Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: cdflNmEs/umCHupmlB6kQvIHDMhZh9lOfCwKGTqusY8=
Subject key identifier: 2D:F5:04:55:F6:F0:B0:DC:DC:1B:1D:6E:03:3F:FD:BB:AC:68:22:20
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 0194BD17CCE7069D0290F60531D01F1B54B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: 6lhfP3HRLKqPIjWi4a12k3W6BTFZH91cSlHlcevWZAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cc:e7:06:9d:02:90:f6:05:31:d0:1f:1b:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=2df50455f6f0b0dcdc1b1d6e033ffdbbac682220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:23:46:73:8e:b9:9e:be:31:84:1c:bb:1e:
f7:7f:46:fb:10:ae:d0:92:9f:36:b0:ff:bd:88:ec:
4a:5d:10:49:49:63:5f:2c:b1:ea:2b:e5:f0:b2:94:
3b:cb:74:3a:a6:6a:30:db:9c:ac:24:d6:f7:36:55:
78:e4:18:26:c7:1d:93:5c:90:1b:18:0d:03:32:c8:
16:46:f3:4d:96:59:46:50:7e:f9:cc:28:2f:67:e9:
44:3a:bc:51:24:db:92:6c:7a:28:b0:14:5d:5e:d7:
72:b9:5f:18:21:2f:d3:42:7a:29:53:d8:88:39:07:
c8:56:a0:6d:4d:87:68:af:14:14:d3:b0:59:e1:ff:
25:c6:ce:08:ba:9a:1a:35:cc:9f:a7:37:9b:f8:d2:
54:49:53:42:d6:2e:e6:60:27:d8:66:24:10:8d:c8:
3a:27:c0:74:98:ae:1f:1c:7c:6f:d1:cf:a6:85:83:
5b:5a:8b:0b:69:ab:6f:60:d7:b3:ce:c1:d5:20:d7:
74:79:2e:53:94:b7:9a:d1:fb:76:e6:1a:70:66:0b:
10:2b:06:e0:17:5b:d1:4c:d9:42:f2:fd:48:39:15:
af:f8:e5:f5:8f:ad:c1:30:26:35:3a:be:72:b6:c7:
0d:5e:fb:0a:63:3f:db:19:ce:9e:39:04:8e:4d:44:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:04:55:F6:F0:B0:DC:DC:1B:1D:6E:03:3F:FD:BB:AC:68:22:20
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:95:e5:7d:de:38:ae:1b:6e:a5:63:52:53:4f:55:81:b9:ae:
e0:97:fc:4a:c1:77:cb:e5:37:c3:f0:23:38:d0:9c:79:4b:06:
74:0d:37:70:ef:96:19:5b:ac:af:38:1b:33:18:00:66:24:e5:
a2:cd:97:e4:1c:78:df:62:b8:d8:c9:8c:46:65:ca:75:5e:d7:
ef:0a:26:82:ef:9c:3f:2d:32:b6:50:5f:28:87:7f:97:a0:47:
a6:b9:ce:ef:3e:76:02:f5:86:ea:78:bf:47:fe:98:ff:5a:79:
4c:22:35:b0:05:14:41:d6:e3:70:9d:e0:fb:ef:b6:a3:e7:7b:
ff:00:3d:a0:0e:29:3d:11:7c:74:62:07:2f:1b:62:85:ca:21:
58:14:4a:7f:67:74:b1:e5:41:b5:12:ed:11:e0:63:5b:ce:fd:
2c:3b:c8:c6:a5:28:09:8a:6a:01:fb:a3:6d:a7:3e:06:54:ce:
f0:77:62:46:b0:c1:5f:08:72:41:68:d8:3f:98:3f:d4:ca:21:
ff:35:39:b9:ba:61:5f:a5:51:c5:e2:23:a4:cb:c1:8c:cc:a7:
ff:49:8d:60:0b:45:03:4d:9c:05:d1:3f:2e:8f:cc:f7:93:4b:
8f:06:32:26:8d:ef:9f:a7:c4:bd:23:b9:c9:7a:a5:93:57:9f:
58:02:ce:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8znBp0CkPYFMdAfG1S0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNThhMzc3NWQwYzVlYjM4ZjIwZjBlZjlhMzYxMTA2MWE1
MTk1YjMwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
EygyZGY1MDQ1NWY2ZjBiMGRjZGMxYjFkNmUwMzNmZmRiYmFjNjgyMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OsjRnOOuZ6+MYQcux73f0b7EK7Q
kp82sP+9iOxKXRBJSWNfLLHqK+XwspQ7y3Q6pmow25ysJNb3NlV45Bgmxx2TXJAb
GA0DMsgWRvNNlllGUH75zCgvZ+lEOrxRJNuSbHoosBRdXtdyuV8YIS/TQnopU9iI
OQfIVqBtTYdorxQU07BZ4f8lxs4IupoaNcyfpzeb+NJUSVNC1i7mYCfYZiQQjcg6
J8B0mK4fHHxv0c+mhYNbWosLaatvYNezzsHVINd0eS5TlLea0ft25hpwZgsQKwbg
F1vRTNlC8v1IORWv+OX1j63BMCY1Or5ytscNXvsKYz/bGc6eOQSOTURH3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC31BFX28LDc3BsdbgM//busaCIgMB8GA1UdIwQY
MBaAFJFYo3ddDF6zjyDw75o2EQYaUZWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAt
OGQwNGY4Nzc5NDIzLzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAtOGQwNGY4Nzc5NDIz
LzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpXlfd44
rhtupWNSU09Vgbmu4Jf8SsF3y+U3w/AjONCceUsGdA03cO+WGVusrzgbMxgAZiTl
os2X5Bx432K42MmMRmXKdV7X7womgu+cPy0ytlBfKId/l6BHprnO7z52AvWG6ni/
R/6Y/1p5TCI1sAUUQdbjcJ3g+++2o+d7/wA9oA4pPRF8dGIHLxtihcohWBRKf2d0
seVBtRLtEeBjW879LDvIxqUoCYpqAfujbac+BlTO8HdiRrDBXwhyQWjYP5g/1Moh
/zU5ubphX6VRxeIjpMvBjMyn/0mNYAtFA02cBdE/Lo/M95NLjwYyJo3vn6fEvSO5
yXqlk1efWALO3Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:38 2025 by rpki-client