Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json)
Hash identifier: BgPg/68dkWo97YbDLY2jU/kyMDpXNZO6qc7zTxCU6wA=
Subject key identifier: 6D:C5:9E:B5:D3:45:37:3F:DE:8C:74:1E:10:51:94:A6:1F:47:C2:8D
Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Certificate serial: 0194BC0533AAC554D99E3A1423261F651709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
Manifest number: 01AA
Signing time: Fri 31 Jan 2025 11:00:45 +0000
Manifest this update: Fri 31 Jan 2025 11:00:45 +0000
Manifest next update: Sat 01 Feb 2025 11:00:45 +0000
Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: Gg5mBT873jnXTbTE96qkz8Xapp5WnnzHVpRB3qr4WoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:33:aa:c5:54:d9:9e:3a:14:23:26:1f:65:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc
Validity
Not Before: Jan 31 11:00:45 2025 GMT
Not After : Feb 1 11:00:45 2025 GMT
Subject: CN=6dc59eb5d345373fde8c741e105194a61f47c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:13:b1:63:f0:4d:9e:4b:83:dd:37:26:42:
f6:2e:e8:44:14:b8:cb:20:62:82:e4:f8:ab:e1:99:
5a:af:35:22:ca:bf:13:0d:5e:3e:77:ea:d7:be:65:
46:57:77:1f:00:56:55:a6:d1:ed:2d:b0:90:29:e2:
ad:02:81:45:ef:0c:12:69:64:4a:cd:80:7e:2c:e6:
1a:b6:7c:a3:fe:3e:05:7f:d6:ff:2e:aa:ce:c7:4f:
9d:6f:2c:01:85:d1:d7:17:8c:59:9f:ca:b1:bd:74:
9a:09:9e:d8:eb:56:d2:fb:51:d5:74:d8:84:07:ea:
71:53:77:92:ee:61:a0:86:aa:21:a8:31:a5:f7:07:
7b:f6:a7:01:81:3f:63:f0:e4:51:f7:39:c3:8a:8b:
18:ed:fa:5b:b3:0a:99:fc:ef:1f:ae:60:2c:6f:fa:
d9:83:d6:9d:9c:7f:c9:23:35:a2:e8:62:4b:97:40:
c8:49:38:12:34:7a:38:e0:9b:1e:56:c7:4e:d2:88:
aa:a9:77:13:d1:a1:df:0e:eb:26:a3:4e:7c:45:11:
c1:d2:24:48:85:5b:f6:f4:c4:39:3f:28:20:5a:3a:
99:0b:e9:80:e2:d3:4c:09:c4:be:fc:15:92:10:fb:
e5:09:b6:99:48:73:1e:b8:e8:ac:b8:f4:52:21:64:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C5:9E:B5:D3:45:37:3F:DE:8C:74:1E:10:51:94:A6:1F:47:C2:8D
X509v3 Authority Key Identifier:
keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:c0:12:39:86:0a:b6:55:b3:1b:7b:14:a1:ac:40:2a:34:
57:bd:57:48:f9:a8:c1:d2:a4:9f:40:12:a4:c1:c9:02:b4:af:
51:e4:0b:23:22:5d:25:22:05:4d:e7:e0:f7:b6:df:3c:bc:82:
32:8a:f2:e2:92:00:f6:45:90:d9:e3:df:48:fb:6a:4c:d9:fa:
bf:c2:ba:10:13:99:b8:bf:58:e3:1f:25:9e:8a:68:82:ec:51:
78:26:b3:dc:e3:cd:3d:e1:f1:cb:b8:a9:ab:b2:a9:68:57:fc:
bf:a1:ed:58:6c:4d:99:ff:6f:5b:0f:11:a6:aa:79:5a:6d:6a:
6d:07:d4:3a:01:5f:30:33:d6:55:c5:5c:cd:ba:e9:85:c4:47:
df:43:81:a5:b6:e7:c1:c0:54:40:05:70:0a:50:fa:38:34:9e:
c5:55:13:a7:6c:9a:e5:2e:eb:ae:d0:cc:03:a5:cc:18:34:99:
d2:46:a4:da:59:19:42:f2:18:71:1a:c3:5e:c3:6a:eb:81:db:
d4:65:3b:67:ae:ac:fe:4b:05:4d:fc:b6:e0:23:08:c0:0a:b2:
53:50:8b:5c:4b:d1:4a:e3:a2:94:96:b5:38:6b:84:37:55:6a:
69:ae:66:21:7f:f6:a3:51:db:42:a2:3b:04:70:70:08:cb:bd:
61:64:fd:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BTOqxVTZnjoUIyYfZRcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjQwY2U3MjU5NDA4ZWE1ZDc2NTZmZmMwMjEzZjIwNjg4
ZGFmZGMwHhcNMjUwMTMxMTEwMDQ1WhcNMjUwMjAxMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg2ZGM1OWViNWQzNDUzNzNmZGU4Yzc0MWUxMDUxOTRhNjFmNDdjMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte0TsWPwTZ5Lg903JkL2LuhEFLjL
IGKC5Pir4ZlarzUiyr8TDV4+d+rXvmVGV3cfAFZVptHtLbCQKeKtAoFF7wwSaWRK
zYB+LOYatnyj/j4Ff9b/LqrOx0+dbywBhdHXF4xZn8qxvXSaCZ7Y61bS+1HVdNiE
B+pxU3eS7mGghqohqDGl9wd79qcBgT9j8ORR9znDiosY7fpbswqZ/O8frmAsb/rZ
g9adnH/JIzWi6GJLl0DISTgSNHo44JseVsdO0oiqqXcT0aHfDusmo058RRHB0iRI
hVv29MQ5PyggWjqZC+mA4tNMCcS+/BWSEPvlCbaZSHMeuOisuPRSIWScnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3FnrXTRTc/3ox0HhBRlKYfR8KNMB8GA1UdIwQY
MBaAFJJkDOcllAjqXXZW/8AhPyBoja/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTct
NzlmNTE1ZGMyZjk3LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTctNzlmNTE1ZGMyZjk3
LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLLAEjmG
CrZVsxt7FKGsQCo0V71XSPmowdKkn0ASpMHJArSvUeQLIyJdJSIFTefg97bfPLyC
Mory4pIA9kWQ2ePfSPtqTNn6v8K6EBOZuL9Y4x8lnopoguxReCaz3OPNPeHxy7ip
q7KpaFf8v6HtWGxNmf9vWw8Rpqp5Wm1qbQfUOgFfMDPWVcVczbrphcRH30OBpbbn
wcBUQAVwClD6ODSexVUTp2ya5S7rrtDMA6XMGDSZ0kak2lkZQvIYcRrDXsNq64Hb
1GU7Z66s/ksFTfy24CMIwAqyU1CLXEvRSuOilJa1OGuEN1Vqaa5mIX/2o1HbQqI7
BHBwCMu9YWT97w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:37 2025 by rpki-client