Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier: YEBwN4a7ITrP73JJruDvBERTEzupgnPdK93bVVPDtMQ=
Subject key identifier: DB:64:3C:11:A7:0D:30:B4:A2:A6:96:19:46:E5:D2:9E:70:E1:F8:E2
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 0194BBCE2B9B833180ACB8DFC173114049AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=)
2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: ZFuYSfJMY/Yc2xf2vKuLTHLGuHdpg34y+7on+svAAa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:9b:83:31:80:ac:b8:df:c1:73:11:40:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=db643c11a70d30b4a2a6961946e5d29e70e1f8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:fa:6e:dd:ff:f9:e0:c3:5d:d9:3c:0d:4c:
a8:a4:1d:ad:71:e5:f4:f2:f4:e9:a9:7e:18:1b:31:
12:d2:bb:fb:5f:10:34:4c:dc:f4:84:2f:39:b4:bb:
67:27:7d:5d:22:64:9a:21:91:f9:85:4e:34:a7:c0:
ea:2e:9a:bb:14:a5:8d:d4:e1:3e:2c:2d:38:8d:b1:
52:36:1a:41:d2:e0:ad:e7:f5:79:98:88:c2:6d:7c:
d0:72:97:5b:42:87:26:e9:c8:36:05:18:8e:94:f7:
fc:ad:5a:7d:d5:51:f4:56:6c:9b:32:7f:d9:b8:72:
a9:19:44:2d:88:87:4b:21:7b:2b:33:56:7c:1e:5c:
a5:be:c8:1f:fa:1d:45:18:35:58:a8:a4:94:46:fd:
2e:e9:da:ab:29:0e:f7:5d:c0:0d:6d:0a:26:57:b2:
c6:f8:88:07:a4:a0:48:02:e8:2a:bc:fb:b8:a1:6d:
ba:c0:55:35:db:9f:20:16:3c:ee:dd:64:d5:d7:b3:
e2:af:d0:24:04:b2:3e:cd:7d:bf:72:be:2f:05:80:
aa:30:90:a5:ca:11:dd:fc:cd:f9:fe:cc:4b:04:ba:
2e:2e:5a:87:5b:2c:ec:18:c5:56:9c:11:6d:47:7b:
e5:8b:47:3d:39:29:af:73:ce:01:6d:05:c4:80:9d:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:3C:11:A7:0D:30:B4:A2:A6:96:19:46:E5:D2:9E:70:E1:F8:E2
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bf:80:06:d4:d2:24:53:3f:ff:18:15:a7:06:da:44:76:63:
b8:13:94:28:71:21:75:c8:77:22:b6:c6:0b:34:d7:d7:d1:54:
89:cc:ac:9f:94:5c:1c:cc:26:a6:8b:4c:fb:85:1d:b0:76:ca:
58:f1:8e:23:51:ba:e7:82:13:02:2f:83:d4:1f:f0:9f:e3:3f:
82:87:b9:d8:54:be:c3:45:25:12:3b:cb:01:4e:d1:f5:c9:b8:
aa:a6:19:9d:1e:0f:a2:ae:d3:b8:e7:c6:7a:7c:d6:de:62:68:
1c:6b:51:35:9c:97:55:11:dd:cd:4c:8c:81:ce:ac:ac:d6:22:
12:47:34:2e:fc:c5:49:c2:c3:36:5e:94:49:0b:f2:77:9a:55:
42:ee:24:53:19:4c:6c:8e:d8:a8:2c:f2:c1:4a:f1:9d:b9:06:
94:9b:12:dc:2d:76:43:b2:16:2a:53:05:18:51:91:41:3f:c8:
ed:52:77:14:2b:a5:4c:40:23:26:56:c4:93:eb:ea:43:30:ea:
74:ff:40:39:5d:74:76:79:8b:8d:65:f4:68:1f:41:c9:d8:57:
2e:7e:34:9e:01:61:05:7c:9d:bd:aa:a2:a3:ee:6f:9d:92:fb:
90:db:b4:fb:6c:01:07:c3:ae:1b:f0:0b:3b:83:95:5e:97:24:
4d:ca:5a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziubgzGArLjfwXMRQEmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk
ZWJmNzYwHhcNMjUwMTMxMTAwMDM4WhcNMjUwMjAxMTAwMDM4WjAzMTEwLwYDVQQD
EyhkYjY0M2MxMWE3MGQzMGI0YTJhNjk2MTk0NmU1ZDI5ZTcwZTFmOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+r6bt3/+eDDXdk8DUyopB2tceX0
8vTpqX4YGzES0rv7XxA0TNz0hC85tLtnJ31dImSaIZH5hU40p8DqLpq7FKWN1OE+
LC04jbFSNhpB0uCt5/V5mIjCbXzQcpdbQocm6cg2BRiOlPf8rVp91VH0VmybMn/Z
uHKpGUQtiIdLIXsrM1Z8Hlylvsgf+h1FGDVYqKSURv0u6dqrKQ73XcANbQomV7LG
+IgHpKBIAugqvPu4oW26wFU1258gFjzu3WTV17Pir9AkBLI+zX2/cr4vBYCqMJCl
yhHd/M35/sxLBLouLlqHWyzsGMVWnBFtR3vli0c9OSmvc84BbQXEgJ1IzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtkPBGnDTC0oqaWGUbl0p5w4fjiMB8GA1UdIwQY
MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt
MmI0YTE2NTk0MjEzLzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz
LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZb+ABtTS
JFM//xgVpwbaRHZjuBOUKHEhdch3IrbGCzTX19FUicysn5RcHMwmpotM+4UdsHbK
WPGOI1G654ITAi+D1B/wn+M/goe52FS+w0UlEjvLAU7R9cm4qqYZnR4Poq7TuOfG
enzW3mJoHGtRNZyXVRHdzUyMgc6srNYiEkc0LvzFScLDNl6USQvyd5pVQu4kUxlM
bI7YqCzywUrxnbkGlJsS3C12Q7IWKlMFGFGRQT/I7VJ3FCulTEAjJlbEk+vqQzDq
dP9AOV10dnmLjWX0aB9BydhXLn40ngFhBXydvaqio+5vnZL7kNu0+2wBB8OuG/AL
O4OVXpckTcpaeg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:09 2025 by rpki-client