Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: WhbboYxrJ36E5gQv0J4GV466bbnL5kHbCWvx77m7940=
Subject key identifier: EA:9B:52:C2:1E:11:58:D4:84:DF:74:67:8C:3C:84:80:16:38:0C:7C
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 0194BD85A5F37EAD0F3030159F34706A353E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 1048
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: 6772qXW3ZxybMneFzdtdY62Ud32ETuI7Gq0WPIkYWis=)
2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:f3:7e:ad:0f:30:30:15:9f:34:70:6a:35:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=ea9b52c21e1158d484df74678c3c848016380c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:f6:9b:e6:d7:73:c5:a5:98:5a:20:c0:16:
76:83:5c:79:c8:4e:55:44:30:95:54:58:52:1e:bc:
64:e4:46:0a:dd:0e:0e:db:13:7d:00:23:2f:f9:1e:
51:8a:c0:6f:42:65:78:97:50:fc:b8:33:97:10:47:
52:77:27:c2:50:21:89:89:cc:b9:53:ec:a2:41:ab:
ac:12:01:76:63:06:18:78:b1:92:35:d2:6d:96:9f:
51:71:02:7f:2c:f7:eb:de:63:ad:4e:ff:fc:67:9f:
60:d0:27:75:27:cd:73:03:03:72:b3:e6:82:22:02:
70:67:34:22:57:3c:0a:70:00:ee:5c:a5:de:1c:1f:
24:22:3a:08:2b:c5:10:aa:a1:ea:b5:20:7a:95:d2:
4e:9b:95:b6:b1:ee:f4:0c:63:05:da:27:e6:24:25:
58:ed:e8:94:64:da:59:8b:18:65:8c:45:62:aa:07:
74:bb:4a:47:d3:83:ed:0e:d7:4a:f3:4a:70:8c:4e:
4a:86:92:6b:18:46:0e:f0:04:80:bb:47:52:b3:f4:
7d:a0:65:61:96:b0:1c:e6:4b:07:76:eb:77:e5:b0:
c8:fd:26:3d:9c:4a:e8:ba:7f:92:89:1d:b4:26:7c:
fb:c4:8d:66:3e:69:c6:06:a7:68:7c:74:84:06:ef:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9B:52:C2:1E:11:58:D4:84:DF:74:67:8C:3C:84:80:16:38:0C:7C
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c9:72:fb:1e:35:70:c2:22:02:5a:84:96:4a:ce:cd:cc:c9:
81:96:d8:91:d7:e8:41:30:98:fb:e7:28:4c:6a:4f:6f:ec:6b:
e7:0b:df:fb:b2:d8:9b:4b:1e:66:7d:22:5d:bf:30:88:31:94:
cb:c6:fe:6f:ec:7b:fa:9d:68:f4:39:07:ed:5a:88:0f:ee:38:
16:7a:d1:ad:00:b5:37:4d:06:db:eb:ba:0e:1e:89:b0:14:52:
2b:cf:a4:f2:3f:d6:22:52:50:01:8c:31:90:2c:a1:33:38:3b:
43:6e:ce:48:19:4c:f1:fb:00:a2:e9:90:75:e6:f1:03:c3:cb:
fa:5a:58:fc:9e:3b:5a:49:92:e6:d5:06:5d:87:f9:ac:ec:5b:
28:ce:7c:74:1d:5e:1b:3e:b6:f7:78:36:47:03:47:39:3f:fc:
40:78:24:0c:02:97:88:b0:7f:f0:01:80:35:c3:f9:43:c8:06:
a0:37:3b:7d:4a:42:fa:38:ad:b3:73:96:48:f6:50:26:17:90:
98:cc:84:5a:bd:0c:ba:ac:0f:6b:6f:c3:9f:0d:14:5a:9c:9c:
2e:27:92:fc:93:ab:d5:de:5c:4d:16:f4:94:ea:0d:98:1e:c1:
19:7f:3d:88:8f:3d:22:74:32:33:3a:21:99:52:80:a0:7f:2f:
a8:0a:1e:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haXzfq0PMDAVnzRwajU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGE2NDExYTEzMjY0ZGM2ZGUwZjEwMTEwODU0MGVmNzQx
ZWQxOWEwHhcNMjUwMTMxMTgwMDQwWhcNMjUwMjAxMTgwMDQwWjAzMTEwLwYDVQQD
EyhlYTliNTJjMjFlMTE1OGQ0ODRkZjc0Njc4YzNjODQ4MDE2MzgwYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH/2m+bXc8WlmFogwBZ2g1x5yE5V
RDCVVFhSHrxk5EYK3Q4O2xN9ACMv+R5RisBvQmV4l1D8uDOXEEdSdyfCUCGJicy5
U+yiQausEgF2YwYYeLGSNdJtlp9RcQJ/LPfr3mOtTv/8Z59g0Cd1J81zAwNys+aC
IgJwZzQiVzwKcADuXKXeHB8kIjoIK8UQqqHqtSB6ldJOm5W2se70DGMF2ifmJCVY
7eiUZNpZixhljEViqgd0u0pH04PtDtdK80pwjE5KhpJrGEYO8ASAu0dSs/R9oGVh
lrAc5ksHdut35bDI/SY9nEroun+SiR20Jnz7xI1mPmnGBqdofHSEBu/GiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqbUsIeEVjUhN90Z4w8hIAWOAx8MB8GA1UdIwQY
MBaAFCnaZBGhMmTcbeDxARCFQO90HtGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUt
MWMyYjg0MmQyMmJlLzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUtMWMyYjg0MmQyMmJl
LzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMly+x41
cMIiAlqElkrOzczJgZbYkdfoQTCY++coTGpPb+xr5wvf+7LYm0seZn0iXb8wiDGU
y8b+b+x7+p1o9DkH7VqID+44FnrRrQC1N00G2+u6Dh6JsBRSK8+k8j/WIlJQAYwx
kCyhMzg7Q27OSBlM8fsAoumQdebxA8PL+lpY/J47WkmS5tUGXYf5rOxbKM58dB1e
Gz6293g2RwNHOT/8QHgkDAKXiLB/8AGANcP5Q8gGoDc7fUpC+jits3OWSPZQJheQ
mMyEWr0MuqwPa2/Dnw0UWpycLieS/JOr1d5cTRb0lOoNmB7BGX89iI89InQyMzoh
mVKAoH8vqAoevA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:53 2025 by rpki-client