Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: 3Jofq/FBdgrQ1CwKWvo6xvAfpIlC8xUua55oE1mNGpg=
Subject key identifier: 82:1C:A0:2C:24:53:D9:3C:CD:05:4B:91:2B:19:F2:2B:32:B7:5F:2B
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 0194BD8553529CBE28BC1E7BDCE0EDB4668E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 03C3
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: DGfVoMiSjtLIWbJ+mpv777bK0g6/lErwz+VJMhNRRL8=)
2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:53:52:9c:be:28:bc:1e:7b:dc:e0:ed:b4:66:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=821ca02c2453d93ccd054b912b19f22b32b75f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:fe:da:0c:19:3b:b1:89:50:22:1b:6f:f3:
ba:f8:0e:e4:77:c1:4a:9a:c6:c0:b7:ca:58:1e:b0:
9a:fb:d4:fe:06:62:5d:0c:51:6f:8d:0e:e9:9a:fe:
c6:8d:eb:ec:f7:67:dc:e6:9f:6a:4d:55:eb:2f:00:
6b:a3:9d:c8:06:4d:e4:35:3d:1b:68:f9:93:65:f6:
6f:03:68:58:53:9a:6a:21:90:07:c1:f7:bb:69:9b:
e9:6b:ca:7f:13:82:49:5a:cd:b9:f0:69:eb:04:76:
83:a2:9b:f0:60:1a:27:10:55:3e:5f:2e:0b:27:0d:
9c:51:42:16:fc:8d:db:a2:24:2a:70:7f:6a:7b:2d:
ef:e5:ad:48:da:0f:86:40:bc:a1:2b:be:4c:d4:65:
bb:91:6f:63:75:46:c1:df:81:32:c8:df:76:7d:11:
37:22:63:7e:a3:06:48:92:a2:d9:13:b0:a0:09:0a:
67:f6:1f:6c:82:31:28:2f:67:b8:da:58:7f:fe:4c:
b2:a4:38:7e:4f:3d:47:81:7a:af:c4:58:bd:30:39:
31:b2:6c:18:97:52:1b:56:2f:10:f8:bd:39:88:cc:
19:4a:86:09:7c:53:c7:be:a0:e5:7a:a4:fb:1b:5e:
d0:83:ad:24:8d:23:df:63:91:4a:92:db:07:d2:7e:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1C:A0:2C:24:53:D9:3C:CD:05:4B:91:2B:19:F2:2B:32:B7:5F:2B
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1c:f3:c8:a0:54:76:1f:d0:3b:06:5d:99:8b:6d:a4:ee:d3:
de:e9:ac:f0:d4:4d:44:e7:41:43:e2:51:bc:8a:e1:b1:b5:0e:
24:28:bd:5c:30:33:e3:7a:f6:e6:88:0d:28:ed:82:e0:27:f6:
d7:8d:3c:78:63:8a:d5:25:48:d2:01:22:89:a8:2a:7f:5f:d0:
47:fd:21:28:9e:5b:86:7b:36:d3:de:63:29:35:8c:30:6f:d4:
a5:f0:f2:52:f1:28:10:dd:ea:c6:fe:a6:d9:51:89:75:72:4f:
b7:61:be:1c:46:ee:cc:83:c5:09:4c:13:61:f8:39:b0:c8:9f:
43:32:c3:2d:88:9a:16:85:07:d3:bf:9a:13:07:b1:9b:76:3d:
ea:08:d2:89:21:af:7b:a5:e0:41:31:b4:c7:00:5f:75:0f:b5:
86:89:4d:ee:92:51:19:3d:3f:aa:45:cb:48:c5:21:38:62:95:
cf:5b:c4:ca:5a:0b:87:62:f0:b4:41:4f:5c:80:52:4f:aa:8f:
d3:81:7c:47:14:e2:03:16:e6:be:01:e5:cf:76:a1:2b:e0:56:
50:e2:d0:3d:06:9b:79:12:d4:4e:72:85:6e:81:2b:5e:0b:74:
11:51:0b:39:0a:69:e5:0d:69:9c:e7:58:33:b2:aa:aa:0d:aa:
31:bb:b7:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVNSnL4ovB573ODttGaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk
YzAzMTMwHhcNMjUwMTMxMTgwMDE4WhcNMjUwMjAxMTgwMDE4WjAzMTEwLwYDVQQD
Eyg4MjFjYTAyYzI0NTNkOTNjY2QwNTRiOTEyYjE5ZjIyYjMyYjc1ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc/+2gwZO7GJUCIbb/O6+A7kd8FK
msbAt8pYHrCa+9T+BmJdDFFvjQ7pmv7Gjevs92fc5p9qTVXrLwBro53IBk3kNT0b
aPmTZfZvA2hYU5pqIZAHwfe7aZvpa8p/E4JJWs258GnrBHaDopvwYBonEFU+Xy4L
Jw2cUUIW/I3boiQqcH9qey3v5a1I2g+GQLyhK75M1GW7kW9jdUbB34EyyN92fRE3
ImN+owZIkqLZE7CgCQpn9h9sgjEoL2e42lh//kyypDh+Tz1HgXqvxFi9MDkxsmwY
l1IbVi8Q+L05iMwZSoYJfFPHvqDleqT7G17Qg60kjSPfY5FKktsH0n6HxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIcoCwkU9k8zQVLkSsZ8isyt18rMB8GA1UdIwQY
MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt
OTA1NTI4M2YwZWFlLzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl
LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThzzyKBU
dh/QOwZdmYttpO7T3ums8NRNROdBQ+JRvIrhsbUOJCi9XDAz43r25ogNKO2C4Cf2
1408eGOK1SVI0gEiiagqf1/QR/0hKJ5bhns2095jKTWMMG/UpfDyUvEoEN3qxv6m
2VGJdXJPt2G+HEbuzIPFCUwTYfg5sMifQzLDLYiaFoUH07+aEwexm3Y96gjSiSGv
e6XgQTG0xwBfdQ+1holN7pJRGT0/qkXLSMUhOGKVz1vEyloLh2LwtEFPXIBST6qP
04F8RxTiAxbmvgHlz3ahK+BWUOLQPQabeRLUTnKFboErXgt0EVELOQpp5Q1pnOdY
M7Kqqg2qMbu31A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:03 2025 by rpki-client