Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
File: kSJw6MgQ1eHznUdcGjEdd08XGlY.mft (raw, json)
Hash identifier: uekl7zzLA19dmWHS4sXg0l93fYPAySSF5XO05IU/7Eo=
Subject key identifier: 40:13:96:A7:BD:E0:02:CF:FB:1D:E0:A9:57:EA:E7:0F:75:22:34:1F
Authority key identifier: 91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
Certificate issuer: /CN=912270e8c810d5e1f39d475c1a311d774f171a56
Certificate serial: 0195E15989097444D1ED38CB6DF5854E9080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
Manifest number: 1384
Signing time: Sat 29 Mar 2025 10:01:36 +0000
Manifest this update: Sat 29 Mar 2025 10:01:36 +0000
Manifest next update: Sun 30 Mar 2025 10:01:36 +0000
Files and hashes: 1: kSJw6MgQ1eHznUdcGjEdd08XGlY.crl (hash: xINaBUzUvE0wPgdU4aukPJyT0hUbnTt0+9xiblaHgX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:89:09:74:44:d1:ed:38:cb:6d:f5:85:4e:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912270e8c810d5e1f39d475c1a311d774f171a56
Validity
Not Before: Mar 29 10:01:36 2025 GMT
Not After : Mar 30 10:01:36 2025 GMT
Subject: CN=401396a7bde002cffb1de0a957eae70f7522341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:4f:d8:e0:8d:33:2c:b3:1e:a0:67:2a:07:
a3:37:14:7f:b9:63:40:5d:39:f0:bd:49:d5:ff:1c:
70:55:89:7a:d2:24:d3:5b:a9:91:6d:a6:91:30:50:
37:31:9e:29:21:4a:f1:d1:a7:fb:39:a9:bf:38:4c:
f1:00:57:57:84:3c:f2:20:1d:ef:46:fa:09:c4:1f:
be:bb:c6:1c:70:51:00:c8:1c:81:bf:a9:ac:77:2d:
07:73:2b:8b:72:37:23:c7:d3:06:89:7d:58:02:c8:
a5:10:5c:a6:4e:1d:fc:e0:db:1b:0a:3f:a0:1c:a9:
35:f6:a4:33:7c:65:2f:1b:35:30:be:a6:d5:43:64:
24:7e:d7:07:b5:96:eb:d6:b5:f7:d1:a9:2e:0c:db:
9e:e1:11:58:3f:35:3a:45:4e:46:c6:aa:e3:19:cc:
05:f3:50:3e:a4:ef:0a:14:43:6b:99:a6:e8:6a:45:
7a:5d:13:37:79:ce:65:b6:0c:84:6c:f3:1f:1b:e3:
18:86:cd:1c:12:a5:98:e7:d1:c4:67:34:ac:65:2c:
05:7f:81:ca:02:28:48:cb:8e:15:70:04:6e:4b:06:
fa:b2:c3:3a:62:ef:b4:89:35:81:b9:ed:76:7e:1a:
67:4b:82:93:0a:eb:05:e9:c2:35:83:e1:9e:ac:99:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:13:96:A7:BD:E0:02:CF:FB:1D:E0:A9:57:EA:E7:0F:75:22:34:1F
X509v3 Authority Key Identifier:
keyid:91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:16:3b:ed:87:e0:8e:8b:75:f9:51:e3:bd:c5:72:b6:fe:d1:
61:eb:5f:bd:48:fd:cc:12:bb:8f:77:37:74:88:df:cc:80:e4:
ec:65:15:3b:5f:26:5f:5e:5d:0c:62:08:bc:5b:9c:33:d4:41:
8f:52:1a:ce:32:eb:4e:5a:7a:21:c9:59:5d:4d:8a:d0:db:f3:
80:62:45:3c:6c:7c:aa:a0:fa:4c:19:e2:1e:fa:7c:1d:d7:65:
52:76:bd:3c:b4:a7:11:19:81:af:5c:a3:4d:3c:19:42:7a:75:
a8:c6:00:67:0a:dc:9b:3b:5e:5e:2a:9f:5a:f0:de:55:83:93:
39:0c:a9:9a:17:93:ea:63:5a:fd:0d:9d:ae:49:d7:55:e7:5f:
89:ce:0d:8c:87:37:91:31:74:01:35:ba:0a:4a:19:5d:d8:85:
4c:73:26:c4:2c:b0:5f:a3:96:02:32:db:24:ac:c1:39:7d:8e:
e6:01:86:5e:f4:6d:9d:f3:49:23:1f:c7:53:36:f3:2a:30:03:
77:ab:81:9b:da:73:ee:b7:0b:fb:41:3c:74:5d:09:4b:2a:89:
e7:a2:bc:db:cd:16:21:e5:1a:79:1e:0c:58:36:cb:de:b5:40:
44:08:9a:81:d8:0f:ff:50:85:87:3d:8a:c3:96:d0:58:b5:38:
47:c3:50:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWYkJdETR7TjLbfWFTpCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjI3MGU4YzgxMGQ1ZTFmMzlkNDc1YzFhMzExZDc3NGYx
NzFhNTYwHhcNMjUwMzI5MTAwMTM2WhcNMjUwMzMwMTAwMTM2WjAzMTEwLwYDVQQD
Eyg0MDEzOTZhN2JkZTAwMmNmZmIxZGUwYTk1N2VhZTcwZjc1MjIzNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvItP2OCNMyyzHqBnKgejNxR/uWNA
XTnwvUnV/xxwVYl60iTTW6mRbaaRMFA3MZ4pIUrx0af7Oam/OEzxAFdXhDzyIB3v
RvoJxB++u8YccFEAyByBv6msdy0HcyuLcjcjx9MGiX1YAsilEFymTh384NsbCj+g
HKk19qQzfGUvGzUwvqbVQ2QkftcHtZbr1rX30akuDNue4RFYPzU6RU5GxqrjGcwF
81A+pO8KFENrmaboakV6XRM3ec5ltgyEbPMfG+MYhs0cEqWY59HEZzSsZSwFf4HK
AihIy44VcARuSwb6ssM6Yu+0iTWBue12fhpnS4KTCusF6cI1g+GerJldOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEATlqe94ALP+x3gqVfq5w91IjQfMB8GA1UdIwQY
MBaAFJEicOjIENXh851HXBoxHXdPFxpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NKdzZNZ1ExZUh6blVkY0dqRWRkMDhYR2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jNTY5MzgtMzczNy00NDM1LTg4YTMt
MmM1MzFhNGM4Zjk5LzEva1NKdzZNZ1ExZUh6blVkY0dqRWRkMDhYR2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jNTY5MzgtMzczNy00NDM1LTg4YTMtMmM1MzFhNGM4Zjk5
LzEva1NKdzZNZ1ExZUh6blVkY0dqRWRkMDhYR2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBY77Yfg
jot1+VHjvcVytv7RYetfvUj9zBK7j3c3dIjfzIDk7GUVO18mX15dDGIIvFucM9RB
j1IazjLrTlp6IclZXU2K0NvzgGJFPGx8qqD6TBniHvp8HddlUna9PLSnERmBr1yj
TTwZQnp1qMYAZwrcmzteXiqfWvDeVYOTOQypmheT6mNa/Q2drknXVedfic4NjIc3
kTF0ATW6CkoZXdiFTHMmxCywX6OWAjLbJKzBOX2O5gGGXvRtnfNJIx/HUzbzKjAD
d6uBm9pz7rcL+0E8dF0JSyqJ56K8280WIeUaeR4MWDbL3rVARAiagdgP/1CFhz2K
w5bQWLU4R8NQqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 11:35:06 2025 by rpki-client