Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier: X+Hnrt3aeRyN5HRoIc5bZ7+9eKJ4dRh+rSF0kjmJrHE=
Subject key identifier: C5:0B:2C:0E:AF:0D:70:B9:86:C7:39:0E:60:77:A2:3E:CE:0B:B1:98
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial: 0194BBCED41F3C9CCB1B4123DF624A4EC2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number: 0747
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: 6WeylDxu35Y1tSgv7xuZesIDsqydTKYRijXDowMLlQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:1f:3c:9c:cb:1b:41:23:df:62:4a:4e:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=c50b2c0eaf0d70b986c7390e6077a23ece0bb198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:3c:e9:56:2c:8e:86:d4:e9:ef:6f:8c:c8:
85:6f:6d:30:cf:c7:26:b7:08:43:11:bd:00:9d:ee:
45:4a:94:42:f0:ee:25:fa:35:58:76:95:a2:c9:14:
97:17:62:ea:78:f5:92:d1:d2:34:9a:c6:71:c8:d2:
be:c1:38:aa:d8:d0:a5:0d:5a:92:e8:48:22:6d:45:
67:f3:3f:b2:9b:d7:1a:e9:67:50:0b:02:98:d7:ba:
98:9c:ef:9d:88:66:b6:14:cb:33:ec:9b:25:b8:53:
dd:25:5f:7b:90:52:cb:15:79:70:4d:28:04:bc:d7:
e8:f5:e5:d5:25:9c:0c:fb:1e:7e:40:20:a0:3a:39:
ba:c4:b2:e7:28:ae:d7:e6:a3:0d:e9:74:60:ba:23:
82:22:c6:3f:c8:c5:ee:95:b2:22:48:ea:5d:0f:68:
63:e1:f1:16:32:8d:f9:26:e8:78:c1:be:43:3d:40:
da:92:14:e6:dc:b6:57:43:37:70:51:25:be:f6:aa:
a6:9d:b0:80:50:23:01:92:b5:04:b3:da:a8:4b:6a:
fe:77:12:fc:63:39:9f:83:f2:49:ad:b2:d1:6e:39:
7f:b6:d2:4b:ec:0b:46:30:41:76:43:fd:1c:b1:a2:
e5:0a:3d:a6:8f:ff:18:de:38:bb:7c:52:51:27:aa:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:2C:0E:AF:0D:70:B9:86:C7:39:0E:60:77:A2:3E:CE:0B:B1:98
X509v3 Authority Key Identifier:
keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:81:aa:23:72:3a:c6:86:a6:a2:31:16:56:c0:d1:d1:94:93:
d6:16:30:9a:cc:d8:72:3c:b3:89:c1:51:6a:45:fd:34:9e:6e:
88:59:6b:98:63:0f:36:bc:33:32:c0:e8:8d:1b:a7:24:81:74:
ea:6b:3b:4c:f2:20:70:5b:80:5c:2c:dd:e7:a1:b2:fb:52:fd:
4d:96:17:38:28:e1:b6:4d:04:24:e0:f8:c3:7f:64:af:aa:80:
44:5b:c7:01:47:62:a6:27:b2:3b:9c:32:86:2a:75:ec:8e:01:
5e:0f:5b:9b:54:05:a9:e4:09:c5:d1:af:21:2c:29:bf:8e:31:
e4:4a:14:11:47:7d:da:13:5c:e3:87:0f:79:5c:0c:1b:7e:3a:
1f:ee:e6:e7:55:b4:52:0f:45:21:aa:2c:c5:f8:e3:68:3e:5c:
e3:50:26:b8:23:44:82:56:5d:55:48:15:b0:3f:82:f4:5b:ca:
56:a0:e4:99:bf:4f:10:7e:68:89:c5:5f:f4:99:e5:45:76:23:
e2:d4:9c:39:ab:84:f2:82:4a:f8:80:e6:d8:4a:0a:ad:74:e6:
89:69:2a:78:16:4b:c0:5f:a1:11:20:bd:74:fc:26:c2:05:5d:
4b:39:50:e1:f7:c5:50:9c:ac:b5:36:15:99:c9:8d:c0:19:83:
b5:a7:f9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztQfPJzLG0Ej32JKTsLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNzU4ODVjZjk3OGQyZWY2NjEzNzYyMTQ1MzBiOWVkNjhj
NWI0NTgwHhcNMjUwMTMxMTAwMTIxWhcNMjUwMjAxMTAwMTIxWjAzMTEwLwYDVQQD
EyhjNTBiMmMwZWFmMGQ3MGI5ODZjNzM5MGU2MDc3YTIzZWNlMGJiMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuk86VYsjobU6e9vjMiFb20wz8cm
twhDEb0Ane5FSpRC8O4l+jVYdpWiyRSXF2LqePWS0dI0msZxyNK+wTiq2NClDVqS
6EgibUVn8z+ym9ca6WdQCwKY17qYnO+diGa2FMsz7JsluFPdJV97kFLLFXlwTSgE
vNfo9eXVJZwM+x5+QCCgOjm6xLLnKK7X5qMN6XRguiOCIsY/yMXulbIiSOpdD2hj
4fEWMo35Juh4wb5DPUDakhTm3LZXQzdwUSW+9qqmnbCAUCMBkrUEs9qoS2r+dxL8
Yzmfg/JJrbLRbjl/ttJL7AtGMEF2Q/0csaLlCj2mj/8Y3ji7fFJRJ6ptywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMULLA6vDXC5hsc5DmB3oj7OC7GYMB8GA1UdIwQY
MBaAFJF1iFz5eNLvZhN2IUUwue1oxbRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQt
MWI5NTgxOWNmYzljLzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQtMWI5NTgxOWNmYzlj
LzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoGqI3I6
xoamojEWVsDR0ZST1hYwmszYcjyzicFRakX9NJ5uiFlrmGMPNrwzMsDojRunJIF0
6ms7TPIgcFuAXCzd56Gy+1L9TZYXOCjhtk0EJOD4w39kr6qARFvHAUdipieyO5wy
hip17I4BXg9bm1QFqeQJxdGvISwpv44x5EoUEUd92hNc44cPeVwMG346H+7m51W0
Ug9FIaosxfjjaD5c41AmuCNEglZdVUgVsD+C9FvKVqDkmb9PEH5oicVf9JnlRXYj
4tScOauE8oJK+IDm2EoKrXTmiWkqeBZLwF+hESC9dPwmwgVdSzlQ4ffFUJystTYV
mcmNwBmDtaf5kQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:20 2025 by rpki-client