Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/741c71-1b69-4778-b009-180e904a3268/1/K6MR50Xhfp8anC1um6TTsLwK6YE.mft
File: K6MR50Xhfp8anC1um6TTsLwK6YE.mft (raw, json)
Hash identifier: fvvD5aiikG7cjINpLKcFh8shEu0POs9+Ag/sAzwhsDo=
Subject key identifier: E2:43:18:33:B1:96:29:22:6F:9A:5A:52:FA:A7:0E:7D:7C:74:E9:32
Authority key identifier: 2B:A3:11:E7:45:E1:7E:9F:1A:9C:2D:6E:9B:A4:D3:B0:BC:0A:E9:81
Certificate issuer: /CN=2ba311e745e17e9f1a9c2d6e9ba4d3b0bc0ae981
Certificate serial: 0186395017808EEE03CE3E80A27FF2649E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6MR50Xhfp8anC1um6TTsLwK6YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/741c71-1b69-4778-b009-180e904a3268/1/K6MR50Xhfp8anC1um6TTsLwK6YE.mft
Manifest number: 09D2
Signing time: Fri 10 Feb 2023 03:13:15 +0000
Manifest this update: Fri 10 Feb 2023 03:13:15 +0000
Manifest next update: Sat 11 Feb 2023 03:13:15 +0000
Files and hashes: 1: K6MR50Xhfp8anC1um6TTsLwK6YE.crl (hash: XQq+eokdTeHxSYCTbDsPoEMEP1HaIbWVq6aaUCL7XYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:50:17:80:8e:ee:03:ce:3e:80:a2:7f:f2:64:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba311e745e17e9f1a9c2d6e9ba4d3b0bc0ae981
Validity
Not Before: Feb 10 03:13:15 2023 GMT
Not After : Feb 11 03:13:15 2023 GMT
Subject: CN=e2431833b19629226f9a5a52faa70e7d7c74e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:30:fd:5a:5e:a7:86:1d:e5:46:ea:e1:e7:8a:
b8:52:d8:ed:d1:fc:a6:14:e7:9a:69:d7:5a:6a:e5:
fa:73:cd:34:81:dc:59:d8:75:53:75:9e:6a:1e:0a:
f6:e6:19:ea:55:79:5a:a5:cd:9e:e9:f8:04:8e:13:
18:eb:43:4c:c9:a7:3d:4d:97:d3:92:9c:e5:22:24:
2d:da:ec:06:dd:85:94:a4:f2:ee:f2:f8:e4:ed:1a:
9e:fe:bd:62:15:0b:6e:00:6c:76:bb:9c:50:20:51:
c4:38:2e:d5:00:29:15:fc:f5:a9:4d:d8:88:ba:b3:
22:d6:33:f6:f3:d8:0c:3a:03:d3:3b:3a:ea:0e:b4:
c4:d8:49:cd:4a:bc:d7:4d:64:1e:95:88:d1:5d:d0:
7c:d6:fe:69:54:8a:ed:90:ae:2c:3a:fd:03:ad:1e:
77:af:d1:ed:2b:6d:cf:34:f1:04:03:d4:bd:91:b4:
a4:1d:63:e0:69:c8:fc:13:40:03:19:96:1b:d9:7a:
a5:92:98:58:0c:73:58:b3:f0:e7:2a:e4:01:b9:8f:
df:f6:b5:f4:d3:11:49:17:56:93:f8:ea:11:a6:17:
6e:84:5c:aa:49:ff:5c:74:fc:22:a0:06:90:8f:67:
5c:cd:80:a5:cf:55:35:0e:cc:45:6b:4e:6c:be:2b:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:43:18:33:B1:96:29:22:6F:9A:5A:52:FA:A7:0E:7D:7C:74:E9:32
X509v3 Authority Key Identifier:
keyid:2B:A3:11:E7:45:E1:7E:9F:1A:9C:2D:6E:9B:A4:D3:B0:BC:0A:E9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6MR50Xhfp8anC1um6TTsLwK6YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/741c71-1b69-4778-b009-180e904a3268/1/K6MR50Xhfp8anC1um6TTsLwK6YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/741c71-1b69-4778-b009-180e904a3268/1/K6MR50Xhfp8anC1um6TTsLwK6YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a5:ce:64:02:e1:a4:38:b3:14:dc:f2:79:01:48:26:a5:6e:
95:30:0f:23:e6:82:b5:b2:95:fc:91:f1:2a:a3:b8:24:e1:99:
ca:8b:92:dd:94:42:26:49:b4:96:bb:e9:b8:3e:da:e0:83:97:
f7:00:35:10:b9:91:16:21:5d:e5:8b:ad:f9:76:2f:a2:7c:20:
71:7d:28:52:9c:b5:5b:91:8e:ed:98:6c:07:73:72:6c:3e:f5:
88:b0:4a:0e:6f:57:32:f9:25:bf:8f:38:d4:11:fd:10:10:33:
79:d5:24:30:c4:c1:d2:e4:d0:61:bc:00:e9:7b:5b:be:02:4b:
83:86:48:4f:15:de:d7:43:44:4d:a9:ea:f5:7f:c3:5b:b8:6f:
eb:cd:fc:dd:fa:1a:07:05:26:61:7b:91:32:4d:a0:35:ed:0f:
35:9c:6b:13:7e:72:3f:40:39:cb:f2:b3:79:c9:0c:0d:f9:6c:
c1:06:15:65:9a:2b:a4:98:98:f5:0e:0f:5c:e1:cc:d1:e2:a9:
ec:32:7e:0e:89:f7:b2:a4:cb:7f:29:9e:28:48:95:fb:91:a6:
c8:f6:fa:69:60:fc:29:10:ce:fd:03:ba:4f:46:8d:98:16:9f:
1c:79:84:0f:fa:31:63:31:f4:62:74:32:fc:20:1c:ca:fe:ac:
c8:9c:ed:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYY5UBeAju4Dzj6Aon/yZJ5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTMxMWU3NDVlMTdlOWYxYTljMmQ2ZTliYTRkM2IwYmMw
YWU5ODEwHhcNMjMwMjEwMDMxMzE1WhcNMjMwMjExMDMxMzE1WjAzMTEwLwYDVQQD
EyhlMjQzMTgzM2IxOTYyOTIyNmY5YTVhNTJmYWE3MGU3ZDdjNzRlOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TD9Wl6nhh3lRurh54q4Utjt0fym
FOeaaddaauX6c800gdxZ2HVTdZ5qHgr25hnqVXlapc2e6fgEjhMY60NMyac9TZfT
kpzlIiQt2uwG3YWUpPLu8vjk7Rqe/r1iFQtuAGx2u5xQIFHEOC7VACkV/PWpTdiI
urMi1jP289gMOgPTOzrqDrTE2EnNSrzXTWQelYjRXdB81v5pVIrtkK4sOv0DrR53
r9HtK23PNPEEA9S9kbSkHWPgacj8E0ADGZYb2XqlkphYDHNYs/DnKuQBuY/f9rX0
0xFJF1aT+OoRphduhFyqSf9cdPwioAaQj2dczYClz1U1DsxFa05svitnQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJDGDOxlikib5paUvqnDn18dOkyMB8GA1UdIwQY
MBaAFCujEedF4X6fGpwtbpuk07C8CumBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZNUjUwWGhmcDhhbkMxdW02VFRzTHdLNllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NDFjNzEtMWI2OS00Nzc4LWIwMDkt
MTgwZTkwNGEzMjY4LzEvSzZNUjUwWGhmcDhhbkMxdW02VFRzTHdLNllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NDFjNzEtMWI2OS00Nzc4LWIwMDktMTgwZTkwNGEzMjY4
LzEvSzZNUjUwWGhmcDhhbkMxdW02VFRzTHdLNllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaXOZALh
pDizFNzyeQFIJqVulTAPI+aCtbKV/JHxKqO4JOGZyouS3ZRCJkm0lrvpuD7a4IOX
9wA1ELmRFiFd5Yut+XYvonwgcX0oUpy1W5GO7ZhsB3NybD71iLBKDm9XMvklv484
1BH9EBAzedUkMMTB0uTQYbwA6XtbvgJLg4ZITxXe10NETanq9X/DW7hv68383foa
BwUmYXuRMk2gNe0PNZxrE35yP0A5y/KzeckMDflswQYVZZorpJiY9Q4PXOHM0eKp
7DJ+Don3sqTLfymeKEiV+5GmyPb6aWD8KRDO/QO6T0aNmBafHHmED/oxYzH0YnQy
/CAcyv6syJzt1Q==
-----END CERTIFICATE-----
Generated at Tue May 13 15:17:10 2025 by rpki-client