Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: FGVNT/hkf6Fw8qJ7sPMxgSFNIMhJMTE97nNHni/PLMA=
Subject key identifier: 13:10:84:8A:02:4B:5D:CA:DE:D8:81:5F:E7:2D:AD:3F:5B:8D:FD:88
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 0194BCE0B0241643B4D6742805A54A5B7760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0999
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: pdy8DYweUeZWHjuGRfGhntxJ6q4ZmDfIjFwWofSVlBA=)
2: aZtA3Tb82BUczOl9SsTYverE7lI.roa (hash: LK8Z2BqrNCcDSNuABGRySwkLhGqKgLJf/sHl1VyEOIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b0:24:16:43:b4:d6:74:28:05:a5:4a:5b:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=1310848a024b5dcaded8815fe72dad3f5b8dfd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:2a:87:c9:1b:43:6c:ac:4a:6b:b7:78:1c:
5a:93:40:84:42:cc:c3:2e:76:58:61:9f:06:db:77:
09:94:de:93:bc:4c:01:d8:f0:1e:f2:34:9e:ac:8f:
b1:9f:58:d7:cd:a4:02:05:9a:b6:ad:4a:4b:64:af:
05:7f:96:57:62:75:29:94:b7:f9:7f:05:f3:b7:6a:
50:86:7a:52:9f:93:91:c1:1d:18:93:58:56:15:47:
e6:4f:f8:99:9b:74:44:aa:a7:ea:bc:ef:cb:5c:be:
a3:b6:46:9a:6e:f8:ac:23:9a:cf:d5:26:6d:f3:dd:
03:ff:a8:a5:83:09:38:ff:de:7f:4c:8f:86:e5:31:
b6:a5:7c:b9:30:a6:ee:eb:74:70:cd:31:8b:3d:24:
f7:d5:80:67:cc:dd:1a:ae:5f:cc:b1:f4:6e:26:0e:
80:d3:c5:72:ae:9f:56:6e:2c:82:99:e3:e8:14:8d:
d0:61:74:ed:21:d6:53:5a:46:fe:e2:5f:2a:90:f0:
6d:89:c4:85:54:21:2a:71:27:4d:ee:d4:36:32:f8:
c0:2a:0e:c9:ee:8e:5a:c8:1d:c3:74:8f:6e:09:a3:
65:54:fb:5b:9f:26:e9:fe:05:10:90:8d:e7:1a:68:
60:ac:50:ea:9a:a8:ef:26:69:aa:38:22:1c:5d:d0:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:10:84:8A:02:4B:5D:CA:DE:D8:81:5F:E7:2D:AD:3F:5B:8D:FD:88
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:17:cc:cb:d5:82:00:77:2a:68:0f:ef:82:3e:38:f7:e7:b2:
04:cf:f1:d9:4a:07:51:2b:5f:31:d9:cd:b7:e9:9e:14:ee:cc:
ce:e1:6f:4d:86:fe:36:17:70:e5:e9:bd:05:c4:3d:b7:c7:ed:
0b:8d:b7:60:1c:bf:e5:c3:cc:e4:31:03:52:32:7a:54:74:44:
2d:43:74:4b:36:a6:ac:d9:00:3b:4c:7f:36:eb:95:f9:4c:7d:
62:bd:b5:b8:b0:3a:85:2e:9e:a9:99:33:27:01:8b:b3:40:f8:
2c:b6:c6:dc:37:0b:66:36:f5:b2:ce:01:da:87:71:36:8e:bc:
fa:b5:02:12:06:a4:b3:12:44:56:d0:ea:52:f6:83:b1:88:fd:
d6:a7:9b:38:04:36:c9:3e:22:58:3f:d9:b0:8b:d1:50:dc:c8:
69:5f:29:96:44:67:8c:7f:5b:6f:a3:16:8b:f2:dc:45:ae:02:
10:c0:53:dc:b8:ec:47:b0:3d:2a:e7:17:eb:16:24:4f:ec:55:
cb:94:31:e5:91:81:30:5d:c6:91:36:3e:16:49:7b:63:05:8c:
11:46:ae:2a:e8:6e:0b:b6:3a:61:47:85:a8:07:ce:fa:7d:5f:
81:d4:d5:77:5e:8f:4c:2f:ba:07:70:ac:ae:87:18:e2:37:01:
87:58:92:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LAkFkO01nQoBaVKW3dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDE5Y2FkYTE2M2UzNjhjYzMzNjI3NjNmMjA2YjNkZWFj
NGQzMjAwHhcNMjUwMTMxMTUwMDI5WhcNMjUwMjAxMTUwMDI5WjAzMTEwLwYDVQQD
EygxMzEwODQ4YTAyNGI1ZGNhZGVkODgxNWZlNzJkYWQzZjViOGRmZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4gqh8kbQ2ysSmu3eBxak0CEQszD
LnZYYZ8G23cJlN6TvEwB2PAe8jSerI+xn1jXzaQCBZq2rUpLZK8Ff5ZXYnUplLf5
fwXzt2pQhnpSn5ORwR0Yk1hWFUfmT/iZm3REqqfqvO/LXL6jtkaabvisI5rP1SZt
890D/6ilgwk4/95/TI+G5TG2pXy5MKbu63RwzTGLPST31YBnzN0arl/MsfRuJg6A
08Vyrp9WbiyCmePoFI3QYXTtIdZTWkb+4l8qkPBticSFVCEqcSdN7tQ2MvjAKg7J
7o5ayB3DdI9uCaNlVPtbnybp/gUQkI3nGmhgrFDqmqjvJmmqOCIcXdAQWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMQhIoCS13K3tiBX+ctrT9bjf2IMB8GA1UdIwQY
MBaAFCoBnK2hY+NozDNidj8gaz3qxNMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDkt
MTQ5ZjYzNjVmZmRhLzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDktMTQ5ZjYzNjVmZmRh
LzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRfMy9WC
AHcqaA/vgj449+eyBM/x2UoHUStfMdnNt+meFO7MzuFvTYb+Nhdw5em9BcQ9t8ft
C423YBy/5cPM5DEDUjJ6VHRELUN0SzamrNkAO0x/NuuV+Ux9Yr21uLA6hS6eqZkz
JwGLs0D4LLbG3DcLZjb1ss4B2odxNo68+rUCEgaksxJEVtDqUvaDsYj91qebOAQ2
yT4iWD/ZsIvRUNzIaV8plkRnjH9bb6MWi/LcRa4CEMBT3LjsR7A9KucX6xYkT+xV
y5Qx5ZGBMF3GkTY+Fkl7YwWMEUauKuhuC7Y6YUeFqAfO+n1fgdTVd16PTC+6B3Cs
rocY4jcBh1iStQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:25 2025 by rpki-client