Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: L28TEvux4217FDAZ4fpNBCCsa9wPc8sc+kyCXexObEg=
Subject key identifier: D3:A8:6C:14:A3:39:35:F9:90:06:FB:47:81:91:61:83:37:10:1F:9D
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 0194BC3C5DAF556C21AE9526780D6AB490A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: er2W7zdxskeJa27NADVkFWvwuf10paS+PnmsbjMSC+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5d:af:55:6c:21:ae:95:26:78:0d:6a:b4:90:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=d3a86c14a33935f99006fb478191618337101f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:33:fb:1e:a5:ac:28:4e:63:a3:f3:d1:42:
8f:2c:0c:7a:be:d9:d5:63:ad:be:12:f6:e1:ab:e5:
58:2c:73:04:20:3e:9a:4d:11:0c:db:2b:63:d1:fc:
10:be:23:ff:65:d3:93:8c:90:03:be:9b:b8:75:fc:
68:56:b9:aa:f4:59:f4:73:15:87:6a:f6:e6:44:19:
dd:c3:dd:67:40:45:87:cb:ef:fb:b9:27:ab:f4:16:
66:92:5a:2a:d9:64:a1:78:3c:01:81:b0:0d:79:d4:
53:c1:bc:95:89:eb:0c:03:32:3f:2d:a9:e7:ad:00:
9b:7b:48:4a:f6:9e:6c:ed:38:6b:83:b8:39:6b:79:
11:3d:75:fb:13:47:aa:0a:cf:aa:60:d7:bf:f3:82:
ab:ed:34:93:6f:0d:d4:d6:91:6a:93:76:8f:1a:68:
b4:1e:f2:2f:57:e0:d4:89:82:ba:f0:75:62:de:0c:
98:09:0d:36:8c:d3:ea:ff:c7:98:72:45:2a:ff:45:
f5:33:13:ec:d9:8c:93:df:18:bd:5c:b0:b1:49:31:
79:66:7e:d1:73:5f:19:a7:5e:6a:99:de:56:d6:f9:
56:40:d5:e2:fd:ec:b2:10:4e:5a:43:78:42:19:39:
b0:95:84:2a:5c:92:bb:dd:54:80:c2:0d:88:dc:b1:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:6C:14:A3:39:35:F9:90:06:FB:47:81:91:61:83:37:10:1F:9D
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ed:1c:ee:63:ac:86:1e:63:fe:bd:c2:62:5d:14:07:32:54:
b9:79:80:ed:ff:49:b5:95:ab:5d:08:d7:e4:e2:b3:12:7f:cc:
92:40:90:d4:69:a8:b5:84:20:63:4f:4d:0c:d0:1b:11:30:67:
61:43:5c:8e:8a:06:6d:52:06:8d:98:0e:90:88:d8:2b:cc:20:
19:7f:14:2a:ca:0f:ff:24:26:dd:f1:1a:bd:a2:b3:e7:e2:07:
5f:c2:e7:73:0a:7c:3b:0e:72:e0:8b:81:58:f0:9e:70:c2:3d:
36:94:5d:05:06:54:6c:3a:5d:57:b5:13:7a:6a:c4:16:bc:2e:
ed:8a:65:77:8e:db:c4:22:a3:e5:b3:bf:81:22:b6:06:9a:fb:
87:a0:d1:7e:07:14:20:84:02:06:be:58:ed:11:59:47:2c:7a:
28:c1:53:6e:0d:c9:6d:ce:52:aa:35:ae:b7:71:b1:ac:68:f5:
ac:7f:20:38:4b:ab:43:5e:9c:9b:d4:f8:23:dc:36:75:6f:71:
04:52:2b:33:72:f4:81:42:6d:23:b0:85:9c:a3:30:7a:70:0d:
0d:12:29:71:ba:99:ce:b0:41:5e:44:0e:8d:d5:ee:f0:e0:92:
1a:31:93:e3:13:8f:3b:5c:71:f5:2f:07:32:45:0b:a1:6c:2a:
cd:a4:8a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PF2vVWwhrpUmeA1qtJCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzZkODQyMzdiNzgzYzZhMjQwNTEyYjhjYTcyNDE2MWMw
ZDYxZGIwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
EyhkM2E4NmMxNGEzMzkzNWY5OTAwNmZiNDc4MTkxNjE4MzM3MTAxZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDEz+x6lrChOY6Pz0UKPLAx6vtnV
Y62+Evbhq+VYLHMEID6aTREM2ytj0fwQviP/ZdOTjJADvpu4dfxoVrmq9Fn0cxWH
avbmRBndw91nQEWHy+/7uSer9BZmkloq2WSheDwBgbANedRTwbyViesMAzI/Lann
rQCbe0hK9p5s7Thrg7g5a3kRPXX7E0eqCs+qYNe/84Kr7TSTbw3U1pFqk3aPGmi0
HvIvV+DUiYK68HVi3gyYCQ02jNPq/8eYckUq/0X1MxPs2YyT3xi9XLCxSTF5Zn7R
c18Zp15qmd5W1vlWQNXi/eyyEE5aQ3hCGTmwlYQqXJK73VSAwg2I3LHogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOobBSjOTX5kAb7R4GRYYM3EB+dMB8GA1UdIwQY
MBaAFCk22EI3t4PGokBRK4ynJBYcDWHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RiWVFqZTNnOGFpUUZFcmpLY2tGaHdOWWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NDM3YWQtODBhZi00ZmRkLTg3MjQt
YWY3ZTE3YWQ4ZmIzLzEvS1RiWVFqZTNnOGFpUUZFcmpLY2tGaHdOWWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81NDM3YWQtODBhZi00ZmRkLTg3MjQtYWY3ZTE3YWQ4ZmIz
LzEvS1RiWVFqZTNnOGFpUUZFcmpLY2tGaHdOWWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu0c7mOs
hh5j/r3CYl0UBzJUuXmA7f9JtZWrXQjX5OKzEn/MkkCQ1GmotYQgY09NDNAbETBn
YUNcjooGbVIGjZgOkIjYK8wgGX8UKsoP/yQm3fEavaKz5+IHX8Lncwp8Ow5y4IuB
WPCecMI9NpRdBQZUbDpdV7UTemrEFrwu7Ypld47bxCKj5bO/gSK2Bpr7h6DRfgcU
IIQCBr5Y7RFZRyx6KMFTbg3Jbc5SqjWut3GxrGj1rH8gOEurQ16cm9T4I9w2dW9x
BFIrM3L0gUJtI7CFnKMwenANDRIpcbqZzrBBXkQOjdXu8OCSGjGT4xOPO1xx9S8H
MkULoWwqzaSKEw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:59 2025 by rpki-client