Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: tbPyww/hv7NjaVPLc9i5LV2ng48rkA8sMl1v8Dz9oQg=
Subject key identifier: F5:36:CC:15:2B:94:EC:AA:96:47:A8:07:96:57:F3:81:06:C8:83:AE
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 0194BCAA4F84E518891308BB071AB75DE4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:01:05 +0000
Manifest this update: Fri 31 Jan 2025 14:01:05 +0000
Manifest next update: Sat 01 Feb 2025 14:01:05 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: HS6IzDDZK4M+oeaheeuDKsDhplJonzpXzt5d3YLliIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:4f:84:e5:18:89:13:08:bb:07:1a:b7:5d:e4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Jan 31 14:01:05 2025 GMT
Not After : Feb 1 14:01:05 2025 GMT
Subject: CN=f536cc152b94ecaa9647a8079657f38106c883ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:89:ba:ed:66:a3:aa:d8:d6:e5:14:b6:5c:
23:ea:02:95:52:15:ea:e3:67:ce:26:b4:69:64:39:
0c:6d:f7:47:f4:d9:83:ba:01:e1:91:d1:14:4b:1c:
d1:35:d1:32:b2:f3:8e:4e:12:05:39:f0:74:28:15:
b3:02:69:92:ce:5b:43:fa:91:ad:c4:95:69:9a:56:
c4:bb:28:96:7f:56:77:0e:fe:ad:00:53:49:18:28:
e1:1e:81:fc:63:c0:cb:2c:6e:83:df:a6:e5:2c:ab:
d0:36:10:b9:96:c0:f4:37:05:0c:07:79:48:16:50:
03:1a:db:0a:b6:d2:64:79:4a:c5:9f:6b:7a:66:7f:
69:3e:39:38:a6:58:cf:54:9d:53:5a:b5:d6:e4:4f:
75:12:3a:fe:86:ea:b7:e4:8e:5a:a4:b9:6a:2f:b9:
e7:27:6f:57:76:50:53:f2:a6:cb:89:b3:b8:af:68:
0f:d5:54:38:9c:37:4e:94:d8:0e:3e:a3:61:54:47:
7c:1f:6b:e2:43:3c:86:a2:56:e8:3b:51:71:fb:d9:
3a:77:db:38:12:3a:f4:b5:0f:42:ee:de:2e:8d:bc:
9f:9a:71:2e:bb:fb:0e:94:56:26:c0:6b:91:56:9b:
0a:31:ce:4e:57:17:d8:1c:5a:15:15:f5:18:bb:e5:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:CC:15:2B:94:EC:AA:96:47:A8:07:96:57:F3:81:06:C8:83:AE
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:29:50:23:f1:fd:35:d9:7d:d3:b1:2d:7f:4e:27:39:ab:24:
e1:5c:54:f2:a3:4d:4d:45:87:b0:31:db:76:ee:3d:ce:d2:6e:
28:d1:3d:47:d9:81:e4:46:19:bc:6e:d5:74:66:6d:12:75:a5:
ef:18:54:c2:9f:ca:a4:47:c7:bc:30:78:76:dc:f7:7e:c7:08:
32:23:87:92:76:af:4b:38:3c:92:04:4b:f9:64:b8:1b:df:83:
7c:d3:27:ea:91:ab:dc:f7:e3:f8:4f:b3:0b:7f:36:74:51:6f:
8a:23:42:f0:91:c3:ff:57:dd:62:64:0d:3e:30:bc:7b:b5:71:
ce:57:3a:3e:11:cd:3b:14:d8:2f:59:b8:67:6f:aa:7b:90:a4:
a0:97:79:4f:fa:80:eb:f7:57:fa:65:8c:d5:01:ad:40:52:7e:
30:ff:50:26:8a:62:62:50:af:5d:cf:12:4b:38:97:78:d9:38:
ab:8f:d7:81:43:9b:75:14:52:df:76:02:c8:a6:98:7b:4e:64:
87:56:47:e1:08:05:af:0a:83:ca:7e:8f:8c:65:ab:bf:7d:1e:
20:50:ae:1c:b1:62:11:de:53:7d:c5:62:b2:0a:1f:2b:ad:b5:
58:5a:c8:34:b4:e8:ab:82:ff:15:ca:2a:3d:3a:c6:f8:1c:93:
5f:29:4b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qk+E5RiJEwi7Bxq3XeTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw
OTZkYjgwHhcNMjUwMTMxMTQwMTA1WhcNMjUwMjAxMTQwMTA1WjAzMTEwLwYDVQQD
EyhmNTM2Y2MxNTJiOTRlY2FhOTY0N2E4MDc5NjU3ZjM4MTA2Yzg4M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV+Juu1mo6rY1uUUtlwj6gKVUhXq
42fOJrRpZDkMbfdH9NmDugHhkdEUSxzRNdEysvOOThIFOfB0KBWzAmmSzltD+pGt
xJVpmlbEuyiWf1Z3Dv6tAFNJGCjhHoH8Y8DLLG6D36blLKvQNhC5lsD0NwUMB3lI
FlADGtsKttJkeUrFn2t6Zn9pPjk4pljPVJ1TWrXW5E91Ejr+huq35I5apLlqL7nn
J29XdlBT8qbLibO4r2gP1VQ4nDdOlNgOPqNhVEd8H2viQzyGolboO1Fx+9k6d9s4
Ejr0tQ9C7t4ujbyfmnEuu/sOlFYmwGuRVpsKMc5OVxfYHFoVFfUYu+V96wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU2zBUrlOyqlkeoB5ZX84EGyIOuMB8GA1UdIwQY
MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt
YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1
LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaClQI/H9
Ndl907Etf04nOask4VxU8qNNTUWHsDHbdu49ztJuKNE9R9mB5EYZvG7VdGZtEnWl
7xhUwp/KpEfHvDB4dtz3fscIMiOHknavSzg8kgRL+WS4G9+DfNMn6pGr3Pfj+E+z
C382dFFviiNC8JHD/1fdYmQNPjC8e7Vxzlc6PhHNOxTYL1m4Z2+qe5CkoJd5T/qA
6/dX+mWM1QGtQFJ+MP9QJopiYlCvXc8SSziXeNk4q4/XgUObdRRS33YCyKaYe05k
h1ZH4QgFrwqDyn6PjGWrv30eIFCuHLFiEd5TfcVisgofK621WFrINLToq4L/Fcoq
PTrG+ByTXylLzw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:14 2025 by rpki-client