Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/kh2gU5IfUoNniBiPgvYt1aqXP-k.mft
File: kh2gU5IfUoNniBiPgvYt1aqXP-k.mft (raw, json)
Hash identifier: 6m7q6WcetXCUWZnovcUmhuOhLlaq1UJ7hiyELWkMcGk=
Subject key identifier: DC:49:79:A9:40:34:91:4D:77:06:55:A2:0C:2A:88:8C:D3:2E:06:73
Authority key identifier: 92:1D:A0:53:92:1F:52:83:67:88:18:8F:82:F6:2D:D5:AA:97:3F:E9
Certificate issuer: /CN=921da053921f52836788188f82f62dd5aa973fe9
Certificate serial: 0194BC3BD7F9E9AEE67A1CD1F920B86F9F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kh2gU5IfUoNniBiPgvYt1aqXP-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/kh2gU5IfUoNniBiPgvYt1aqXP-k.mft
Manifest number: 0CEF
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: kh2gU5IfUoNniBiPgvYt1aqXP-k.crl (hash: 8ZSsqMnykH1AqBJdLBKBc1LvCOHuILvCVh6wPDrNeQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d7:f9:e9:ae:e6:7a:1c:d1:f9:20:b8:6f:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921da053921f52836788188f82f62dd5aa973fe9
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=dc4979a94034914d770655a20c2a888cd32e0673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:31:8b:df:e3:81:41:37:14:a6:9a:ee:63:
f1:d1:e1:df:76:c6:d1:45:d8:75:28:14:ca:0f:c7:
35:55:6d:b6:f3:73:a3:82:9f:b2:9b:10:e9:58:e0:
6e:0a:af:f1:33:cb:f6:aa:b4:d0:36:3f:22:12:15:
00:63:e0:7b:e2:9c:81:35:20:99:d1:09:5b:44:25:
d1:e4:f4:75:ef:d9:67:e1:72:da:7e:7a:2a:93:9a:
f1:5b:18:3d:47:0e:27:ea:7b:91:0d:c6:20:81:b9:
98:a6:26:ae:18:e0:70:c7:a3:78:54:10:df:3c:7e:
bf:aa:e7:4d:98:4a:c9:82:74:ca:5d:a9:33:c8:e9:
45:1a:72:62:da:e4:c7:a0:cc:1e:48:c0:b5:9c:f5:
7f:19:23:ff:fd:33:35:85:e5:43:1b:7e:70:5b:08:
00:f7:a4:7a:77:aa:f1:d6:36:e9:6a:5e:59:fb:3c:
3a:6f:bd:34:60:fc:2f:69:79:95:78:8c:5d:4b:fd:
dd:95:29:ca:aa:4a:c1:e7:36:6a:b5:e3:f0:9f:0f:
eb:03:6a:b6:b9:1f:45:90:88:25:ec:97:8b:2d:99:
87:e3:1e:0c:9b:bf:58:cf:54:ee:05:79:48:14:9f:
a4:be:b7:1c:b5:ad:f9:2c:48:ad:d0:dd:fa:c6:92:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:79:A9:40:34:91:4D:77:06:55:A2:0C:2A:88:8C:D3:2E:06:73
X509v3 Authority Key Identifier:
keyid:92:1D:A0:53:92:1F:52:83:67:88:18:8F:82:F6:2D:D5:AA:97:3F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kh2gU5IfUoNniBiPgvYt1aqXP-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/kh2gU5IfUoNniBiPgvYt1aqXP-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/kh2gU5IfUoNniBiPgvYt1aqXP-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:54:59:0c:80:7f:e1:d7:94:e0:ae:d5:5b:d2:22:3d:9c:47:
a1:ea:d2:35:b8:27:04:3b:46:2d:3e:33:70:de:4e:3f:8a:48:
f2:a0:c1:03:83:8d:57:7d:47:f3:b4:fe:5d:ff:1c:3d:76:3b:
b1:ad:ae:85:a9:68:86:bd:73:57:00:9d:e1:1c:35:f2:6b:1e:
a8:03:f9:b3:38:8d:7e:ad:dd:5b:ee:3b:55:b8:39:f1:f5:75:
5a:0f:6c:fd:25:f7:aa:aa:40:6b:6d:45:7d:90:6c:3d:4d:c3:
2b:c6:6f:c0:ad:c9:c8:2c:44:f1:fa:82:6a:7b:1a:a2:04:51:
b7:21:3d:24:16:f3:b4:86:fa:3d:12:27:d1:6e:2a:fd:ea:f9:
75:91:e9:55:e0:43:61:bd:2c:46:7f:35:80:bb:ac:58:9c:7f:
b8:54:33:cb:bd:11:04:33:56:a1:d8:02:ad:18:ea:9e:62:6a:
d8:2c:e6:a6:42:4a:8b:c4:d9:08:e0:bf:72:98:87:1d:0a:b1:
ec:ab:1b:1f:98:7f:d8:b9:92:e7:b1:45:74:e3:74:ec:e3:df:
2d:04:ee:2c:87:fc:29:91:0e:bc:6c:58:76:05:29:6a:ff:fe:
79:c8:01:79:0c:04:e3:7b:ea:c8:f0:67:38:46:cf:8a:7a:d4:
62:05:12:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9f56a7mehzR+SC4b5+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWRhMDUzOTIxZjUyODM2Nzg4MTg4ZjgyZjYyZGQ1YWE5
NzNmZTkwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
EyhkYzQ5NzlhOTQwMzQ5MTRkNzcwNjU1YTIwYzJhODg4Y2QzMmUwNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHIxi9/jgUE3FKaa7mPx0eHfdsbR
Rdh1KBTKD8c1VW2283Ojgp+ymxDpWOBuCq/xM8v2qrTQNj8iEhUAY+B74pyBNSCZ
0QlbRCXR5PR179ln4XLafnoqk5rxWxg9Rw4n6nuRDcYggbmYpiauGOBwx6N4VBDf
PH6/qudNmErJgnTKXakzyOlFGnJi2uTHoMweSMC1nPV/GSP//TM1heVDG35wWwgA
96R6d6rx1jbpal5Z+zw6b700YPwvaXmVeIxdS/3dlSnKqkrB5zZqtePwnw/rA2q2
uR9FkIgl7JeLLZmH4x4Mm79Yz1TuBXlIFJ+kvrccta35LEit0N36xpLyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxJealANJFNdwZVogwqiIzTLgZzMB8GA1UdIwQY
MBaAFJIdoFOSH1KDZ4gYj4L2LdWqlz/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2gyZ1U1SWZVb05uaUJpUGd2WXQxYXFYUC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zZTZlYTUtMGQ0ZS00MzRmLWE2ZjMt
ZWIzNDZkOWNlOWUwLzEva2gyZ1U1SWZVb05uaUJpUGd2WXQxYXFYUC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zZTZlYTUtMGQ0ZS00MzRmLWE2ZjMtZWIzNDZkOWNlOWUw
LzEva2gyZ1U1SWZVb05uaUJpUGd2WXQxYXFYUC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFRZDIB/
4deU4K7VW9IiPZxHoerSNbgnBDtGLT4zcN5OP4pI8qDBA4ONV31H87T+Xf8cPXY7
sa2uhalohr1zVwCd4Rw18mseqAP5sziNfq3dW+47Vbg58fV1Wg9s/SX3qqpAa21F
fZBsPU3DK8ZvwK3JyCxE8fqCansaogRRtyE9JBbztIb6PRIn0W4q/er5dZHpVeBD
Yb0sRn81gLusWJx/uFQzy70RBDNWodgCrRjqnmJq2CzmpkJKi8TZCOC/cpiHHQqx
7KsbH5h/2LmS57FFdON07OPfLQTuLIf8KZEOvGxYdgUpav/+ecgBeQwE43vqyPBn
OEbPinrUYgUSeg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:42 2025 by rpki-client