Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a028ac-fd07-4efa-a8fb-a9c28b16b058/1/K5ZQG9p0DQpq9vS0wojZOJeihNw.mft
File: K5ZQG9p0DQpq9vS0wojZOJeihNw.mft (raw, json)
Hash identifier: i2LooU2kXpPhZeZIIQsXG05e0j8QLpFur8GziDK1ZF8=
Subject key identifier: 4E:28:74:5C:F9:16:D5:9F:C6:0A:38:A3:F0:B0:77:DA:48:DA:34:5B
Authority key identifier: 2B:96:50:1B:DA:74:0D:0A:6A:F6:F4:B4:C2:88:D9:38:97:A2:84:DC
Certificate issuer: /CN=2b96501bda740d0a6af6f4b4c288d93897a284dc
Certificate serial: 0194AA6D3CB9FC7A897E9824CDECADDB7C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5ZQG9p0DQpq9vS0wojZOJeihNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a028ac-fd07-4efa-a8fb-a9c28b16b058/1/K5ZQG9p0DQpq9vS0wojZOJeihNw.mft
Manifest number: 0BE0
Signing time: Tue 28 Jan 2025 01:01:13 +0000
Manifest this update: Tue 28 Jan 2025 01:01:13 +0000
Manifest next update: Wed 29 Jan 2025 01:01:13 +0000
Files and hashes: 1: K5ZQG9p0DQpq9vS0wojZOJeihNw.crl (hash: SLyx+TTya8C5OLwyICwXIjQUcIkdF5cLQ0wb0L8hJCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:aa:6d:3c:b9:fc:7a:89:7e:98:24:cd:ec:ad:db:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b96501bda740d0a6af6f4b4c288d93897a284dc
Validity
Not Before: Jan 28 01:01:13 2025 GMT
Not After : Jan 29 01:01:13 2025 GMT
Subject: CN=4e28745cf916d59fc60a38a3f0b077da48da345b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:30:95:32:b1:8e:aa:8d:6a:89:fd:3d:a1:
1d:73:81:85:50:09:d2:a3:a2:07:f6:53:1a:12:aa:
0f:f3:b6:be:07:2f:aa:54:20:a2:15:51:ec:3e:ba:
39:0f:af:7e:e8:f1:cc:1c:eb:a0:69:19:d4:32:b6:
58:c5:fe:90:2f:d7:86:71:5a:f7:35:10:12:86:31:
df:f7:31:e8:eb:c5:bb:3c:43:a2:23:c1:14:c8:58:
4b:fb:98:ee:4a:f9:5c:52:14:be:d0:66:bc:1c:53:
b2:f8:f9:d1:0f:ad:3e:a2:1d:8b:1e:56:fb:e9:1b:
04:56:b3:bd:37:b1:91:d8:ce:cf:d4:fa:48:ee:1b:
62:08:81:e5:6c:5a:7f:5a:0c:84:e2:ea:56:e1:77:
55:70:eb:ad:5f:35:9c:8d:a7:9d:c7:78:54:c5:41:
c7:fb:ef:da:f4:bb:69:a2:44:d4:d7:e4:f3:4f:47:
0a:05:12:d9:7e:cd:06:a3:9c:c6:0d:e0:41:40:51:
e0:0b:c8:c3:7a:24:95:fd:7b:2e:05:ba:e6:6e:ad:
20:b3:9e:ea:34:7c:af:11:6b:ee:cb:f4:bd:66:31:
a1:85:4d:19:03:f1:fa:06:95:a7:f6:cd:92:73:12:
22:14:c8:57:4d:c6:a0:43:be:ca:c9:9e:ed:66:04:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:74:5C:F9:16:D5:9F:C6:0A:38:A3:F0:B0:77:DA:48:DA:34:5B
X509v3 Authority Key Identifier:
keyid:2B:96:50:1B:DA:74:0D:0A:6A:F6:F4:B4:C2:88:D9:38:97:A2:84:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5ZQG9p0DQpq9vS0wojZOJeihNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a028ac-fd07-4efa-a8fb-a9c28b16b058/1/K5ZQG9p0DQpq9vS0wojZOJeihNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a028ac-fd07-4efa-a8fb-a9c28b16b058/1/K5ZQG9p0DQpq9vS0wojZOJeihNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:79:5f:f8:b7:97:c2:b0:2c:ad:12:19:cc:b4:d4:b7:03:
c6:8a:83:e1:16:a6:8e:d9:8f:4d:c3:76:a4:08:57:fc:8d:37:
58:44:76:16:95:f9:0e:c9:1f:29:27:bd:1b:43:44:fe:f1:c5:
04:e1:20:05:5f:5a:be:74:de:86:35:4e:58:aa:15:2e:d7:de:
ff:96:5b:53:97:a0:3a:35:89:1b:c3:22:e1:23:76:ea:bf:cf:
64:7a:a2:17:61:9b:be:e7:fe:48:7c:a3:b9:8f:89:d6:36:9b:
f6:20:4d:46:b9:43:91:f6:c3:e9:35:82:77:49:5c:2b:ee:76:
34:87:bc:0c:99:a3:7a:ba:fd:03:e1:e6:82:88:5e:30:67:65:
f9:07:ea:08:67:b4:da:12:dc:f9:93:06:bc:d8:ac:11:26:74:
da:67:4a:65:05:3c:53:ab:2a:78:2f:0d:ac:8b:f1:f3:0c:72:
b0:cb:e8:07:44:06:25:a1:42:fc:d7:8c:15:c5:55:e2:67:d9:
6a:4d:5e:39:8a:2c:f3:9f:28:58:67:40:89:7e:7c:e8:c9:ee:
30:2b:c1:21:74:1e:da:be:dc:c5:ad:20:ab:b3:c4:d0:c4:84:
f1:f5:14:90:2e:49:af:ee:8b:ad:a6:9c:62:d8:b1:d5:9b:47:
d0:00:27:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSqbTy5/HqJfpgkzeyt23xDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTY1MDFiZGE3NDBkMGE2YWY2ZjRiNGMyODhkOTM4OTdh
Mjg0ZGMwHhcNMjUwMTI4MDEwMTEzWhcNMjUwMTI5MDEwMTEzWjAzMTEwLwYDVQQD
Eyg0ZTI4NzQ1Y2Y5MTZkNTlmYzYwYTM4YTNmMGIwNzdkYTQ4ZGEzNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPkwlTKxjqqNaon9PaEdc4GFUAnS
o6IH9lMaEqoP87a+By+qVCCiFVHsPro5D69+6PHMHOugaRnUMrZYxf6QL9eGcVr3
NRAShjHf9zHo68W7PEOiI8EUyFhL+5juSvlcUhS+0Ga8HFOy+PnRD60+oh2LHlb7
6RsEVrO9N7GR2M7P1PpI7htiCIHlbFp/WgyE4upW4XdVcOutXzWcjaedx3hUxUHH
++/a9LtpokTU1+TzT0cKBRLZfs0Go5zGDeBBQFHgC8jDeiSV/XsuBbrmbq0gs57q
NHyvEWvuy/S9ZjGhhU0ZA/H6BpWn9s2ScxIiFMhXTcagQ77KyZ7tZgSnOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4odFz5FtWfxgo4o/Cwd9pI2jRbMB8GA1UdIwQY
MBaAFCuWUBvadA0Kavb0tMKI2TiXooTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVaUUc5cDBEUXBxOXZTMHdvalpPSmVpaE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hMDI4YWMtZmQwNy00ZWZhLWE4ZmIt
YTljMjhiMTZiMDU4LzEvSzVaUUc5cDBEUXBxOXZTMHdvalpPSmVpaE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hMDI4YWMtZmQwNy00ZWZhLWE4ZmItYTljMjhiMTZiMDU4
LzEvSzVaUUc5cDBEUXBxOXZTMHdvalpPSmVpaE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgk55X/i3
l8KwLK0SGcy01LcDxoqD4RamjtmPTcN2pAhX/I03WER2FpX5DskfKSe9G0NE/vHF
BOEgBV9avnTehjVOWKoVLtfe/5ZbU5egOjWJG8Mi4SN26r/PZHqiF2Gbvuf+SHyj
uY+J1jab9iBNRrlDkfbD6TWCd0lcK+52NIe8DJmjerr9A+HmgoheMGdl+QfqCGe0
2hLc+ZMGvNisESZ02mdKZQU8U6sqeC8NrIvx8wxysMvoB0QGJaFC/NeMFcVV4mfZ
ak1eOYos858oWGdAiX586MnuMCvBIXQe2r7cxa0gq7PE0MSE8fUUkC5Jr+6Lraac
Ytix1ZtH0AAnOg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:18 2025 by rpki-client