Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: 55mEPT+ZUUFI3/DHGT90MNGx49xQ195AA1hcfC3KygA=
Subject key identifier: 2C:A8:4E:97:F4:70:A5:52:5D:E5:47:86:8C:6E:2D:61:E2:A5:AD:70
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 0194BC3C8F6337DBFE9B9E4F79681ABA0699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: nyPHiUJ2BjfQi8uBET/nm/k9axsYzpMQlZd5CAQDJeg=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:63:37:db:fe:9b:9e:4f:79:68:1a:ba:06:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=2ca84e97f470a5525de547868c6e2d61e2a5ad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:ca:08:f7:66:05:a6:83:1b:88:47:94:04:
0a:81:bd:0b:9f:64:06:10:b5:5f:91:53:cc:0f:4b:
d0:71:dc:12:8e:17:92:57:62:28:e8:b6:df:3c:29:
a7:5a:21:28:f8:d8:cf:08:2c:15:23:3c:01:9b:21:
a7:ff:8c:86:05:87:eb:be:34:f0:17:41:9a:64:e8:
4e:99:4a:1d:37:6f:a3:b4:96:27:3f:17:52:62:06:
4f:d8:e2:63:f1:c2:7e:29:37:c8:ba:03:07:2b:42:
eb:68:96:83:8d:e6:d7:59:ae:4f:d7:8a:26:9f:b5:
a0:60:df:67:59:e4:8c:51:1e:44:8e:b8:ef:0f:03:
98:93:99:40:3f:b5:39:ee:09:37:88:d9:e4:35:54:
38:df:f2:13:e9:fa:0d:75:21:04:6d:e7:2e:4e:1f:
6c:46:42:cb:4e:86:1e:13:64:0b:68:6d:96:73:54:
f9:ad:db:69:bd:fd:60:71:b2:f3:56:4c:80:44:a2:
12:53:5d:3d:37:0e:da:be:68:a5:d7:f3:d8:c3:f0:
ce:c5:cd:e6:37:2d:48:bc:08:af:1f:e0:2a:cb:24:
1e:45:91:dc:cf:a0:f8:e1:cb:17:ac:17:bb:65:9c:
6a:4c:e3:74:4e:40:84:2c:23:8a:cd:1a:3d:d1:e8:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:4E:97:F4:70:A5:52:5D:E5:47:86:8C:6E:2D:61:E2:A5:AD:70
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e2:3c:4f:51:d0:f5:c9:dc:24:c8:4a:1f:d7:6d:7b:ca:40:
56:81:c6:e6:87:00:3a:c6:39:2d:56:d3:de:18:02:42:09:31:
da:3a:fe:b6:f6:09:5c:7c:78:f9:4f:c2:80:c5:db:0d:41:40:
d9:11:e7:d8:7f:fc:a0:35:b7:bf:76:d4:60:d5:5c:df:a6:1a:
1f:6c:a6:0d:2f:25:a1:34:f9:8c:1e:d7:a9:d0:73:48:6a:f2:
97:7b:7e:89:e0:5d:6f:2a:de:c4:a9:9d:c7:ca:6e:b7:2f:dd:
3c:b3:37:90:76:ec:a0:ad:a8:87:47:11:f1:fa:e6:10:79:75:
41:13:b6:b8:f6:08:43:a8:24:40:54:88:e0:d9:d6:2c:7b:12:
b5:8f:91:74:81:89:21:d9:fd:16:26:91:8c:20:cf:96:70:7d:
89:a6:9f:5f:51:41:97:33:78:1c:a5:e0:6a:8e:52:9f:ee:26:
34:3d:e8:5b:e3:00:98:5d:e8:d6:5e:79:b2:08:c7:d9:fb:cf:
6f:84:58:98:fd:6d:ac:1e:3d:78:9c:57:d5:43:37:80:6b:ac:
df:01:14:33:77:8a:c3:d0:ab:3d:38:ac:11:c6:24:c0:6e:0d:
f8:7f:d8:8c:46:0a:ea:53:7b:82:3c:b6:24:68:f8:d0:1f:5a:
80:73:67:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PI9jN9v+m55PeWgaugaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTE2Mzc5YTA0MmRmNzQ0NWU0MmVmYjM2NDZkMWYyNWE2
N2Q1MDQwHhcNMjUwMTMxMTIwMTEyWhcNMjUwMjAxMTIwMTEyWjAzMTEwLwYDVQQD
EygyY2E4NGU5N2Y0NzBhNTUyNWRlNTQ3ODY4YzZlMmQ2MWUyYTVhZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswvKCPdmBaaDG4hHlAQKgb0Ln2QG
ELVfkVPMD0vQcdwSjheSV2Io6LbfPCmnWiEo+NjPCCwVIzwBmyGn/4yGBYfrvjTw
F0GaZOhOmUodN2+jtJYnPxdSYgZP2OJj8cJ+KTfIugMHK0LraJaDjebXWa5P14om
n7WgYN9nWeSMUR5EjrjvDwOYk5lAP7U57gk3iNnkNVQ43/IT6foNdSEEbecuTh9s
RkLLToYeE2QLaG2Wc1T5rdtpvf1gcbLzVkyARKISU109Nw7avmil1/PYw/DOxc3m
Ny1IvAivH+AqyyQeRZHcz6D44csXrBe7ZZxqTON0TkCELCOKzRo90ejfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyoTpf0cKVSXeVHhoxuLWHipa1wMB8GA1UdIwQY
MBaAFJBRY3mgQt90ReQu+zZG0fJaZ9UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYt
NDRhOTFiYTE3YjA4LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYtNDRhOTFiYTE3YjA4
LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeI8T1HQ
9cncJMhKH9dte8pAVoHG5ocAOsY5LVbT3hgCQgkx2jr+tvYJXHx4+U/CgMXbDUFA
2RHn2H/8oDW3v3bUYNVc36YaH2ymDS8loTT5jB7XqdBzSGryl3t+ieBdbyrexKmd
x8puty/dPLM3kHbsoK2oh0cR8frmEHl1QRO2uPYIQ6gkQFSI4NnWLHsStY+RdIGJ
Idn9FiaRjCDPlnB9iaafX1FBlzN4HKXgao5Sn+4mND3oW+MAmF3o1l55sgjH2fvP
b4RYmP1trB49eJxX1UM3gGus3wEUM3eKw9CrPTisEcYkwG4N+H/YjEYK6lN7gjy2
JGj40B9agHNn3g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:02 2025 by rpki-client