Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: HA+TwRf7TVXz7CWN/OUvICpGHbkO+NBdAOaH+IaIJZc=
Subject key identifier: B5:9A:05:A1:BB:6D:78:24:85:2C:EA:F7:0F:6F:A6:F5:DD:61:A0:F1
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 0194BD4E69F2A01C172461FF50D450FB947B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 0D36
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: EWfZ+OR2RcNW4ezBz0IG4ut9cGzAYK9egAABNXO2TXU=)
2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:69:f2:a0:1c:17:24:61:ff:50:d4:50:fb:94:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=b59a05a1bb6d7824852ceaf70f6fa6f5dd61a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:62:85:19:2e:72:1c:29:43:47:60:6e:52:
42:f8:07:1d:bb:85:fc:3d:2c:7f:42:3a:56:91:8a:
41:51:17:fa:3d:7c:27:d9:71:ad:c1:7c:82:5a:10:
8f:d7:56:67:2f:49:16:e9:e7:e0:44:d6:30:5a:41:
cc:0f:38:24:33:47:34:2e:f1:bb:d9:e5:68:e8:21:
3c:ae:a3:7c:fd:12:bf:99:bb:dc:f8:78:18:26:29:
69:32:5e:0c:4c:24:b6:bb:46:b1:0b:ec:75:1f:e8:
29:7e:e0:6c:6a:de:b9:63:f7:63:c0:d6:0b:01:0f:
c3:0e:f3:94:eb:1d:7e:78:21:6f:bb:da:f9:00:4b:
46:77:be:78:9e:fa:a5:3d:a1:d9:14:2e:31:21:8b:
bd:42:57:45:76:87:df:bc:02:e7:49:a9:84:08:02:
6c:6c:a3:be:e1:e5:b3:91:c4:d8:7a:33:4f:e8:9c:
b0:df:8b:17:bb:59:32:68:d4:93:13:c4:4e:ce:5d:
87:b5:e0:68:a3:54:bc:a7:fd:26:c2:22:79:b6:1c:
fd:12:55:ee:95:c3:18:26:31:bc:fb:32:8b:a6:29:
bc:76:e3:e7:75:81:8f:80:dc:22:73:48:3e:71:8f:
f2:0e:fe:bd:73:c0:9e:5d:4c:4c:44:07:4d:25:c8:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:05:A1:BB:6D:78:24:85:2C:EA:F7:0F:6F:A6:F5:DD:61:A0:F1
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:52:3f:32:fa:72:80:14:94:6a:b2:c2:f5:16:66:fb:5c:a4:
c1:24:35:d0:94:6e:f3:c9:85:64:02:7a:e7:bb:06:82:26:6e:
35:24:52:48:36:2a:ce:db:11:72:b3:0f:ed:20:75:9c:d1:52:
be:cc:4b:60:2a:72:bf:24:32:fa:87:aa:e2:bd:b6:38:18:f1:
1d:ce:7d:3b:48:a7:15:b6:19:29:6f:c9:5f:46:3b:aa:4c:fe:
ad:40:5b:0e:b9:a4:dd:12:1b:eb:47:0d:fd:ac:d3:b4:09:fd:
e4:8b:72:d4:2d:32:ea:88:fa:3f:0b:04:cb:30:da:a0:c5:f9:
4f:90:e6:b6:6c:68:4e:ac:5e:d6:99:54:a1:38:5b:ae:ff:b0:
67:81:d0:dc:df:56:48:e7:77:3f:cb:d6:f0:8d:9a:6a:eb:d8:
cb:aa:71:5a:0a:ff:34:66:e2:33:fc:b7:a7:32:d3:9b:43:81:
f9:ea:8a:c5:a5:aa:c7:c8:db:c5:e5:5d:be:e1:52:1c:88:fe:
b8:fc:3c:67:45:e4:b1:ee:0a:96:60:67:93:a5:88:1e:45:25:
21:61:6c:57:91:ed:b3:eb:e1:a8:5e:05:c4:b9:b2:2b:3b:07:
e1:60:9d:1b:f5:5f:ff:16:ac:e7:06:b9:65:ec:54:1a:6a:c7:
e4:f9:cc:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmnyoBwXJGH/UNRQ+5R7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5
ZTU3ZmMwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
EyhiNTlhMDVhMWJiNmQ3ODI0ODUyY2VhZjcwZjZmYTZmNWRkNjFhMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yVihRkuchwpQ0dgblJC+Acdu4X8
PSx/QjpWkYpBURf6PXwn2XGtwXyCWhCP11ZnL0kW6efgRNYwWkHMDzgkM0c0LvG7
2eVo6CE8rqN8/RK/mbvc+HgYJilpMl4MTCS2u0axC+x1H+gpfuBsat65Y/djwNYL
AQ/DDvOU6x1+eCFvu9r5AEtGd754nvqlPaHZFC4xIYu9QldFdoffvALnSamECAJs
bKO+4eWzkcTYejNP6Jyw34sXu1kyaNSTE8ROzl2HteBoo1S8p/0mwiJ5thz9ElXu
lcMYJjG8+zKLpim8duPndYGPgNwic0g+cY/yDv69c8CeXUxMRAdNJchgBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWaBaG7bXgkhSzq9w9vpvXdYaDxMB8GA1UdIwQY
MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut
MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3
LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalI/Mvpy
gBSUarLC9RZm+1ykwSQ10JRu88mFZAJ657sGgiZuNSRSSDYqztsRcrMP7SB1nNFS
vsxLYCpyvyQy+oeq4r22OBjxHc59O0inFbYZKW/JX0Y7qkz+rUBbDrmk3RIb60cN
/azTtAn95Ity1C0y6oj6PwsEyzDaoMX5T5DmtmxoTqxe1plUoThbrv+wZ4HQ3N9W
SOd3P8vW8I2aauvYy6pxWgr/NGbiM/y3pzLTm0OB+eqKxaWqx8jbxeVdvuFSHIj+
uPw8Z0Xkse4KlmBnk6WIHkUlIWFsV5Hts+vhqF4FxLmyKzsH4WCdG/Vf/xas5wa5
ZexUGmrH5PnMSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:30 2025 by rpki-client