Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: nOmFSi/pAjBG2BxkQvcJPZXyj/aoTx+g7vF6lRs2as0=
Subject key identifier: 39:C7:1B:86:91:F3:45:AD:50:13:DC:95:42:AB:51:50:4D:E0:F6:A4
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 0194BBCEDF9EB008D87BC40976B1B1F9266B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 0A95
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: 9cEvXYVcBJeRVXoK10hhOCyNhJY.roa (hash: ihTe2JjgXGvlLA7K+HxYQQd7iWcLoXsDNyag9kYHBGk=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: OcSiTIR1NxNwf+fPn0XRfim47lFA6Kc1ZIi2S38e3o4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:9e:b0:08:d8:7b:c4:09:76:b1:b1:f9:26:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=39c71b8691f345ad5013dc9542ab51504de0f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:a5:f9:4c:f0:91:cf:a9:49:6b:a9:fa:8c:
9f:dd:ea:27:af:6a:a0:a0:c0:73:68:07:37:4b:a7:
53:26:a1:ee:fa:5f:3e:20:2e:56:da:fb:e7:b1:31:
ee:0e:75:63:ae:68:9c:ee:d3:a4:4c:7c:9a:62:03:
92:69:8e:69:da:54:6b:35:3c:8c:ae:98:06:1a:38:
22:79:96:07:a6:0e:c1:f3:90:bf:67:d3:a8:6e:cf:
17:85:6c:8c:c1:19:dc:65:dc:2f:c8:5a:da:c3:69:
df:ce:da:b3:b3:f3:ea:16:da:4e:98:dc:26:8b:56:
79:a4:b9:61:66:4f:67:79:a9:84:da:ac:8b:84:66:
d8:62:8e:3c:d4:6e:58:bf:35:91:86:3a:c3:98:6b:
b7:e2:4a:39:d0:00:61:0d:11:32:0f:8f:1d:da:6b:
e1:cf:43:e0:14:6d:79:d7:2d:47:cf:f2:32:14:df:
d7:d4:54:09:8f:f9:e1:ab:c4:31:37:48:80:d4:71:
9b:09:8a:a3:69:31:76:d6:5e:35:42:f4:48:3e:1b:
eb:f7:39:e0:2b:90:73:7e:9b:2d:db:fb:2b:d0:d5:
7e:5c:cf:ac:b0:e3:1b:bf:1a:0b:dc:a7:a3:5b:c2:
40:5f:60:dd:54:57:bd:da:6e:a3:2d:b4:9f:ef:48:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:1B:86:91:F3:45:AD:50:13:DC:95:42:AB:51:50:4D:E0:F6:A4
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ba:21:cb:23:5a:1b:e0:bc:87:17:36:ee:d1:7b:a8:24:00:
b8:32:94:4b:f7:cd:1d:d4:fc:56:83:fc:07:ee:dc:22:18:35:
57:4a:92:30:02:06:7f:0b:07:e0:7c:eb:5c:6c:61:f6:7d:4d:
6d:f0:bb:b3:f4:54:1c:b8:6b:a6:87:64:5b:6b:ca:08:95:fe:
fd:cf:94:59:84:2e:01:aa:b5:a2:24:e5:ec:dd:b1:17:df:70:
08:79:3f:4c:2b:25:6b:e3:ab:19:4a:f5:cc:0a:ed:71:63:78:
9d:69:f8:d8:28:4e:af:5f:1a:85:b7:3d:1f:6a:ff:36:10:e0:
71:9f:c6:06:33:6d:30:f4:bf:8c:d6:4f:ad:6f:76:ef:93:91:
19:a2:9d:35:2b:07:cd:94:3f:65:ee:3f:d4:b9:26:e9:27:54:
14:95:3b:da:d7:24:53:46:19:51:78:2e:77:51:96:5d:01:38:
75:fb:9e:f8:74:3d:84:3f:e1:26:ac:e4:06:ad:64:fe:35:19:
5b:d3:11:66:6c:f4:eb:58:a6:0c:e6:5c:2a:6c:0d:a8:63:e1:
45:7b:9b:c3:96:56:69:5a:bd:3a:b9:31:53:65:f5:eb:33:a9:
32:3e:a5:fa:8c:ac:e3:ce:5c:df:e2:bf:62:bf:b2:07:1b:52:
7c:78:46:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zt+esAjYe8QJdrGx+SZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWEwYmRlN2Y2OTJiYzVmZGMwYjE2OGJhNjE0YTAyNzJm
MmU2NGQwHhcNMjUwMTMxMTAwMTI0WhcNMjUwMjAxMTAwMTI0WjAzMTEwLwYDVQQD
EygzOWM3MWI4NjkxZjM0NWFkNTAxM2RjOTU0MmFiNTE1MDRkZTBmNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Eal+Uzwkc+pSWup+oyf3eonr2qg
oMBzaAc3S6dTJqHu+l8+IC5W2vvnsTHuDnVjrmic7tOkTHyaYgOSaY5p2lRrNTyM
rpgGGjgieZYHpg7B85C/Z9Oobs8XhWyMwRncZdwvyFraw2nfztqzs/PqFtpOmNwm
i1Z5pLlhZk9neamE2qyLhGbYYo481G5YvzWRhjrDmGu34ko50ABhDREyD48d2mvh
z0PgFG151y1Hz/IyFN/X1FQJj/nhq8QxN0iA1HGbCYqjaTF21l41QvRIPhvr9zng
K5Bzfpst2/sr0NV+XM+ssOMbvxoL3KejW8JAX2DdVFe92m6jLbSf70gf9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnHG4aR80WtUBPclUKrUVBN4PakMB8GA1UdIwQY
MBaAFCnqC95/aSvF/cCxaLphSgJy8uZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMmZmNWItMDAwOC00NTcyLTkzODAt
OTc2YzA0YmRmMThmLzEvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMmZmNWItMDAwOC00NTcyLTkzODAtOTc2YzA0YmRmMThm
LzEvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrohyyNa
G+C8hxc27tF7qCQAuDKUS/fNHdT8VoP8B+7cIhg1V0qSMAIGfwsH4HzrXGxh9n1N
bfC7s/RUHLhrpodkW2vKCJX+/c+UWYQuAaq1oiTl7N2xF99wCHk/TCsla+OrGUr1
zArtcWN4nWn42ChOr18ahbc9H2r/NhDgcZ/GBjNtMPS/jNZPrW9275ORGaKdNSsH
zZQ/Ze4/1Lkm6SdUFJU72tckU0YZUXgud1GWXQE4dfue+HQ9hD/hJqzkBq1k/jUZ
W9MRZmz061imDOZcKmwNqGPhRXubw5ZWaVq9OrkxU2X16zOpMj6l+oys485c3+K/
Yr+yBxtSfHhGOw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:27 2025 by rpki-client