Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.mft
File: KVvOWx426oDwZZguWNrvDZnzhDg.mft (raw, json)
Hash identifier: jNdJIp9Utaqw8zz8EgJkT8H1IuPuxyHEMZ5WCVOb2KY=
Subject key identifier: 36:38:6F:5B:61:62:CC:F6:21:F0:6A:AB:B3:DD:06:61:1B:13:6D:14
Authority key identifier: 29:5B:CE:5B:1E:36:EA:80:F0:65:98:2E:58:DA:EF:0D:99:F3:84:38
Certificate issuer: /CN=295bce5b1e36ea80f065982e58daef0d99f38438
Certificate serial: 0188ADF373005067F309C6C260C8BB52C64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVvOWx426oDwZZguWNrvDZnzhDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.mft
Manifest number: 0D66
Signing time: Mon 12 Jun 2023 04:53:12 +0000
Manifest this update: Mon 12 Jun 2023 04:53:12 +0000
Manifest next update: Tue 13 Jun 2023 04:53:12 +0000
Files and hashes: 1: KVvOWx426oDwZZguWNrvDZnzhDg.crl (hash: WonVcSLJQSJtoOkxp9QY1F1JNRrPF0/YLbvH1Lgxikc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ad:f3:73:00:50:67:f3:09:c6:c2:60:c8:bb:52:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295bce5b1e36ea80f065982e58daef0d99f38438
Validity
Not Before: Jun 12 04:53:12 2023 GMT
Not After : Jun 13 04:53:12 2023 GMT
Subject: CN=36386f5b6162ccf621f06aabb3dd06611b136d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:84:9e:df:ff:93:a0:90:76:bf:f1:d3:ed:
06:e7:5a:53:32:f7:1c:d5:e4:a8:62:40:dd:bc:49:
29:08:46:48:25:4c:26:92:79:15:f3:d4:bc:af:fc:
33:11:b6:da:9d:e3:2e:0b:cf:09:5b:f4:7b:c3:10:
1d:62:5d:21:b6:db:d8:22:49:3a:70:d6:d5:91:6e:
dc:84:4e:3c:7c:77:27:b5:fd:d6:9a:e3:e2:3b:b9:
d2:f4:ec:1a:f0:ce:be:a5:74:62:4c:85:74:37:ae:
ed:27:14:02:af:60:89:70:13:7f:6e:4d:78:f6:39:
1e:59:fb:37:35:2d:3e:db:2e:76:66:09:16:a7:4e:
9a:b3:7c:e0:87:02:6f:9c:08:5c:24:5a:51:6a:cb:
3b:90:ed:63:2e:a8:f8:bf:28:ad:f8:dc:9f:35:91:
09:97:d8:9c:14:c2:0a:a7:f1:76:9a:d7:9f:38:26:
26:79:2e:62:db:bd:32:ea:15:f7:dc:e5:37:54:3c:
40:9c:e6:05:ed:40:9c:58:85:6a:cc:1e:54:d1:17:
de:61:8b:5b:ff:2b:db:55:ba:88:93:53:e0:08:52:
25:d8:6e:cb:3f:d5:af:ef:51:1c:fa:97:b1:31:d6:
e5:70:71:28:54:da:be:d6:5e:05:d6:6c:bb:08:f9:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:38:6F:5B:61:62:CC:F6:21:F0:6A:AB:B3:DD:06:61:1B:13:6D:14
X509v3 Authority Key Identifier:
keyid:29:5B:CE:5B:1E:36:EA:80:F0:65:98:2E:58:DA:EF:0D:99:F3:84:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVvOWx426oDwZZguWNrvDZnzhDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:78:0a:a2:07:63:02:95:61:dd:91:91:03:9b:e3:16:02:
99:44:1f:00:9a:ac:13:36:1f:fa:b7:90:64:31:ca:08:90:9d:
9d:a7:33:f0:a9:87:1b:be:86:1c:39:bc:d1:88:27:32:1b:93:
da:30:ea:4b:80:76:59:76:9b:03:22:6d:8a:39:1a:bb:95:3a:
e7:8b:94:60:d7:e0:4d:b5:84:87:08:d9:31:d6:9e:e9:4d:41:
53:09:3e:9a:2e:9e:c4:74:5d:e2:e0:48:df:ce:0d:d9:74:b4:
00:34:49:55:62:5d:67:a1:bc:73:2c:cf:02:fd:0f:ac:33:8b:
d6:38:b5:1a:cc:96:f6:f5:47:5c:2e:32:e1:16:87:2f:40:41:
df:ac:17:0c:b3:72:bc:0d:9e:fc:c3:ce:36:38:fa:b2:44:e0:
f3:91:2a:23:b5:1d:6c:93:fd:5c:e4:45:9a:a0:1f:77:94:cf:
3e:53:ba:da:d2:8b:f4:97:2c:63:af:93:1a:5d:09:f9:b4:7e:
6c:fd:db:c0:06:33:92:a8:29:14:80:bd:6e:11:31:37:c9:73:
7d:77:72:b2:d2:80:e3:76:96:3e:03:1f:06:3a:26:b3:65:75:
ff:f7:6e:4c:e9:8b:6e:2a:6a:22:8e:7b:6a:6a:ca:61:0c:a9:
a2:35:9a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYit83MAUGfzCcbCYMi7UsZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWJjZTViMWUzNmVhODBmMDY1OTgyZTU4ZGFlZjBkOTlm
Mzg0MzgwHhcNMjMwNjEyMDQ1MzEyWhcNMjMwNjEzMDQ1MzEyWjAzMTEwLwYDVQQD
EygzNjM4NmY1YjYxNjJjY2Y2MjFmMDZhYWJiM2RkMDY2MTFiMTM2ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFWEnt//k6CQdr/x0+0G51pTMvcc
1eSoYkDdvEkpCEZIJUwmknkV89S8r/wzEbbaneMuC88JW/R7wxAdYl0httvYIkk6
cNbVkW7chE48fHcntf3WmuPiO7nS9Owa8M6+pXRiTIV0N67tJxQCr2CJcBN/bk14
9jkeWfs3NS0+2y52ZgkWp06as3zghwJvnAhcJFpRass7kO1jLqj4vyit+NyfNZEJ
l9icFMIKp/F2mtefOCYmeS5i270y6hX33OU3VDxAnOYF7UCcWIVqzB5U0RfeYYtb
/yvbVbqIk1PgCFIl2G7LP9Wv71Ec+pexMdblcHEoVNq+1l4F1my7CPlxMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDY4b1thYsz2IfBqq7PdBmEbE20UMB8GA1UdIwQY
MBaAFClbzlseNuqA8GWYLlja7w2Z84Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Z2T1d4NDI2b0R3WlpndVdOcnZEWm56aERnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wZTIzYjAtZjU1Ny00NmY1LThjZjMt
NWZjM2E5MzkxYzNkLzEvS1Z2T1d4NDI2b0R3WlpndVdOcnZEWm56aERnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wZTIzYjAtZjU1Ny00NmY1LThjZjMtNWZjM2E5MzkxYzNk
LzEvS1Z2T1d4NDI2b0R3WlpndVdOcnZEWm56aERnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfZ4CqIH
YwKVYd2RkQOb4xYCmUQfAJqsEzYf+reQZDHKCJCdnacz8KmHG76GHDm80YgnMhuT
2jDqS4B2WXabAyJtijkau5U654uUYNfgTbWEhwjZMdae6U1BUwk+mi6exHRd4uBI
384N2XS0ADRJVWJdZ6G8cyzPAv0PrDOL1ji1GsyW9vVHXC4y4RaHL0BB36wXDLNy
vA2e/MPONjj6skTg85EqI7UdbJP9XORFmqAfd5TPPlO62tKL9JcsY6+TGl0J+bR+
bP3bwAYzkqgpFIC9bhExN8lzfXdystKA43aWPgMfBjoms2V1//duTOmLbipqIo57
amrKYQypojWaNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:25:28 2025 by rpki-client