ofuOIRbtCJcd0s50Vh3Xxy9ZmNU0J/VKWHVwsXHGGhU=
Subject key identifier: 59:B0:F1:5C:B7:CC:FC:1E:18:C8:81:EE:21:0D:BD:7B:D2:48:30:00
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 0194BBCE9EB8EBE1DBB513EC0DABEE40C989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: htMp5H2sfXRiHp10557fu9AB576E+y399n/uYZFPl+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:b8:eb:e1:db:b5:13:ec:0d:ab:ee:40:c9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=59b0f15cb7ccfc1e18c881ee210dbd7bd2483000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:2f:eb:10:c1:a0:5c:db:15:89:ef:e4:bf:
0a:5d:dd:8a:53:53:d0:bd:02:51:a6:f0:63:ad:3b:
91:28:5d:0f:91:7f:30:17:83:c5:36:5a:a3:be:67:
d8:45:31:12:ae:8c:01:1a:9c:42:d4:0c:92:31:62:
37:e6:e6:d9:8d:4e:f9:06:0a:2d:f4:f4:3a:13:99:
7c:ce:0e:41:a5:77:10:a9:44:33:07:09:d1:44:f1:
76:5e:c2:c9:ec:6c:27:32:5c:5b:4e:4f:97:ed:19:
e1:9e:69:39:3e:12:3e:80:8c:b4:ed:b8:c6:b4:c0:
88:09:29:2e:95:72:e6:54:34:84:ad:2d:53:dc:3c:
c0:18:d3:66:f3:47:2a:b7:ac:44:95:65:7c:2f:11:
b2:33:f4:52:a1:53:7d:31:ad:a7:3c:e9:87:23:dd:
3e:9a:b1:7e:55:8f:5d:ef:ac:eb:40:65:ec:0d:b9:
35:1f:ce:d1:31:88:48:96:82:d6:4e:47:4f:11:d8:
46:ef:f0:7b:21:ad:46:50:18:21:69:de:a7:90:02:
6b:33:d3:b5:4a:33:31:4d:9a:30:ea:7b:52:20:4f:
3d:69:db:03:23:6e:af:6e:c2:83:66:26:44:c2:89:
d7:cf:8c:21:56:ff:0f:4a:29:98:84:25:34:d1:31:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B0:F1:5C:B7:CC:FC:1E:18:C8:81:EE:21:0D:BD:7B:D2:48:30:00
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:07:ac:2e:a3:6a:a5:1b:67:ce:b4:b1:3a:dd:79:eb:97:2c:
1f:d8:11:16:7e:28:11:01:da:37:a8:e0:ad:8b:79:69:b0:49:
4b:c6:da:a5:a4:17:49:b2:02:e4:b2:f5:d1:79:61:a5:96:25:
cd:d0:cc:3f:02:91:ca:35:6e:58:71:53:63:ff:01:c8:9b:f5:
ce:35:7c:f2:af:f4:d0:dc:ea:00:e0:4a:aa:54:1e:0e:8f:4a:
7a:1b:a6:27:f7:65:b5:3f:f9:4d:15:d2:39:ec:bd:4d:e7:99:
74:a1:c2:bd:a2:90:94:23:8c:63:2b:5e:85:5a:d2:f9:83:72:
2f:08:e2:4f:76:fb:ff:a9:e3:11:9b:7d:b2:6a:d8:26:47:2c:
e7:f8:7a:1b:72:8d:62:d3:1f:48:73:68:77:ac:40:27:23:4a:
c0:b1:30:9d:2a:be:c4:98:9a:62:82:d7:a7:93:9d:bb:7d:6b:
4d:14:b8:aa:d9:19:fe:c5:de:24:e5:53:27:8e:96:4b:61:80:
20:f2:c1:62:ce:b2:42:b7:5b:c8:e2:8c:0b:c5:23:7a:4f:02:
bf:90:26:45:17:67:7e:65:52:b4:b5:80:71:fb:aa:6b:78:9b:
f0:f1:84:d1:b5:0c:95:ed:50:44:4a:cb:c0:64:0a:e1:5b:b4:
b2:52:63:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zp646+HbtRPsDavuQMmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDU3ZGI3MGU0NzRlYjRhMDc3ZmExM2YzYmU0ZGQ3YjYz
ODBiNTQwHhcNMjUwMTMxMTAwMTA3WhcNMjUwMjAxMTAwMTA3WjAzMTEwLwYDVQQD
Eyg1OWIwZjE1Y2I3Y2NmYzFlMThjODgxZWUyMTBkYmQ3YmQyNDgzMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvov6xDBoFzbFYnv5L8KXd2KU1PQ
vQJRpvBjrTuRKF0PkX8wF4PFNlqjvmfYRTESrowBGpxC1AySMWI35ubZjU75Bgot
9PQ6E5l8zg5BpXcQqUQzBwnRRPF2XsLJ7GwnMlxbTk+X7Rnhnmk5PhI+gIy07bjG
tMCICSkulXLmVDSErS1T3DzAGNNm80cqt6xElWV8LxGyM/RSoVN9Ma2nPOmHI90+
mrF+VY9d76zrQGXsDbk1H87RMYhIloLWTkdPEdhG7/B7Ia1GUBghad6nkAJrM9O1
SjMxTZow6ntSIE89adsDI26vbsKDZiZEwonXz4whVv8PSimYhCU00TFXIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmw8Vy3zPweGMiB7iENvXvSSDAAMB8GA1UdIwQY
MBaAFCoFfbcOR060oHf6E/O+Tde2OAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEt
YzAzNTY4ZGMwOGIzLzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEtYzAzNTY4ZGMwOGIz
LzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwesLqNq
pRtnzrSxOt1565csH9gRFn4oEQHaN6jgrYt5abBJS8bapaQXSbIC5LL10XlhpZYl
zdDMPwKRyjVuWHFTY/8ByJv1zjV88q/00NzqAOBKqlQeDo9KehumJ/dltT/5TRXS
Oey9TeeZdKHCvaKQlCOMYytehVrS+YNyLwjiT3b7/6njEZt9smrYJkcs5/h6G3KN
YtMfSHNod6xAJyNKwLEwnSq+xJiaYoLXp5Odu31rTRS4qtkZ/sXeJOVTJ46WS2GA
IPLBYs6yQrdbyOKMC8Ujek8Cv5AmRRdnfmVStLWAcfuqa3ib8PGE0bUMle1QRErL
wGQK4Vu0slJjTA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:25 2025 by rpki-client