Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: EoFBDAf+FEVQJF+c+qZKBb6ytaoQy0oO2YLSFiOP4lI=
Subject key identifier: D8:13:C0:FD:F9:B7:9F:1A:6C:29:A1:F6:F3:7D:0B:56:41:33:B7:4E
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 0194BC73179EC27B07F78744B56B5B5DA0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 113D
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: rX7TMVBOwqEamWg8PSwn0FwKh2vOOtWSySpLG9rRzzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:17:9e:c2:7b:07:f7:87:44:b5:6b:5b:5d:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=d813c0fdf9b79f1a6c29a1f6f37d0b564133b74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:18:f0:cb:18:d2:58:71:b5:ba:2b:c1:85:
04:ae:3f:8d:a1:36:ef:33:68:3c:ac:f6:bc:94:34:
01:05:88:7d:40:0a:a1:41:2b:dc:a5:2d:39:1d:65:
78:b1:05:2b:c8:b2:75:9a:bc:0d:60:03:b5:b2:6d:
49:95:f3:56:c3:d5:0f:ad:05:76:9e:48:5a:1f:9a:
b5:00:8a:be:8f:0e:37:2b:2f:22:5c:00:b3:78:72:
ad:35:76:c4:f6:28:d3:5f:21:5d:f8:95:83:52:d7:
58:40:fc:8e:a7:10:33:63:d8:fb:7a:8e:6f:f1:96:
de:ec:e5:ee:54:6d:b6:bb:78:39:53:33:c3:95:ae:
56:db:7e:47:65:8f:f5:63:00:6d:94:90:07:0c:d3:
4a:2a:ef:7a:43:f8:3e:37:fa:1c:80:84:b1:ad:da:
10:a7:64:fd:ee:93:dc:4d:71:1e:fb:da:16:5b:44:
cb:18:39:37:b0:86:77:e5:09:1b:38:4b:96:35:c2:
aa:ad:9d:e7:27:b0:bc:d3:7c:d0:82:7b:7f:67:d8:
43:9e:b7:b5:5a:77:6e:33:be:81:db:b4:f3:fd:db:
2e:b1:01:ca:ce:24:58:a8:6b:98:a2:a2:48:ab:ed:
55:72:e0:d3:98:c1:1c:6a:c5:44:44:96:52:37:12:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:13:C0:FD:F9:B7:9F:1A:6C:29:A1:F6:F3:7D:0B:56:41:33:B7:4E
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b6:c4:50:63:81:2d:30:57:41:0a:d0:9e:1d:0a:39:c1:cc:
8f:44:16:4f:30:ab:89:2d:6c:5d:0a:75:ad:65:21:c6:f3:32:
d9:4e:7a:6b:cd:d1:15:cc:64:83:a6:19:34:c6:1b:c4:ff:90:
ef:c3:bb:f3:b2:6a:8b:3c:a0:3e:77:fb:47:32:b1:05:03:41:
d9:3b:3a:72:e7:04:2e:10:c5:a5:86:92:39:f7:4e:29:51:28:
ff:ef:d3:29:ea:1d:a0:6a:84:99:db:f2:fd:20:b9:6d:07:88:
d5:88:f6:32:fa:82:a3:26:6b:f9:f1:d7:0d:3d:ec:12:52:5f:
f8:a7:12:6e:d9:0c:a1:c3:10:84:9f:32:ea:3e:b6:ac:f6:ae:
51:f1:c0:5e:32:10:51:e4:1a:e6:5a:94:61:25:0c:84:5b:67:
62:a8:8e:68:08:a7:33:ec:41:6a:66:bb:c5:14:e9:84:0d:01:
e9:ce:28:6b:d9:ea:fa:11:87:09:b0:67:6e:69:dc:e9:89:4d:
fd:2e:b2:68:64:13:56:2a:39:1b:5a:60:d7:af:70:97:02:8d:
bc:e8:85:0d:43:89:d4:a0:50:f4:03:2d:c2:97:50:a6:93:bd:
56:11:55:29:9c:0c:17:fd:6c:da:aa:d8:2c:38:2c:43:1a:a1:
2f:40:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:08 2025 by rpki-client