Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: aTfIliwb0LOJVNCz24wY24dYkNbfs8nm9DpmsDibjYo=
Subject key identifier: C9:21:79:27:05:D4:87:61:BF:B3:42:51:5B:B6:9F:7F:63:10:4A:AD
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 0195DFD92112EAE986B9B33388BEED9FED54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 03:01:43 +0000
Manifest this update: Sat 29 Mar 2025 03:01:43 +0000
Manifest next update: Sun 30 Mar 2025 03:01:43 +0000
Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: LfnBym+U8OX+iwlu4oPY0P6XwIqz36M835dfGnVL1Ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:21:12:ea:e9:86:b9:b3:33:88:be:ed:9f:ed:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Mar 29 03:01:43 2025 GMT
Not After : Mar 30 03:01:43 2025 GMT
Subject: CN=c921792705d48761bfb342515bb69f7f63104aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:12:d3:88:a8:3d:03:cb:8f:b6:7a:0e:cd:54:
ec:f3:44:f7:4e:22:88:af:36:fc:5b:b3:21:6e:58:
cb:cb:ed:09:13:b1:9d:ca:d5:4b:15:63:a6:20:5e:
05:d3:5f:fa:18:13:74:a2:3e:5a:e7:ee:08:f7:42:
a0:54:4f:90:09:6d:18:ac:cb:e2:f8:0d:12:bf:54:
57:48:b6:a7:6c:5d:6c:22:b6:ac:27:2e:50:e4:ee:
17:36:e1:d5:fd:10:48:2b:4d:fa:de:58:47:84:17:
41:94:02:3c:22:a1:3e:db:fb:5b:c7:de:38:49:5f:
a3:8e:b4:0f:eb:2d:d4:63:e0:1b:bc:85:cb:03:7c:
8a:d1:d3:d0:76:e6:69:66:bb:8e:be:01:5a:d9:27:
a6:be:11:4f:7d:6c:1a:29:40:ac:a0:45:95:4b:e7:
9d:b9:8c:9d:48:64:32:26:40:c0:df:8e:37:c3:5a:
c8:7d:fe:19:40:79:2f:65:87:3d:8e:2c:8d:05:6a:
63:4d:70:d9:b9:70:7d:f1:2b:6b:13:f3:de:66:1f:
cb:1e:60:f6:1a:87:bb:ed:f5:b5:8d:cc:dd:6b:d2:
13:a8:73:f8:55:53:0e:3d:c8:ea:a8:3b:e8:f7:c8:
80:5a:0d:59:30:f8:e3:e2:3e:5b:12:49:32:51:c3:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:79:27:05:D4:87:61:BF:B3:42:51:5B:B6:9F:7F:63:10:4A:AD
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e8:85:35:66:db:12:f8:a4:44:6d:fb:85:e3:da:5a:20:89:
93:b9:10:ec:28:33:b3:0a:05:ed:f0:8e:cd:3c:7c:0c:24:94:
6e:c4:99:42:5c:23:ca:7e:54:b3:d5:fa:dd:d2:55:d4:f9:9a:
c9:97:04:d7:ea:35:ba:79:de:65:d6:07:1c:23:10:f9:dd:d0:
33:7a:0c:31:95:c9:df:63:6c:6a:4f:61:6c:8c:10:c7:7a:dd:
48:11:65:3a:ea:23:99:97:b9:48:07:d1:b8:8e:4e:85:56:be:
15:3a:c9:97:52:52:a3:ab:b1:99:df:66:31:6c:71:1a:57:2f:
76:a8:a9:4b:9a:7a:64:9a:f4:d8:8c:cc:95:fc:ad:b9:b8:d6:
23:f2:aa:e7:ac:11:33:27:e6:8f:62:f5:48:94:ad:20:36:53:
5a:ed:a0:73:72:5f:d6:6b:a6:e3:d6:be:62:37:ae:58:cb:31:
26:e9:dd:64:dc:64:e2:6d:25:43:6d:08:38:cd:45:22:fd:78:
1b:42:75:02:c3:0d:fb:39:75:b2:f0:53:a1:2d:46:77:ea:c6:
d9:34:5a:97:2b:52:17:ca:9a:f9:41:02:59:59:ec:77:51:20:
21:c3:a2:51:25:7c:94:9a:fd:9b:7c:66:2e:ba:37:47:d1:75:
bf:82:43:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2SES6umGubMziL7tn+1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx
ODg0YmMwHhcNMjUwMzI5MDMwMTQzWhcNMjUwMzMwMDMwMTQzWjAzMTEwLwYDVQQD
EyhjOTIxNzkyNzA1ZDQ4NzYxYmZiMzQyNTE1YmI2OWY3ZjYzMTA0YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RLTiKg9A8uPtnoOzVTs80T3TiKI
rzb8W7MhbljLy+0JE7GdytVLFWOmIF4F01/6GBN0oj5a5+4I90KgVE+QCW0YrMvi
+A0Sv1RXSLanbF1sIrasJy5Q5O4XNuHV/RBIK0363lhHhBdBlAI8IqE+2/tbx944
SV+jjrQP6y3UY+AbvIXLA3yK0dPQduZpZruOvgFa2SemvhFPfWwaKUCsoEWVS+ed
uYydSGQyJkDA3443w1rIff4ZQHkvZYc9jiyNBWpjTXDZuXB98StrE/PeZh/LHmD2
Goe77fW1jczda9ITqHP4VVMOPcjqqDvo98iAWg1ZMPjj4j5bEkkyUcMmpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkheScF1Idhv7NCUVu2n39jEEqtMB8GA1UdIwQY
MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt
YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2
LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOiFNWbb
EvikRG37hePaWiCJk7kQ7CgzswoF7fCOzTx8DCSUbsSZQlwjyn5Us9X63dJV1Pma
yZcE1+o1unneZdYHHCMQ+d3QM3oMMZXJ32Nsak9hbIwQx3rdSBFlOuojmZe5SAfR
uI5OhVa+FTrJl1JSo6uxmd9mMWxxGlcvdqipS5p6ZJr02IzMlfytubjWI/Kq56wR
Myfmj2L1SJStIDZTWu2gc3Jf1mum49a+YjeuWMsxJundZNxk4m0lQ20IOM1FIv14
G0J1AsMN+zl1svBToS1Gd+rG2TRalytSF8qa+UECWVnsd1EgIcOiUSV8lJr9m3xm
Lro3R9F1v4JDDQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:08:02 2025 by rpki-client