Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.mft
File: KRTnfeU7g1wOIVDGFTsj9VX_bmQ.mft (raw, json)
Hash identifier: rLgcrEsMY7pHa11tsY3faHzGN+Q1HfSlHDCRWAJgaFs=
Subject key identifier: 80:D8:F4:E2:CD:58:BE:B9:0F:89:C3:FB:79:20:0C:15:0D:D8:89:E3
Authority key identifier: 29:14:E7:7D:E5:3B:83:5C:0E:21:50:C6:15:3B:23:F5:55:FF:6E:64
Certificate issuer: /CN=2914e77de53b835c0e2150c6153b23f555ff6e64
Certificate serial: 018A2ABB9EE7AAE753E8CD4E617A01C60A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.mft
Manifest number: 0E1E
Signing time: Fri 25 Aug 2023 03:27:33 +0000
Manifest this update: Fri 25 Aug 2023 03:27:33 +0000
Manifest next update: Sat 26 Aug 2023 03:27:33 +0000
Files and hashes: 1: HbWpr0SmcgyP220WzbhjaMi4-HQ.roa (hash: YhQVcFp9TdJiImdU4AZiLO8tQ6i6Lv67/M3Jg7ryWfo=)
2: KRTnfeU7g1wOIVDGFTsj9VX_bmQ.crl (hash: ii0+uu9LmIjmBEzwQf/GnlnHEXAvNjq5XnQQylbgm4g=)
3: rClb-Eu5onsqkKz3UlQxkCrWyoE.roa (hash: GWq+Xl0/WKKnVSlGWmZzb5zCGVQfRPcWRz9+XrAIc/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:bb:9e:e7:aa:e7:53:e8:cd:4e:61:7a:01:c6:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2914e77de53b835c0e2150c6153b23f555ff6e64
Validity
Not Before: Aug 25 03:27:33 2023 GMT
Not After : Aug 26 03:27:33 2023 GMT
Subject: CN=80d8f4e2cd58beb90f89c3fb79200c150dd889e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:9a:76:e0:e0:75:44:27:9d:4f:99:a5:db:
18:1c:1f:b9:ee:08:f5:33:8e:43:9c:ab:33:30:d8:
ae:99:78:77:f0:6f:c0:86:7c:09:02:40:c8:a0:12:
89:34:98:5c:31:80:e9:ea:a7:17:80:db:1e:2f:55:
a1:d5:68:93:78:16:f5:07:8a:f6:89:21:ab:f7:7e:
50:43:4a:2b:ff:52:cb:f2:28:49:6b:63:77:7d:8a:
61:15:74:0a:f3:6f:79:9b:63:3f:d1:57:a2:c3:a4:
99:0b:59:01:c1:e3:6c:9c:fb:8e:6b:3f:73:4d:e1:
8a:7d:9d:04:b3:91:64:fd:e6:89:e0:5a:84:f0:9d:
aa:c7:ba:f9:bc:14:06:a1:55:d5:95:d6:b5:7a:2a:
b4:0f:c0:21:a5:d3:11:81:53:e5:81:04:e7:e5:1e:
af:c1:ac:be:85:7e:5e:21:6a:fd:6e:47:56:01:ea:
17:55:e8:59:5d:31:3c:0a:a8:aa:1f:a4:e6:aa:a0:
ac:a7:fe:b6:d8:42:94:01:98:2a:52:56:66:ca:c9:
c4:ba:7e:6f:b3:3c:e7:e9:91:76:6e:77:08:46:ff:
8e:b2:f8:ff:38:0d:b8:75:1b:81:28:58:29:eb:78:
96:ed:c2:05:32:3c:d1:f1:85:4f:62:79:0f:ba:de:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:F4:E2:CD:58:BE:B9:0F:89:C3:FB:79:20:0C:15:0D:D8:89:E3
X509v3 Authority Key Identifier:
keyid:29:14:E7:7D:E5:3B:83:5C:0E:21:50:C6:15:3B:23:F5:55:FF:6E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/94733d-1bb5-47ff-b405-8a811a86d2e8/1/KRTnfeU7g1wOIVDGFTsj9VX_bmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:aa:81:b5:9b:60:92:ce:ae:36:7b:a9:d1:f0:6f:0d:f4:cc:
48:df:73:02:22:eb:92:52:c3:ef:3c:fe:b5:64:71:f4:17:e4:
29:7f:28:8f:6e:34:00:cf:0e:d1:97:fa:7d:1d:0a:8f:02:6c:
8f:48:ad:81:5e:cd:ea:94:5d:78:6d:1b:82:19:45:77:d6:9c:
a9:5c:93:73:1d:73:3b:50:f9:1d:3e:08:03:0b:85:78:a6:79:
fc:78:d1:fe:1b:f3:b4:b4:3d:7b:a2:e6:65:37:bb:bb:34:47:
53:fe:ca:82:83:52:1f:52:4a:6d:2b:a9:17:81:6c:51:c7:2f:
08:ee:33:af:ce:77:a0:57:b1:4a:b9:9c:b9:8a:0f:f9:27:4c:
9c:25:bb:5f:5d:ae:2f:72:cc:8f:6b:e3:b1:01:0e:66:a4:cb:
da:6c:22:55:76:eb:a3:7b:00:52:a0:b6:b9:22:28:8f:87:45:
9f:48:44:9f:84:d6:c1:27:57:cb:a0:cb:81:84:01:77:c9:02:
9e:30:21:c4:cf:a4:a9:94:35:75:28:15:79:c5:c8:de:94:b4:
a2:76:77:74:bf:90:cd:f9:0e:8f:fd:42:71:61:1e:03:3b:00:
98:46:30:59:31:ac:e7:fd:fb:0e:a0:88:ea:8a:87:92:4a:3b:
de:2f:2f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYoqu57nqudT6M1OYXoBxgp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTRlNzdkZTUzYjgzNWMwZTIxNTBjNjE1M2IyM2Y1NTVm
ZjZlNjQwHhcNMjMwODI1MDMyNzMzWhcNMjMwODI2MDMyNzMzWjAzMTEwLwYDVQQD
Eyg4MGQ4ZjRlMmNkNThiZWI5MGY4OWMzZmI3OTIwMGMxNTBkZDg4OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEyaduDgdUQnnU+ZpdsYHB+57gj1
M45DnKszMNiumXh38G/AhnwJAkDIoBKJNJhcMYDp6qcXgNseL1Wh1WiTeBb1B4r2
iSGr935QQ0or/1LL8ihJa2N3fYphFXQK8295m2M/0Veiw6SZC1kBweNsnPuOaz9z
TeGKfZ0Es5Fk/eaJ4FqE8J2qx7r5vBQGoVXVlda1eiq0D8AhpdMRgVPlgQTn5R6v
way+hX5eIWr9bkdWAeoXVehZXTE8CqiqH6TmqqCsp/622EKUAZgqUlZmysnEun5v
szzn6ZF2bncIRv+Osvj/OA24dRuBKFgp63iW7cIFMjzR8YVPYnkPut6jKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDY9OLNWL65D4nD+3kgDBUN2InjMB8GA1UdIwQY
MBaAFCkU533lO4NcDiFQxhU7I/VV/25kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JUbmZlVTdnMXdPSVZER0ZUc2o5VlhfYm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NDczM2QtMWJiNS00N2ZmLWI0MDUt
OGE4MTFhODZkMmU4LzEvS1JUbmZlVTdnMXdPSVZER0ZUc2o5VlhfYm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NDczM2QtMWJiNS00N2ZmLWI0MDUtOGE4MTFhODZkMmU4
LzEvS1JUbmZlVTdnMXdPSVZER0ZUc2o5VlhfYm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6qBtZtg
ks6uNnup0fBvDfTMSN9zAiLrklLD7zz+tWRx9BfkKX8oj240AM8O0Zf6fR0KjwJs
j0itgV7N6pRdeG0bghlFd9acqVyTcx1zO1D5HT4IAwuFeKZ5/HjR/hvztLQ9e6Lm
ZTe7uzRHU/7KgoNSH1JKbSupF4FsUccvCO4zr853oFexSrmcuYoP+SdMnCW7X12u
L3LMj2vjsQEOZqTL2mwiVXbro3sAUqC2uSIoj4dFn0hEn4TWwSdXy6DLgYQBd8kC
njAhxM+kqZQ1dSgVecXI3pS0onZ3dL+QzfkOj/1CcWEeAzsAmEYwWTGs5/37DqCI
6oqHkko73i8vfQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:46:36 2025 by rpki-client