Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: rfYkioLupK9gutBgrPM0PKP4hMau1fEucg5kQgRQpl8=
Subject key identifier: 7C:2A:A3:03:C2:11:B8:5A:01:1C:0A:8D:5C:B4:21:37:48:F9:0F:05
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 0194BCA9E3BE4E65E17D44EADCA3CCA50EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: z1uKJ7lcyVmCRDlclaQ9ashxE3qD95kdIQ4WUFAJmWk=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e3:be:4e:65:e1:7d:44:ea:dc:a3:cc:a5:0e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=7c2aa303c211b85a011c0a8d5cb4213748f90f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:fd:fd:c5:3d:d1:7d:c7:ba:87:2e:12:ef:
12:12:6a:83:ab:51:dd:77:21:b7:1f:bf:6c:97:fe:
70:11:8b:8a:0a:8f:58:ae:61:dc:87:32:0d:da:f4:
b3:a9:6d:10:3c:6d:b7:10:1f:5f:24:40:8e:d6:c0:
a7:24:5c:dc:66:24:0e:bd:a8:ec:8a:c7:57:2a:ea:
ab:9c:db:ab:0e:69:e8:38:50:2d:07:7c:b2:1e:d4:
4f:dc:7f:4c:80:99:a9:1f:ce:fb:2a:d6:fb:f5:df:
80:5a:e3:e8:24:39:bf:1f:ff:fe:c9:ae:0a:9f:fe:
2e:f2:e4:0c:7a:ea:79:30:aa:88:82:b3:0e:3e:f5:
3d:69:15:30:77:00:db:ee:cf:15:f4:bb:33:af:ca:
57:7a:96:59:ba:bf:78:3e:33:e7:76:f6:fb:31:77:
34:47:ec:df:02:c4:22:bf:12:78:26:1b:87:54:b2:
b5:8d:fd:02:3c:92:ea:58:ca:25:d9:c8:29:3d:3b:
0b:52:70:d1:bc:68:f7:b0:30:51:d9:97:c4:fe:22:
40:e5:3b:85:e8:25:a5:b0:87:e9:37:fb:35:cf:53:
94:82:8c:ac:a8:b2:f7:53:e5:62:b4:d6:88:fc:33:
cf:9e:7f:84:c6:a7:5a:72:1a:7e:48:9f:4a:a8:88:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:A3:03:C2:11:B8:5A:01:1C:0A:8D:5C:B4:21:37:48:F9:0F:05
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:eb:14:56:c7:a4:62:ef:c7:c2:4e:31:84:d2:22:09:3e:e2:
cf:86:80:09:a5:27:3b:79:46:93:51:96:93:89:c9:f3:70:47:
1d:6c:8b:4a:66:da:34:8f:21:b6:66:03:4d:8e:65:c6:a9:10:
73:bb:0b:36:06:42:66:8c:6c:b3:36:5f:2b:22:14:81:2a:16:
2b:a2:97:9c:4d:60:7c:87:0c:c5:4d:73:d8:b4:bf:fd:f1:41:
b5:8d:e3:e6:ad:bd:1a:26:a9:07:02:03:97:f1:0a:77:9b:10:
e0:d1:5f:fd:be:97:9b:86:dd:98:91:25:b9:cb:7d:72:4d:67:
81:5e:52:db:69:68:d8:de:90:b0:f2:a9:58:98:0a:f4:36:db:
5c:0e:08:17:48:88:52:ff:b5:04:d2:6f:f3:7d:7e:0d:23:76:
3b:97:e5:be:67:4c:4a:78:13:7d:37:f8:88:3a:6f:69:87:d6:
dd:96:41:44:36:43:0c:ba:dd:ab:4a:56:bc:bb:af:f4:66:93:
b5:11:70:5a:a6:ca:d1:b2:8f:71:97:4f:7e:cc:35:b0:55:56:
12:2e:d7:1f:37:0e:5e:ba:56:69:17:bf:8b:97:36:85:2e:c5:
0e:e5:05:5f:a5:92:97:0d:84:0f:dd:f6:bd:6c:1c:3b:e7:88:
96:7c:b9:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeO+TmXhfUTq3KPMpQ6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl
ZGU3NDQwHhcNMjUwMTMxMTQwMDM3WhcNMjUwMjAxMTQwMDM3WjAzMTEwLwYDVQQD
Eyg3YzJhYTMwM2MyMTFiODVhMDExYzBhOGQ1Y2I0MjEzNzQ4ZjkwZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/r9/cU90X3HuocuEu8SEmqDq1Hd
dyG3H79sl/5wEYuKCo9YrmHchzIN2vSzqW0QPG23EB9fJECO1sCnJFzcZiQOvajs
isdXKuqrnNurDmnoOFAtB3yyHtRP3H9MgJmpH877Ktb79d+AWuPoJDm/H//+ya4K
n/4u8uQMeup5MKqIgrMOPvU9aRUwdwDb7s8V9Lszr8pXepZZur94PjPndvb7MXc0
R+zfAsQivxJ4JhuHVLK1jf0CPJLqWMol2cgpPTsLUnDRvGj3sDBR2ZfE/iJA5TuF
6CWlsIfpN/s1z1OUgoysqLL3U+VitNaI/DPPnn+Exqdachp+SJ9KqIhUjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwqowPCEbhaARwKjVy0ITdI+Q8FMB8GA1UdIwQY
MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt
MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3
LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAausUVsek
Yu/Hwk4xhNIiCT7iz4aACaUnO3lGk1GWk4nJ83BHHWyLSmbaNI8htmYDTY5lxqkQ
c7sLNgZCZoxsszZfKyIUgSoWK6KXnE1gfIcMxU1z2LS//fFBtY3j5q29GiapBwID
l/EKd5sQ4NFf/b6Xm4bdmJEluct9ck1ngV5S22lo2N6QsPKpWJgK9DbbXA4IF0iI
Uv+1BNJv831+DSN2O5flvmdMSngTfTf4iDpvaYfW3ZZBRDZDDLrdq0pWvLuv9GaT
tRFwWqbK0bKPcZdPfsw1sFVWEi7XHzcOXrpWaRe/i5c2hS7FDuUFX6WSlw2ED932
vWwcO+eIlny5Rg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:26 2025 by rpki-client