Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/640370-e21b-408e-8935-27891484d985/1/KH97Jo822TFYldOyCDdzEHGanUE.mft
File: KH97Jo822TFYldOyCDdzEHGanUE.mft (raw, json)
Hash identifier: hIcrXiNnmyMn9OeabvEpXWg7pS9PDnzIeNdEBr0dXH8=
Subject key identifier: 33:B4:F2:34:D5:29:42:E3:06:A6:1E:38:79:5A:EE:22:DC:E7:FA:12
Authority key identifier: 28:7F:7B:26:8F:36:D9:31:58:95:D3:B2:08:37:73:10:71:9A:9D:41
Certificate issuer: /CN=287f7b268f36d9315895d3b208377310719a9d41
Certificate serial: 0194BCA9A5BF5FE114BC17DA8F2495EB05F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH97Jo822TFYldOyCDdzEHGanUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/640370-e21b-408e-8935-27891484d985/1/KH97Jo822TFYldOyCDdzEHGanUE.mft
Manifest number: 0B83
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: KH97Jo822TFYldOyCDdzEHGanUE.crl (hash: kUvJWOG4RGdSlqVNBk+poU95jLVvPZ/jmQxLrWteL2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a5:bf:5f:e1:14:bc:17:da:8f:24:95:eb:05:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287f7b268f36d9315895d3b208377310719a9d41
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=33b4f234d52942e306a61e38795aee22dce7fa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:7f:1e:a5:04:a3:26:1f:18:cd:cf:84:8b:
34:88:b2:95:4e:2f:39:98:70:eb:0e:0d:d6:9f:6c:
68:a3:98:7f:38:3c:e3:1b:69:05:cc:68:b1:d8:45:
46:31:21:6e:b0:2b:64:b9:69:ca:62:76:4e:8c:84:
ec:6e:b2:63:12:20:5f:97:a3:90:98:e5:65:71:8c:
00:18:74:1a:b1:f4:4f:b8:d3:6d:02:85:21:65:b4:
e5:78:9f:b7:88:58:ce:52:8b:76:50:5e:56:55:48:
af:a6:79:a4:73:37:5c:40:1d:1c:04:e4:db:3f:f8:
4b:b9:10:6b:f9:2f:73:d0:62:c0:da:cc:31:4a:f6:
d2:97:f5:16:d3:03:d7:9c:51:2a:61:dd:ac:3c:e1:
80:09:5e:0e:c7:f0:d1:ee:b0:eb:63:b2:4e:a5:08:
61:1a:38:7d:11:b9:4d:37:14:ca:67:b0:ed:b8:2e:
c2:e2:99:35:72:e3:ed:a5:19:c5:55:fb:b3:9a:cf:
e2:e0:a6:2a:ac:90:fc:a4:3e:42:70:1f:f3:fb:c3:
75:67:91:ed:8a:aa:2f:6e:ba:73:ea:5e:9e:d1:47:
c6:86:d0:84:eb:33:89:1a:28:f5:82:09:6c:41:bf:
1f:97:35:c7:cf:6d:1e:5d:38:91:12:7e:71:a5:29:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:F2:34:D5:29:42:E3:06:A6:1E:38:79:5A:EE:22:DC:E7:FA:12
X509v3 Authority Key Identifier:
keyid:28:7F:7B:26:8F:36:D9:31:58:95:D3:B2:08:37:73:10:71:9A:9D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH97Jo822TFYldOyCDdzEHGanUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/640370-e21b-408e-8935-27891484d985/1/KH97Jo822TFYldOyCDdzEHGanUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/640370-e21b-408e-8935-27891484d985/1/KH97Jo822TFYldOyCDdzEHGanUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:27:01:a7:22:63:9b:ee:1c:ab:ad:15:16:3a:26:6d:42:f4:
63:c3:60:03:bc:b4:42:ed:49:a7:bd:5d:19:61:40:f7:b0:51:
7f:ad:bb:af:04:ab:66:8f:78:ce:17:48:9e:df:6c:96:5d:82:
ce:47:24:59:f7:27:fa:c5:a6:0d:e1:a3:9e:8d:7d:3e:5a:b3:
c8:61:61:17:6d:65:d2:15:99:0a:13:d7:cb:e4:5d:1e:de:e0:
fd:ec:f5:fd:5e:c3:57:99:1d:24:e0:39:05:f6:29:8c:e6:5d:
59:2e:d5:1c:68:79:e8:4a:8c:f9:5b:98:08:49:66:b6:a3:ba:
c9:aa:d2:a4:bf:28:f3:10:4a:af:0b:4f:bf:31:7c:8e:e0:9b:
a2:a4:20:0f:85:84:1a:8f:c4:fc:43:ff:72:41:5c:32:40:96:
07:67:aa:69:14:25:84:85:60:8a:72:ed:f1:85:22:af:dd:10:
69:64:d5:1f:7f:53:6c:be:bc:06:ff:f8:3e:e8:ef:66:78:ff:
8f:47:fc:80:b8:de:68:af:66:eb:5c:8c:ee:b4:b4:32:d8:81:
10:79:ca:05:2a:af:b4:b5:3b:ac:d0:77:42:aa:b7:97:63:30:
10:3c:13:e5:35:e1:23:02:8f:a5:87:fc:47:01:38:17:4b:64:
10:ba:8d:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaW/X+EUvBfajySV6wX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4N2Y3YjI2OGYzNmQ5MzE1ODk1ZDNiMjA4Mzc3MzEwNzE5
YTlkNDEwHhcNMjUwMTMxMTQwMDIyWhcNMjUwMjAxMTQwMDIyWjAzMTEwLwYDVQQD
EygzM2I0ZjIzNGQ1Mjk0MmUzMDZhNjFlMzg3OTVhZWUyMmRjZTdmYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDB/HqUEoyYfGM3PhIs0iLKVTi85
mHDrDg3Wn2xoo5h/ODzjG2kFzGix2EVGMSFusCtkuWnKYnZOjITsbrJjEiBfl6OQ
mOVlcYwAGHQasfRPuNNtAoUhZbTleJ+3iFjOUot2UF5WVUivpnmkczdcQB0cBOTb
P/hLuRBr+S9z0GLA2swxSvbSl/UW0wPXnFEqYd2sPOGACV4Ox/DR7rDrY7JOpQhh
Gjh9EblNNxTKZ7DtuC7C4pk1cuPtpRnFVfuzms/i4KYqrJD8pD5CcB/z+8N1Z5Ht
iqovbrpz6l6e0UfGhtCE6zOJGij1gglsQb8flzXHz20eXTiREn5xpSkkrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO08jTVKULjBqYeOHla7iLc5/oSMB8GA1UdIwQY
MBaAFCh/eyaPNtkxWJXTsgg3cxBxmp1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0g5N0pvODIyVEZZbGRPeUNEZHpFSEdhblVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NDAzNzAtZTIxYi00MDhlLTg5MzUt
Mjc4OTE0ODRkOTg1LzEvS0g5N0pvODIyVEZZbGRPeUNEZHpFSEdhblVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NDAzNzAtZTIxYi00MDhlLTg5MzUtMjc4OTE0ODRkOTg1
LzEvS0g5N0pvODIyVEZZbGRPeUNEZHpFSEdhblVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACcBpyJj
m+4cq60VFjombUL0Y8NgA7y0Qu1Jp71dGWFA97BRf627rwSrZo94zhdInt9sll2C
zkckWfcn+sWmDeGjno19PlqzyGFhF21l0hWZChPXy+RdHt7g/ez1/V7DV5kdJOA5
BfYpjOZdWS7VHGh56EqM+VuYCElmtqO6yarSpL8o8xBKrwtPvzF8juCboqQgD4WE
Go/E/EP/ckFcMkCWB2eqaRQlhIVginLt8YUir90QaWTVH39TbL68Bv/4PujvZnj/
j0f8gLjeaK9m61yM7rS0MtiBEHnKBSqvtLU7rNB3Qqq3l2MwEDwT5TXhIwKPpYf8
RwE4F0tkELqN4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:24 2025 by rpki-client