Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: MaTNu95C0Bfe/QJ+vyi0mn52BzwvWJZEAfMk/os2a2M=
Subject key identifier: 1B:18:F0:D5:EA:3C:13:B6:DD:CD:56:BF:CB:9A:81:E6:62:F0:2D:2F
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 0194BC3C0054D9D1904ED9A4CD6E2DBD2AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 0D96
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: BHSoQmeR/yROe2jXtE6GpkhqpIwzNEQ7AkTMLXSaJtU=)
2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:54:d9:d1:90:4e:d9:a4:cd:6e:2d:bd:2a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=1b18f0d5ea3c13b6ddcd56bfcb9a81e662f02d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:f4:1a:fc:6e:6d:11:e7:cb:b0:ad:25:b6:
23:57:03:7a:55:ec:b7:36:36:74:e7:ef:97:c2:62:
ea:89:f2:a5:50:63:34:bb:4f:32:8f:ee:23:7e:4f:
88:84:f7:40:d9:5c:de:84:0f:be:02:52:5f:9e:3c:
56:c5:b1:94:4d:18:42:ea:d9:61:f9:90:cd:90:aa:
3b:5c:d8:aa:8e:26:90:f0:79:42:f9:2f:46:8d:fc:
10:d2:13:38:0a:3a:23:3e:dc:41:75:b4:fc:e7:b8:
b0:18:13:50:65:7e:0a:42:56:c9:74:ed:19:8a:aa:
6f:62:2f:eb:1b:20:d2:f2:35:65:8e:7a:ed:52:f5:
b0:7b:c0:70:3a:76:37:92:9f:b7:0d:39:93:e7:91:
59:86:96:09:ab:7f:2b:10:46:3c:54:c7:ea:bc:d7:
1d:56:83:79:63:4b:86:3f:41:36:02:b4:06:7b:9a:
b4:85:fc:d7:dd:a0:8b:b8:3c:9d:42:8b:bd:b6:f0:
f8:10:d2:43:06:29:a5:e6:ee:fd:35:38:ad:c3:e9:
2b:3c:cb:97:0a:83:30:46:96:bd:b3:1c:14:b1:51:
16:3f:de:a5:c7:d0:30:4b:d4:4c:cb:4d:76:b2:32:
8a:03:64:8d:18:93:b1:c2:1e:6f:61:0c:70:09:0f:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:F0:D5:EA:3C:13:B6:DD:CD:56:BF:CB:9A:81:E6:62:F0:2D:2F
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:94:2e:0a:52:ac:3d:b1:e0:0b:68:60:d4:f5:24:86:8c:21:
3f:4e:95:b6:4c:4a:ad:31:14:56:b8:6f:b9:06:d4:b0:ba:18:
14:65:1c:6b:0f:68:08:de:16:0f:bc:b2:22:a2:27:7c:ad:fa:
9b:dc:25:5f:a0:10:df:c3:3d:c1:ce:8c:6d:1c:47:7d:0f:1c:
87:5d:34:93:09:da:68:dd:4c:9a:41:1d:c2:89:39:d0:dc:b6:
32:af:93:f3:e1:94:6e:0a:0c:c9:2e:53:31:85:d5:02:68:19:
7f:58:95:68:02:4f:f8:05:c1:d1:5f:8c:92:f8:6c:28:79:d3:
fb:a5:be:b6:54:01:b1:6d:20:fa:7b:86:99:76:5d:d2:6f:68:
a0:16:ca:18:dc:ec:06:1f:cd:4b:e2:d3:d9:39:f7:95:51:d4:
6c:3a:55:90:d6:2b:35:46:84:6b:06:13:5f:77:4b:ed:e2:83:
1a:13:66:f6:79:30:65:e3:f6:46:59:1d:40:c5:59:f4:68:9c:
ff:d0:82:a5:3c:ef:70:c3:9a:35:81:3d:2f:09:af:61:f0:75:
46:e3:23:f3:3e:d8:c3:ae:f1:8b:ad:d1:99:02:5d:a8:04:1c:
ef:8b:4b:36:24:c5:c9:79:00:33:c5:34:55:b6:4b:a0:48:71:
ec:0f:b8:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PABU2dGQTtmkzW4tvSrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDJjOTljYTczMmM2NGExOWM3ZDk3MzRhOThmYjI0ZTU0
NTU1NDkwHhcNMjUwMTMxMTIwMDM2WhcNMjUwMjAxMTIwMDM2WjAzMTEwLwYDVQQD
EygxYjE4ZjBkNWVhM2MxM2I2ZGRjZDU2YmZjYjlhODFlNjYyZjAyZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz930GvxubRHny7CtJbYjVwN6Vey3
NjZ05++XwmLqifKlUGM0u08yj+4jfk+IhPdA2VzehA++AlJfnjxWxbGUTRhC6tlh
+ZDNkKo7XNiqjiaQ8HlC+S9GjfwQ0hM4CjojPtxBdbT857iwGBNQZX4KQlbJdO0Z
iqpvYi/rGyDS8jVljnrtUvWwe8BwOnY3kp+3DTmT55FZhpYJq38rEEY8VMfqvNcd
VoN5Y0uGP0E2ArQGe5q0hfzX3aCLuDydQou9tvD4ENJDBiml5u79NTitw+krPMuX
CoMwRpa9sxwUsVEWP96lx9AwS9RMy012sjKKA2SNGJOxwh5vYQxwCQ8xWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsY8NXqPBO23c1Wv8uageZi8C0vMB8GA1UdIwQY
MBaAFCkCyZynMsZKGcfZc0qY+yTlRVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0Mjkt
YjY0OWE1NzhmODljLzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0MjktYjY0OWE1NzhmODlj
LzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpQuClKs
PbHgC2hg1PUkhowhP06VtkxKrTEUVrhvuQbUsLoYFGUcaw9oCN4WD7yyIqInfK36
m9wlX6AQ38M9wc6MbRxHfQ8ch100kwnaaN1MmkEdwok50Ny2Mq+T8+GUbgoMyS5T
MYXVAmgZf1iVaAJP+AXB0V+MkvhsKHnT+6W+tlQBsW0g+nuGmXZd0m9ooBbKGNzs
Bh/NS+LT2Tn3lVHUbDpVkNYrNUaEawYTX3dL7eKDGhNm9nkwZeP2RlkdQMVZ9Gic
/9CCpTzvcMOaNYE9LwmvYfB1RuMj8z7Yw67xi63RmQJdqAQc74tLNiTFyXkAM8U0
VbZLoEhx7A+4Rw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:38 2025 by rpki-client