Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: sS/9fE8M4j8AFBzKsILP8oKv68dFj5y8tzLtysw2IJw=
Subject key identifier: EA:49:CD:27:4A:DF:A5:AF:F8:D7:F1:3F:5D:C8:0F:51:28:7F:C9:2B
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 0194BC3C6ECC9BE2CA7271B6035BF7C614E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 071F
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: hFxwIhJuGAZ0OhK0m8ZB33b7iMqcCbVXgae7KdcXYjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:cc:9b:e2:ca:72:71:b6:03:5b:f7:c6:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=ea49cd274adfa5aff8d7f13f5dc80f51287fc92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:2c:2c:2a:c4:10:0a:98:19:15:2c:8c:26:
79:29:9b:18:87:9f:83:bc:d4:71:c8:52:61:94:59:
30:a2:7f:96:70:bc:02:cb:bf:90:23:91:37:d0:88:
e2:ab:0f:26:65:8d:68:24:4e:10:7c:5e:98:9a:f9:
59:03:e2:3b:e5:f0:a9:ca:9c:b1:ad:d7:56:5b:57:
a0:b9:35:c6:6e:d6:fd:74:88:ad:dd:e4:28:b2:86:
83:e6:ed:38:52:d9:28:97:bc:35:9a:5c:fb:fa:1f:
b2:47:95:45:ec:68:07:11:85:2b:14:94:f2:82:17:
4f:b4:9f:03:b9:c2:09:20:30:77:48:3e:5a:f1:a8:
ae:63:82:89:12:8b:62:ec:b7:ea:78:d6:5d:e8:26:
34:b1:77:50:fd:64:f6:9e:da:ea:2e:d0:26:da:4f:
a8:c1:74:2e:18:1d:e3:aa:12:15:24:e4:b5:8f:d4:
45:8a:bd:7d:a5:31:4e:57:bd:a7:fb:7f:69:aa:f2:
76:a3:4b:69:01:3f:f9:00:59:a3:d6:5c:f2:27:1d:
d4:3d:ab:dd:b6:55:c7:0c:52:c7:aa:10:46:eb:12:
46:06:39:06:54:e2:d7:c7:97:3b:3f:d4:31:c6:3a:
2f:22:c7:35:2e:0e:3e:2f:ca:69:92:3f:d0:84:a2:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:CD:27:4A:DF:A5:AF:F8:D7:F1:3F:5D:C8:0F:51:28:7F:C9:2B
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ec:97:98:4b:69:87:f7:49:2b:91:30:4a:00:07:b4:8f:4a:
64:11:5d:0d:3f:ce:a4:4a:5c:26:92:db:63:2e:32:a9:f9:28:
cd:d8:b7:94:83:a0:3c:79:21:e4:9a:b8:9f:09:da:f9:7b:38:
1d:48:e0:eb:86:f0:a1:21:6d:fc:d7:45:ac:da:b7:15:67:41:
1a:57:6d:d0:a3:0e:10:50:95:b8:56:37:64:bb:6d:46:07:cc:
72:e2:6f:be:f3:d4:04:2c:67:36:f3:29:39:1c:05:85:8a:5e:
8d:66:00:e8:06:85:8a:66:c5:cd:2a:d7:82:66:4b:21:a9:97:
6c:3d:fd:59:be:15:5d:20:28:98:f5:dd:bf:ab:d4:78:85:35:
5f:92:83:ef:78:5b:11:78:ce:1e:39:c5:21:70:20:e9:0d:99:
75:12:b0:11:53:c6:7a:a4:cb:4d:ed:b7:b8:18:68:87:e3:eb:
cf:11:76:81:6e:76:d6:20:c0:b5:c2:52:83:72:cd:c4:37:34:
95:9f:b8:d5:e3:af:2c:7d:d7:8e:14:47:da:22:e0:79:dd:a8:
94:e4:7d:a4:dc:bf:38:e1:64:dd:44:19:f6:82:c6:b2:95:08:
22:b0:62:7b:fd:14:ff:ea:56:ac:2c:0d:63:89:11:0f:dd:ea:
52:0a:d3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PG7Mm+LKcnG2A1v3xhTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZiM2ZiYjQ0M2E0YmNmYjhmMjQ2ZmNmYTdmNWViYzhi
OTdiMzEwHhcNMjUwMTMxMTIwMTA0WhcNMjUwMjAxMTIwMTA0WjAzMTEwLwYDVQQD
EyhlYTQ5Y2QyNzRhZGZhNWFmZjhkN2YxM2Y1ZGM4MGY1MTI4N2ZjOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ssLCrEEAqYGRUsjCZ5KZsYh5+D
vNRxyFJhlFkwon+WcLwCy7+QI5E30Ijiqw8mZY1oJE4QfF6YmvlZA+I75fCpypyx
rddWW1eguTXGbtb9dIit3eQosoaD5u04Utkol7w1mlz7+h+yR5VF7GgHEYUrFJTy
ghdPtJ8DucIJIDB3SD5a8aiuY4KJEoti7LfqeNZd6CY0sXdQ/WT2ntrqLtAm2k+o
wXQuGB3jqhIVJOS1j9RFir19pTFOV72n+39pqvJ2o0tpAT/5AFmj1lzyJx3UPavd
tlXHDFLHqhBG6xJGBjkGVOLXx5c7P9QxxjovIsc1Lg4+L8ppkj/QhKLELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpJzSdK36Wv+NfxP13ID1Eof8krMB8GA1UdIwQY
MBaAFJLPs/u0Q6S8+48kb8+n9evIuXsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAt
MDVmMGNiNWVjNGQ4LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81ODRjYzMtN2RlNS00MTVhLTkyMjAtMDVmMGNiNWVjNGQ4
LzEva3Mtei03UkRwTHo3anlSdno2ZjE2OGk1ZXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuyXmEtp
h/dJK5EwSgAHtI9KZBFdDT/OpEpcJpLbYy4yqfkozdi3lIOgPHkh5Jq4nwna+Xs4
HUjg64bwoSFt/NdFrNq3FWdBGldt0KMOEFCVuFY3ZLttRgfMcuJvvvPUBCxnNvMp
ORwFhYpejWYA6AaFimbFzSrXgmZLIamXbD39Wb4VXSAomPXdv6vUeIU1X5KD73hb
EXjOHjnFIXAg6Q2ZdRKwEVPGeqTLTe23uBhoh+PrzxF2gW521iDAtcJSg3LNxDc0
lZ+41eOvLH3XjhRH2iLged2olOR9pNy/OOFk3UQZ9oLGspUIIrBie/0U/+pWrCwN
Y4kRD93qUgrT4A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:32 2025 by rpki-client