Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
File: KnB15IEB6u0d47vdysN8mMtiXuY.mft (raw, json)
Hash identifier: mU5H349Tq1pNVNmgOH+3zpnm6vuKTBqQBhyw0WlesFc=
Subject key identifier: F5:86:23:53:40:E7:24:69:7B:5F:EE:9D:FF:42:76:34:43:1A:96:52
Authority key identifier: 2A:70:75:E4:81:01:EA:ED:1D:E3:BB:DD:CA:C3:7C:98:CB:62:5E:E6
Certificate issuer: /CN=2a7075e48101eaed1de3bbddcac37c98cb625ee6
Certificate serial: 01953766AB321375E2D862E08264FA91DF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnB15IEB6u0d47vdysN8mMtiXuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
Manifest number: 1D
Signing time: Mon 24 Feb 2025 10:00:30 +0000
Manifest this update: Mon 24 Feb 2025 10:00:30 +0000
Manifest next update: Tue 25 Feb 2025 10:00:30 +0000
Files and hashes: 1: KnB15IEB6u0d47vdysN8mMtiXuY.crl (hash: f1ZDhDx7uO3F3RQHqel+2sp23uoRILy8R00KZZU97bA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:66:ab:32:13:75:e2:d8:62:e0:82:64:fa:91:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7075e48101eaed1de3bbddcac37c98cb625ee6
Validity
Not Before: Feb 24 10:00:30 2025 GMT
Not After : Feb 25 10:00:30 2025 GMT
Subject: CN=f586235340e724697b5fee9dff427634431a9652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:34:7f:9d:88:25:e5:51:43:7e:cc:37:2b:
3d:e5:5f:7f:54:b5:88:ac:7c:40:4a:cb:b0:91:1b:
ae:de:71:8f:09:8e:37:63:af:80:29:98:b6:78:98:
70:78:42:18:c5:78:a5:7e:4a:b9:07:49:90:6d:73:
b2:6a:f0:50:1e:21:17:ee:2e:f0:c1:15:06:f4:8b:
f3:4f:d5:bd:6d:4b:7a:24:fe:cc:ab:b4:0f:25:fd:
bf:44:1d:4e:14:07:7d:e9:53:f0:3e:22:77:39:3f:
a8:29:fa:49:30:a9:91:2f:af:77:d0:94:1f:f9:2f:
a5:0a:5e:a1:e3:2f:8b:6e:e4:85:d1:1d:13:e6:e8:
b7:9e:67:74:be:6b:c9:23:a2:52:0b:bf:ce:ec:8f:
17:b3:bb:0f:d5:ac:99:ea:d6:36:51:8b:cc:65:9b:
fc:0e:7a:e2:d3:00:06:38:2a:49:41:51:bf:44:3b:
24:78:17:4b:ad:79:05:0f:db:1f:81:77:c7:3b:ac:
26:e6:cc:66:7a:0f:f2:25:9f:12:64:a4:1f:a1:f9:
77:90:6f:06:ee:cb:fd:98:77:9c:ac:a3:5e:a5:65:
c6:cc:72:64:79:59:dd:ff:c8:be:91:a1:74:2f:03:
9c:76:00:b2:5a:28:10:9c:71:78:fb:03:7a:f2:0b:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:23:53:40:E7:24:69:7B:5F:EE:9D:FF:42:76:34:43:1A:96:52
X509v3 Authority Key Identifier:
keyid:2A:70:75:E4:81:01:EA:ED:1D:E3:BB:DD:CA:C3:7C:98:CB:62:5E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnB15IEB6u0d47vdysN8mMtiXuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:5a:c6:29:03:b5:b7:be:f3:af:08:06:94:8b:93:72:73:
99:4b:a0:c4:01:e0:23:cc:96:bd:b8:99:90:9b:69:0b:08:d8:
e9:6f:66:af:ed:6f:76:1c:83:09:b8:0a:c9:2e:0c:ee:24:ca:
e9:29:6e:1e:e2:db:1c:ff:63:04:9a:63:ba:cf:15:07:dc:49:
0b:72:0d:3b:9d:da:4c:61:68:0d:9e:cf:18:4a:68:4c:c3:72:
f4:66:d1:a0:00:36:19:92:08:60:94:44:69:bd:3c:c4:82:90:
bc:07:06:db:82:ea:0d:02:46:85:45:94:43:97:0c:78:08:07:
43:04:6c:53:96:cc:d0:7a:67:e1:1b:b5:f9:02:fd:d5:1a:8f:
0b:c1:cf:d8:e7:05:4c:d3:62:49:26:66:e0:2a:7b:14:27:a2:
9a:83:b4:9e:41:c0:40:98:a7:aa:7f:04:a2:12:8a:34:e0:67:
21:95:e3:bf:a8:de:32:c1:ba:31:bf:a2:3a:64:74:fe:c5:2e:
34:43:0d:4d:b1:0c:1a:1d:af:52:29:10:3b:6e:f5:76:37:71:
ad:ec:9f:ee:d5:73:11:38:55:0c:36:cf:26:e1:99:dd:95:13:
95:e3:79:24:c8:97:ec:5a:23:3b:90:35:74:c0:11:61:5c:72:
2f:4f:39:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZU3ZqsyE3Xi2GLggmT6kd8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzA3NWU0ODEwMWVhZWQxZGUzYmJkZGNhYzM3Yzk4Y2I2
MjVlZTYwHhcNMjUwMjI0MTAwMDMwWhcNMjUwMjI1MTAwMDMwWjAzMTEwLwYDVQQD
EyhmNTg2MjM1MzQwZTcyNDY5N2I1ZmVlOWRmZjQyNzYzNDQzMWE5NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+A0f52IJeVRQ37MNys95V9/VLWI
rHxASsuwkRuu3nGPCY43Y6+AKZi2eJhweEIYxXilfkq5B0mQbXOyavBQHiEX7i7w
wRUG9IvzT9W9bUt6JP7Mq7QPJf2/RB1OFAd96VPwPiJ3OT+oKfpJMKmRL6930JQf
+S+lCl6h4y+LbuSF0R0T5ui3nmd0vmvJI6JSC7/O7I8Xs7sP1ayZ6tY2UYvMZZv8
Dnri0wAGOCpJQVG/RDskeBdLrXkFD9sfgXfHO6wm5sxmeg/yJZ8SZKQfofl3kG8G
7sv9mHecrKNepWXGzHJkeVnd/8i+kaF0LwOcdgCyWigQnHF4+wN68gtH+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWGI1NA5yRpe1/unf9CdjRDGpZSMB8GA1UdIwQY
MBaAFCpwdeSBAertHeO73crDfJjLYl7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25CMTVJRUI2dTBkNDd2ZHlzTjhtTXRpWHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81MzZhMzgtOTc1OS00MGU2LWFhMTkt
MjUwZDFmM2I5MDBmLzEvS25CMTVJRUI2dTBkNDd2ZHlzTjhtTXRpWHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81MzZhMzgtOTc1OS00MGU2LWFhMTktMjUwZDFmM2I5MDBm
LzEvS25CMTVJRUI2dTBkNDd2ZHlzTjhtTXRpWHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSNaxikD
tbe+868IBpSLk3JzmUugxAHgI8yWvbiZkJtpCwjY6W9mr+1vdhyDCbgKyS4M7iTK
6SluHuLbHP9jBJpjus8VB9xJC3INO53aTGFoDZ7PGEpoTMNy9GbRoAA2GZIIYJRE
ab08xIKQvAcG24LqDQJGhUWUQ5cMeAgHQwRsU5bM0Hpn4Ru1+QL91RqPC8HP2OcF
TNNiSSZm4Cp7FCeimoO0nkHAQJinqn8EohKKNOBnIZXjv6jeMsG6Mb+iOmR0/sUu
NEMNTbEMGh2vUikQO271djdxreyf7tVzEThVDDbPJuGZ3ZUTleN5JMiX7FojO5A1
dMARYVxyL085pg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:43:08 2025 by rpki-client