Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: w5gOMzHIAQBatdQYYnyomingleEICuLoTOGF2Y2g658=
Subject key identifier: A8:FC:51:DE:F2:76:6B:F8:69:41:46:73:F3:A9:84:B4:B0:03:42:8A
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 0194BBCDDDA6384506452E6421EA5F72BF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 1020
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: rnn6no8zaSdLZXaPvkZsgPl4RKaUf380S2Ak43A2N6k=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dd:a6:38:45:06:45:2e:64:21:ea:5f:72:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=a8fc51def2766bf869414673f3a984b4b003428a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:e2:a5:55:c0:35:fd:2b:69:cc:42:98:92:
3c:f6:21:4c:ce:6e:ec:51:88:62:a9:66:95:fa:63:
cf:c2:9c:38:e7:b0:bc:c9:88:ab:5c:88:10:22:2a:
71:11:ec:e7:ca:31:bd:9a:22:31:45:ee:fb:05:e5:
3c:93:70:40:e6:98:79:81:cd:65:da:4f:44:35:52:
85:4e:ab:25:47:cc:67:68:e5:8d:25:95:22:57:36:
72:1c:e9:f6:40:d4:8b:7b:4b:ad:c2:c8:38:18:32:
67:81:2d:d4:cb:7f:de:0d:cd:e0:c3:f0:48:55:67:
b1:7e:7c:be:5b:a3:16:38:90:7d:3e:4d:76:80:17:
6c:0d:77:97:7a:63:ab:45:1b:43:28:b6:11:7a:a3:
23:21:b5:fc:df:e8:44:1e:9a:12:01:10:02:6a:bc:
e0:d5:c4:5e:ad:7b:74:06:29:66:b0:35:30:47:5e:
81:6f:c5:ab:ac:8a:d5:26:81:43:19:00:d5:e4:ac:
52:67:dd:3a:01:15:c6:3d:c6:b9:41:e9:3c:97:83:
ce:a8:d5:ab:54:c9:35:fa:ff:89:3a:45:39:27:00:
79:40:98:4f:9b:21:76:ba:76:d6:9b:54:5e:69:a2:
a7:56:2a:9b:00:0d:2a:86:6d:36:89:ae:53:9d:68:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:51:DE:F2:76:6B:F8:69:41:46:73:F3:A9:84:B4:B0:03:42:8A
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:10:e0:e3:cd:96:62:3b:c9:f8:ee:0d:25:4e:e5:7e:3b:f8:
7d:df:1d:8c:83:0b:59:81:80:51:c0:40:51:1d:fa:d6:d9:45:
05:cc:a9:70:7f:bc:69:00:80:c4:45:2b:f6:f1:33:38:c6:cf:
01:00:aa:e0:56:ed:f3:e9:10:da:49:39:7b:81:26:54:8c:ee:
28:2e:c5:e7:d6:d1:3c:17:69:b6:69:15:88:d5:8d:0e:db:24:
52:04:27:a2:d2:31:8e:78:a7:4e:a3:43:28:35:36:d6:48:bf:
97:8d:17:12:40:67:68:ba:92:6e:3c:08:16:57:a1:83:9c:04:
aa:79:3a:83:21:86:3f:79:df:28:3b:b5:d6:1d:24:eb:00:e9:
ff:a8:d0:09:01:6e:a5:9c:54:f8:99:96:28:07:75:80:7c:ee:
f0:d2:89:26:ac:84:7e:8d:de:3e:0b:cb:41:2e:d9:7d:5b:2c:
05:f5:a1:4d:b8:80:38:f4:f7:72:de:1e:b2:7b:55:55:ba:83:
1e:f6:06:ff:8e:62:d1:fa:10:22:0c:ca:4a:cc:9a:48:19:f4:
52:70:da:ca:d2:af:50:73:d7:db:e2:2f:25:83:5a:d3:41:e7:
9c:9c:24:2d:98:d9:d7:c9:f0:1a:c1:b7:21:64:8d:5d:f0:88:
7a:c8:29:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zd2mOEUGRS5kIepfcr+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmI3ZGEzYjQ0ZTQxYjMyMzY5ZTRhNWM3OTBkMzA4MWZj
NjlhYTkwHhcNMjUwMTMxMTAwMDE4WhcNMjUwMjAxMTAwMDE4WjAzMTEwLwYDVQQD
EyhhOGZjNTFkZWYyNzY2YmY4Njk0MTQ2NzNmM2E5ODRiNGIwMDM0MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T/ipVXANf0racxCmJI89iFMzm7s
UYhiqWaV+mPPwpw457C8yYirXIgQIipxEeznyjG9miIxRe77BeU8k3BA5ph5gc1l
2k9ENVKFTqslR8xnaOWNJZUiVzZyHOn2QNSLe0utwsg4GDJngS3Uy3/eDc3gw/BI
VWexfny+W6MWOJB9Pk12gBdsDXeXemOrRRtDKLYReqMjIbX83+hEHpoSARACarzg
1cRerXt0BilmsDUwR16Bb8WrrIrVJoFDGQDV5KxSZ906ARXGPca5Qek8l4POqNWr
VMk1+v+JOkU5JwB5QJhPmyF2unbWm1ReaaKnViqbAA0qhm02ia5TnWgUowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj8Ud7ydmv4aUFGc/OphLSwA0KKMB8GA1UdIwQY
MBaAFCn7faO0TkGzI2nkpceQ0wgfxpqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYt
YmNhYzhiNTUyYTlhLzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYtYmNhYzhiNTUyYTlh
LzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxDg482W
YjvJ+O4NJU7lfjv4fd8djIMLWYGAUcBAUR361tlFBcypcH+8aQCAxEUr9vEzOMbP
AQCq4Fbt8+kQ2kk5e4EmVIzuKC7F59bRPBdptmkViNWNDtskUgQnotIxjninTqND
KDU21ki/l40XEkBnaLqSbjwIFlehg5wEqnk6gyGGP3nfKDu11h0k6wDp/6jQCQFu
pZxU+JmWKAd1gHzu8NKJJqyEfo3ePgvLQS7ZfVssBfWhTbiAOPT3ct4esntVVbqD
HvYG/45i0foQIgzKSsyaSBn0UnDaytKvUHPX2+IvJYNa00HnnJwkLZjZ18nwGsG3
IWSNXfCIesgpaA==
-----END CERTIFICATE-----
Generated at Thu May 1 13:12:30 2025 by rpki-client