Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: IgXav4fFuwSOOeU5Q0EUxKacNcti+Q0hNSPMPmk57qA=
Subject key identifier: 80:FD:7C:13:44:12:14:D8:D7:09:1B:AD:A3:56:6A:37:C6:96:43:07
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 0194BCE0C7ADED95E83285EE99B526DDB93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 0477
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: l+BbYElKYNTF2DBsrlX1cTDD8tfbr1Pgkhe0YwG755Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c7:ad:ed:95:e8:32:85:ee:99:b5:26:dd:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=80fd7c13441214d8d7091bada3566a37c6964307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:3c:dd:66:db:db:48:33:85:05:39:35:42:
19:ea:26:0c:d2:d5:73:97:15:25:20:17:d1:51:8b:
27:fe:6a:59:69:9f:bc:53:59:58:82:f3:04:73:68:
06:a9:f8:05:21:04:e5:a8:4d:15:3a:19:20:62:e4:
1a:7e:b7:42:79:76:9a:bc:91:3b:6e:4f:a3:0e:04:
7f:cc:8d:8a:85:be:1b:be:01:5e:18:43:d2:d7:ec:
8c:0e:58:22:ca:3b:1a:e9:dd:45:81:1d:43:e1:cf:
46:71:d7:85:4d:a5:68:a4:e5:6f:6e:2f:2f:30:9a:
5f:9f:37:f4:16:d6:6c:fb:48:cd:d0:2c:05:d3:88:
c2:e5:42:26:49:58:26:b5:ad:c9:99:9b:d5:0d:a5:
bb:7e:07:0d:3f:6d:1a:ca:bc:43:49:f9:bb:e9:60:
eb:4d:2a:c4:6f:5e:1e:60:a6:3e:58:d6:02:7a:be:
77:f9:14:d4:36:be:b2:70:6d:44:e0:58:2d:ed:f1:
34:d7:2b:9b:d1:fc:1d:c5:db:42:04:b1:21:3a:61:
00:77:7d:f8:72:67:23:6c:c0:68:f8:a6:4e:74:1e:
04:a1:fa:2b:38:79:ed:bd:7c:12:b1:78:9d:b1:54:
c8:83:e1:34:d4:e3:43:92:f1:a2:27:e8:e3:58:2c:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FD:7C:13:44:12:14:D8:D7:09:1B:AD:A3:56:6A:37:C6:96:43:07
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2e:14:7e:56:07:19:ff:77:53:12:d4:b3:cd:03:15:1b:48:
aa:04:c3:94:1a:a8:12:2d:2d:2f:ca:6a:02:1d:a1:7b:d0:12:
fa:1d:f3:17:bf:aa:e1:33:f9:13:6a:41:8d:fa:f0:a0:b0:73:
40:a7:35:c8:44:ef:05:08:ce:6e:72:e2:10:34:96:d6:b8:c0:
79:da:00:57:4f:33:9e:ee:56:2e:b2:db:c5:db:01:2e:e1:7f:
80:c9:4d:5f:dd:89:10:c3:b6:81:14:0c:c3:0e:ce:1c:1b:0a:
a4:09:ad:53:19:51:48:cd:25:ab:0d:7e:85:58:31:10:d9:d1:
46:64:24:6e:11:cc:51:f5:d8:42:d6:fe:55:42:74:fd:94:15:
09:47:14:d1:ae:c3:1c:9c:bd:ca:bf:35:32:e2:10:1f:6b:77:
ab:15:1b:e3:9d:00:68:a0:16:26:52:13:fd:57:83:9a:23:8c:
3b:4e:79:a8:c9:b9:82:69:be:ed:33:ef:5c:56:e8:3f:4f:66:
0a:30:49:d4:35:f7:5f:7d:ff:16:44:61:50:2b:25:e1:3f:27:
35:8e:05:7f:87:a8:5a:58:87:05:2d:5a:f1:53:1c:7d:e8:09:
e0:e7:69:23:b7:a0:e3:f0:08:a5:a8:33:04:73:69:95:99:cb:
71:61:a1:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Met7ZXoMoXumbUm3bk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNmM5OGI1MTA2MWYzNDBjY2U0ZTBiNGNlMzYxY2UzNGFi
YzJmY2UwHhcNMjUwMTMxMTUwMDM1WhcNMjUwMjAxMTUwMDM1WjAzMTEwLwYDVQQD
Eyg4MGZkN2MxMzQ0MTIxNGQ4ZDcwOTFiYWRhMzU2NmEzN2M2OTY0MzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gQ83Wbb20gzhQU5NUIZ6iYM0tVz
lxUlIBfRUYsn/mpZaZ+8U1lYgvMEc2gGqfgFIQTlqE0VOhkgYuQafrdCeXaavJE7
bk+jDgR/zI2Khb4bvgFeGEPS1+yMDlgiyjsa6d1FgR1D4c9GcdeFTaVopOVvbi8v
MJpfnzf0FtZs+0jN0CwF04jC5UImSVgmta3JmZvVDaW7fgcNP20ayrxDSfm76WDr
TSrEb14eYKY+WNYCer53+RTUNr6ycG1E4Fgt7fE01yub0fwdxdtCBLEhOmEAd334
cmcjbMBo+KZOdB4EoforOHntvXwSsXidsVTIg+E01ONDkvGiJ+jjWCzGuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID9fBNEEhTY1wkbraNWajfGlkMHMB8GA1UdIwQY
MBaAFJJsmLUQYfNAzOTgtM42HONKvC/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTkt
ZGM3NmZlY2E5NGJmLzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNTE1OWEtNDUyOS00OGZhLTk1ZTktZGM3NmZlY2E5NGJm
LzEva215WXRSQmg4MERNNU9DMHpqWWM0MHE4TDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi4UflYH
Gf93UxLUs80DFRtIqgTDlBqoEi0tL8pqAh2he9AS+h3zF7+q4TP5E2pBjfrwoLBz
QKc1yETvBQjObnLiEDSW1rjAedoAV08znu5WLrLbxdsBLuF/gMlNX92JEMO2gRQM
ww7OHBsKpAmtUxlRSM0lqw1+hVgxENnRRmQkbhHMUfXYQtb+VUJ0/ZQVCUcU0a7D
HJy9yr81MuIQH2t3qxUb450AaKAWJlIT/VeDmiOMO055qMm5gmm+7TPvXFboP09m
CjBJ1DX3X33/FkRhUCsl4T8nNY4Ff4eoWliHBS1a8VMcfegJ4OdpI7eg4/AIpagz
BHNplZnLcWGhjg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:31 2025 by rpki-client