Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/KbKaHACXpZtHXgM9EZBE5nD4_xU.mft
File: KbKaHACXpZtHXgM9EZBE5nD4_xU.mft (raw, json)
Hash identifier: hGmij7N7YfR8m24NzBVv+n2U9NeNTQaFTWQVfsYffxY=
Subject key identifier: 3E:B6:99:55:5A:74:46:37:A0:F3:44:B4:F2:3D:FE:AB:31:8A:6B:EC
Authority key identifier: 29:B2:9A:1C:00:97:A5:9B:47:5E:03:3D:11:90:44:E6:70:F8:FF:15
Certificate issuer: /CN=29b29a1c0097a59b475e033d119044e670f8ff15
Certificate serial: 071A333A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbKaHACXpZtHXgM9EZBE5nD4_xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/KbKaHACXpZtHXgM9EZBE5nD4_xU.mft
Manifest number: 0958
Signing time: Wed 29 Jun 2022 06:21:59 +0000
Manifest this update: Wed 29 Jun 2022 06:21:59 +0000
Manifest next update: Thu 30 Jun 2022 06:21:59 +0000
Files and hashes: 1: KbKaHACXpZtHXgM9EZBE5nD4_xU.crl (hash: eD8c69e9LhHXpff8WTxlmie1+oEaqHag0s40tCS3fbs=)
2: zCtBNzsS88eiqIGgRpUY9DMy154.roa (hash: QS7iz+Q6R0fmI/vHu4vdT5FVO+nA1KKysY7PEcWtYxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119157562 (0x71a333a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b29a1c0097a59b475e033d119044e670f8ff15
Validity
Not Before: Jun 29 06:21:59 2022 GMT
Not After : Jun 30 06:21:59 2022 GMT
Subject: CN=3eb699555a744637a0f344b4f23dfeab318a6bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:c4:cc:ef:07:5d:96:81:7f:e3:58:88:24:
59:94:64:f6:2c:f0:6f:cf:78:a2:c8:2b:37:eb:63:
dd:59:d0:47:6e:5f:bd:c7:8a:40:90:99:08:6b:6e:
a8:cc:50:da:51:8e:f4:ef:31:c2:22:87:5b:78:6a:
87:04:d7:32:fa:97:c8:97:fc:51:e4:a2:d5:8f:e4:
96:8e:22:4b:f2:b0:97:af:36:b0:60:50:ed:b6:10:
9a:35:55:54:53:fd:e9:b7:43:b3:52:95:f0:54:76:
91:4e:b0:27:a2:c0:1c:8a:f3:8e:77:66:5d:3f:8d:
b7:e1:eb:c4:3e:f5:30:4e:a0:28:8c:4c:71:8c:c2:
26:e7:a8:bc:71:8f:f4:c8:8d:4d:8a:eb:99:11:18:
62:55:67:4b:45:c8:f0:28:be:46:11:76:d8:e8:42:
74:40:dc:27:95:34:0e:f4:c1:d8:66:ab:3d:b2:33:
0f:96:c2:8b:2c:3b:ba:9c:ec:36:a7:e5:04:4a:f4:
3c:ab:d3:ac:22:02:f9:2a:23:45:9b:27:12:f8:d0:
17:24:a2:6b:94:50:d8:b1:62:53:e8:78:67:38:23:
e5:14:b2:8d:ff:61:ff:c7:58:84:e6:b4:76:51:69:
f9:45:dd:3a:b1:6e:6c:5a:90:a3:c2:86:c7:95:4a:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:99:55:5A:74:46:37:A0:F3:44:B4:F2:3D:FE:AB:31:8A:6B:EC
X509v3 Authority Key Identifier:
keyid:29:B2:9A:1C:00:97:A5:9B:47:5E:03:3D:11:90:44:E6:70:F8:FF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbKaHACXpZtHXgM9EZBE5nD4_xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/KbKaHACXpZtHXgM9EZBE5nD4_xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fa53a6-2073-4f98-89b2-5db7372aadc8/1/KbKaHACXpZtHXgM9EZBE5nD4_xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8b:ce:36:b8:ca:36:92:c9:1f:ec:80:ed:1b:24:06:72:1a:
7d:bb:bd:fb:af:a3:25:82:7b:e8:68:53:85:3a:6c:7f:d7:cc:
e3:6d:e8:4c:fe:c6:f7:74:8b:5e:bd:92:d2:6d:16:62:70:07:
a3:ac:f9:5a:0b:24:0f:fb:df:1e:8b:98:fd:94:89:53:7b:d7:
57:47:a1:d7:e9:5a:51:f3:6e:be:0e:15:47:d7:29:b2:21:62:
30:82:86:45:53:e6:bd:d0:0c:84:b4:50:0f:5e:c0:cf:d3:db:
ba:a9:1a:cd:37:3a:a3:80:98:de:6c:d3:f9:ea:f0:a1:ac:69:
07:03:63:62:b4:c6:34:85:b5:29:50:31:bd:c8:36:08:48:57:
c7:08:58:9f:35:7d:ac:89:9d:04:9e:a2:f3:39:5a:f7:aa:da:
48:2e:23:45:f8:4e:2d:cb:b7:21:8d:bb:52:75:72:1e:05:bb:
5d:92:ac:ff:03:b2:93:e7:65:3e:43:40:0a:f6:50:70:8d:d0:
a5:33:d1:d1:37:ec:64:d1:98:b4:97:ae:57:93:db:eb:a1:a2:
8f:5d:60:4e:d1:58:13:be:cb:be:aa:d3:71:6f:2a:ba:39:e3:
93:dd:e9:98:aa:bd:c2:89:95:a6:f5:1e:a6:29:72:b8:01:94:
58:9a:42:99
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBxozOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OWIyOWExYzAwOTdhNTliNDc1ZTAzM2QxMTkwNDRlNjcwZjhmZjE1MB4XDTIyMDYy
OTA2MjE1OVoXDTIyMDYzMDA2MjE1OVowMzExMC8GA1UEAxMoM2ViNjk5NTU1YTc0
NDYzN2EwZjM0NGI0ZjIzZGZlYWIzMThhNmJlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIXBxMzvB12WgX/jWIgkWZRk9izwb894osgrN+tj3VnQR25f
vceKQJCZCGtuqMxQ2lGO9O8xwiKHW3hqhwTXMvqXyJf8UeSi1Y/klo4iS/Kwl682
sGBQ7bYQmjVVVFP96bdDs1KV8FR2kU6wJ6LAHIrzjndmXT+Nt+HrxD71ME6gKIxM
cYzCJueovHGP9MiNTYrrmREYYlVnS0XI8Ci+RhF22OhCdEDcJ5U0DvTB2GarPbIz
D5bCiyw7upzsNqflBEr0PKvTrCIC+SojRZsnEvjQFySia5RQ2LFiU+h4Zzgj5RSy
jf9h/8dYhOa0dlFp+UXdOrFubFqQo8KGx5VKHp0CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQ+tplVWnRGN6DzRLTyPf6rMYpr7DAfBgNVHSMEGDAWgBQpspocAJelm0de
Az0RkETmcPj/FTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tiS2FIQUNYcFp0SFhnTTlFWkJFNW5ENF94VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvZmE1M2E2LTIwNzMtNGY5OC04OWIyLTVkYjczNzJhYWRjOC8x
L0tiS2FIQUNYcFp0SFhnTTlFWkJFNW5ENF94VS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Iv
ZmE1M2E2LTIwNzMtNGY5OC04OWIyLTVkYjczNzJhYWRjOC8xL0tiS2FIQUNYcFp0
SFhnTTlFWkJFNW5ENF94VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFWLzja4yjaSyR/sgO0bJAZyGn27
vfuvoyWCe+hoU4U6bH/XzONt6Ez+xvd0i169ktJtFmJwB6Os+VoLJA/73x6LmP2U
iVN711dHodfpWlHzbr4OFUfXKbIhYjCChkVT5r3QDIS0UA9ewM/T27qpGs03OqOA
mN5s0/nq8KGsaQcDY2K0xjSFtSlQMb3INghIV8cIWJ81fayJnQSeovM5Wveq2kgu
I0X4Ti3LtyGNu1J1ch4Fu12SrP8DspPnZT5DQAr2UHCN0KUz0dE37GTRmLSXrleT
2+uhoo9dYE7RWBO+y76q03FvKro545Pd6ZiqvcKJlab1HqYpcrgBlFiaQpk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:59 2025 by rpki-client