Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.mft
File: KrJTDL6k1DyzdhtC2t_q1-UXIig.mft (raw, json)
Hash identifier: tvZA45ThFw+ToN12aTIRIr2sRcFUw/Jv5uk1hMNjoD8=
Subject key identifier: 78:77:8F:BC:FA:70:50:6A:91:67:77:E5:79:0B:D7:D9:3B:3A:69:12
Authority key identifier: 2A:B2:53:0C:BE:A4:D4:3C:B3:76:1B:42:DA:DF:EA:D7:E5:17:22:28
Certificate issuer: /CN=2ab2530cbea4d43cb3761b42dadfead7e5172228
Certificate serial: 0191C0FC41376B995DE82A3A71DF2603A5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrJTDL6k1DyzdhtC2t_q1-UXIig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.mft
Manifest number: 1094
Signing time: Thu 05 Sep 2024 07:00:42 +0000
Manifest this update: Thu 05 Sep 2024 07:00:42 +0000
Manifest next update: Fri 06 Sep 2024 07:00:42 +0000
Files and hashes: 1: KrJTDL6k1DyzdhtC2t_q1-UXIig.crl (hash: pLIOBTsBRlrUrd/5M7BrPXatSqLFmCesKIf9RMtHjqU=)
2: h_GV4ZwxOfqJX0cTeoIVOjKtT_k.roa (hash: yhdLAa+BCuCpF0ixr2pdkOrkLWg4NKbskUTScILUrAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:fc:41:37:6b:99:5d:e8:2a:3a:71:df:26:03:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab2530cbea4d43cb3761b42dadfead7e5172228
Validity
Not Before: Sep 5 07:00:42 2024 GMT
Not After : Sep 6 07:00:42 2024 GMT
Subject: CN=78778fbcfa70506a916777e5790bd7d93b3a6912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:26:95:3a:fa:15:cd:76:d4:3b:36:02:70:
00:21:e2:23:96:a6:ca:72:02:07:dd:4b:ae:b2:7d:
36:ca:69:bc:bb:4d:cd:68:b6:1c:d8:ea:b9:43:ad:
9d:19:83:bc:bf:2d:72:ab:98:b0:a3:ee:e6:8d:52:
a4:0a:a7:c4:e5:d6:62:5a:c6:ab:ba:9f:f5:4d:19:
0b:5a:29:9d:ab:df:14:21:42:9a:c1:37:31:83:4b:
35:51:b2:72:f5:9e:ab:a5:12:cd:62:0f:7a:8d:a6:
54:42:fc:5a:30:fa:44:bd:17:35:59:52:ff:fb:79:
de:eb:1a:1f:36:42:ce:2f:b2:71:8e:71:9a:76:f4:
25:df:83:f1:21:6e:31:b7:2f:21:58:f1:f5:35:99:
f1:bd:b7:05:15:e3:84:c4:09:d8:a9:bc:43:ba:12:
f1:d0:f9:4e:b0:28:34:25:71:9a:5c:d3:9b:81:bb:
41:85:9f:f4:27:5f:1d:33:9d:6d:a9:fa:7d:cf:26:
d5:2f:3a:d9:47:45:91:da:90:c1:6f:8f:85:41:1d:
55:02:33:ee:71:05:1d:90:ef:5e:f4:f2:b5:40:63:
37:43:b6:7d:cf:2e:fd:ac:bc:51:42:64:be:1a:19:
e0:ed:47:bd:a8:7c:0e:fb:9a:ef:1c:7f:e2:52:af:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:8F:BC:FA:70:50:6A:91:67:77:E5:79:0B:D7:D9:3B:3A:69:12
X509v3 Authority Key Identifier:
keyid:2A:B2:53:0C:BE:A4:D4:3C:B3:76:1B:42:DA:DF:EA:D7:E5:17:22:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrJTDL6k1DyzdhtC2t_q1-UXIig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d2:5c:74:79:d3:e8:39:97:2b:a7:1c:b5:3f:4e:b6:e3:05:
8d:37:a9:af:d8:aa:0e:b1:20:56:bb:dd:01:41:48:a2:aa:a6:
b9:74:5d:bf:b1:54:ee:7f:57:50:d9:cc:b4:9a:34:37:f8:6c:
5f:37:66:ad:a3:2d:ea:ec:d3:2b:af:04:92:ac:da:a4:39:7f:
7e:1e:30:ad:26:05:aa:d0:a0:4c:da:cc:8b:02:93:fa:b8:13:
1f:85:21:ff:2a:f9:e0:2b:f5:2a:65:f8:17:49:5e:00:f3:26:
9c:4f:d6:92:25:18:9c:0f:32:01:74:15:84:b7:1b:e2:11:a1:
75:8f:16:bf:15:91:31:02:f1:d7:65:ad:26:2d:ed:a2:54:c8:
fe:4a:ef:b6:6b:47:73:de:44:34:40:0a:48:2c:a1:a9:82:c2:
13:58:4f:21:72:1f:bf:18:c7:1c:d4:3e:07:6e:f0:3b:81:04:
b2:55:00:4c:85:40:14:6d:36:8d:46:51:1f:96:f3:9d:e4:31:
cb:30:af:95:1d:dd:9a:d7:07:51:58:b7:57:f5:86:2e:10:8b:
48:74:db:55:fd:fb:56:b2:96:16:17:4c:8d:47:e7:4b:8c:c8:
a1:47:cc:d4:4b:13:16:e0:57:5a:88:85:85:c5:bc:12:76:32:
21:24:fd:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZHA/EE3a5ld6Co6cd8mA6XHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjI1MzBjYmVhNGQ0M2NiMzc2MWI0MmRhZGZlYWQ3ZTUx
NzIyMjgwHhcNMjQwOTA1MDcwMDQyWhcNMjQwOTA2MDcwMDQyWjAzMTEwLwYDVQQD
Eyg3ODc3OGZiY2ZhNzA1MDZhOTE2Nzc3ZTU3OTBiZDdkOTNiM2E2OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoQmlTr6Fc121Ds2AnAAIeIjlqbK
cgIH3Uuusn02ymm8u03NaLYc2Oq5Q62dGYO8vy1yq5iwo+7mjVKkCqfE5dZiWsar
up/1TRkLWimdq98UIUKawTcxg0s1UbJy9Z6rpRLNYg96jaZUQvxaMPpEvRc1WVL/
+3ne6xofNkLOL7JxjnGadvQl34PxIW4xty8hWPH1NZnxvbcFFeOExAnYqbxDuhLx
0PlOsCg0JXGaXNObgbtBhZ/0J18dM51tqfp9zybVLzrZR0WR2pDBb4+FQR1VAjPu
cQUdkO9e9PK1QGM3Q7Z9zy79rLxRQmS+Ghng7Ue9qHwO+5rvHH/iUq8UTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh3j7z6cFBqkWd35XkL19k7OmkSMB8GA1UdIwQY
MBaAFCqyUwy+pNQ8s3YbQtrf6tflFyIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JKVERMNmsxRHl6ZGh0QzJ0X3ExLVVYSWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82OWRhOTgtODRkNi00MDgxLTgzZGEt
ZDJiNzIzMGEzZGY4LzEvS3JKVERMNmsxRHl6ZGh0QzJ0X3ExLVVYSWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82OWRhOTgtODRkNi00MDgxLTgzZGEtZDJiNzIzMGEzZGY4
LzEvS3JKVERMNmsxRHl6ZGh0QzJ0X3ExLVVYSWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNJcdHnT
6DmXK6cctT9OtuMFjTepr9iqDrEgVrvdAUFIoqqmuXRdv7FU7n9XUNnMtJo0N/hs
XzdmraMt6uzTK68EkqzapDl/fh4wrSYFqtCgTNrMiwKT+rgTH4Uh/yr54Cv1KmX4
F0leAPMmnE/WkiUYnA8yAXQVhLcb4hGhdY8WvxWRMQLx12WtJi3tolTI/krvtmtH
c95ENEAKSCyhqYLCE1hPIXIfvxjHHNQ+B27wO4EEslUATIVAFG02jUZRH5bzneQx
yzCvlR3dmtcHUVi3V/WGLhCLSHTbVf37VrKWFhdMjUfnS4zIoUfM1EsTFuBXWoiF
hcW8EnYyIST93g==
-----END CERTIFICATE-----
Generated at Sun May 11 06:34:13 2025 by rpki-client