Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: 5OMSi1PQi5DpbeuZlw3fV1d8uCDtNwlp1doCtsYRbp8=
Subject key identifier: 1F:A3:B8:94:B8:A4:BD:F4:48:8A:A1:97:2A:D5:21:2B:A1:BB:27:2B
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 0194BBCE0EB163E8910322D449C4699A855F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0874
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: HlpYPKfUTSJ7pDq2oQziu1OJN70.roa (hash: 2/lnsP1apTOPlsNH0YhFprUwFbQM2G9j3yZLF5vZFt4=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: grEdWs6JI7sdg9uWvLpcbQ9ZfKepRghkwMTyr7wcGPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0e:b1:63:e8:91:03:22:d4:49:c4:69:9a:85:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=1fa3b894b8a4bdf4488aa1972ad5212ba1bb272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:89:84:07:b6:cb:96:4e:58:76:a2:8f:20:
36:55:f0:0c:13:68:2d:0f:3c:d1:5a:be:8b:47:0b:
1a:d8:bd:74:93:5b:c4:3b:8b:f1:95:09:0e:20:9c:
84:9a:96:74:a6:61:55:3a:ec:f6:f4:aa:b6:71:7b:
ef:ef:9f:1e:f4:3b:13:9b:17:26:f2:83:d5:4a:f6:
0a:07:6d:1c:c7:da:30:e4:27:48:9b:da:eb:f4:5f:
27:14:86:b1:29:5c:18:50:d5:0e:cc:6e:c2:00:d2:
98:71:46:28:bc:24:39:c8:dd:23:59:56:2b:69:48:
c0:11:c4:83:4a:5a:3f:e1:8b:ac:4d:a8:57:7f:3a:
c2:83:07:be:23:d8:47:34:4e:de:79:28:1c:5d:47:
a2:7c:49:16:2a:b6:b8:38:21:48:e5:ce:b5:b0:0c:
fe:fc:3f:48:71:57:3c:0e:e0:f5:7b:1b:33:47:75:
41:a4:8f:27:92:55:eb:ea:af:4c:da:f1:95:31:ea:
16:8b:58:7c:3c:86:48:f6:fc:ea:7b:9a:82:cd:89:
50:0c:f6:24:9b:ec:c3:cc:c8:22:6a:8f:e5:c3:ae:
e8:a6:cf:1f:01:5a:ce:3b:6e:da:e2:a2:f7:05:27:
26:cd:cc:06:75:d7:f5:cb:b9:7f:43:50:fb:d7:08:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:B8:94:B8:A4:BD:F4:48:8A:A1:97:2A:D5:21:2B:A1:BB:27:2B
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:86:e2:3f:4e:c0:be:5a:9b:e0:62:1c:e2:10:e7:a6:c2:6a:
44:fe:4d:51:98:b5:86:a5:24:52:d0:fc:2f:3e:23:cc:de:25:
7e:59:5c:c5:32:c1:79:22:bf:5f:95:76:85:73:37:2a:11:0f:
72:de:d0:21:a2:08:15:ca:03:93:03:a8:74:15:f8:c4:50:4a:
33:7a:4a:29:6b:8b:00:61:06:4a:f7:4b:0c:a0:18:00:c7:15:
7f:ff:01:c8:df:85:ad:51:d7:78:2e:b0:fa:31:c5:c9:f9:56:
c1:be:be:52:6a:64:bf:bd:fd:14:c3:93:2c:ca:65:62:53:1e:
fa:8f:72:36:aa:15:d4:50:ef:5d:3b:e9:f6:c2:86:d5:9b:32:
02:fb:03:1a:c8:2e:32:e2:85:64:b4:e8:34:9d:fd:a2:3b:91:
75:57:13:dd:e8:02:9c:2a:78:d8:9a:b9:b0:2a:b6:74:f9:5f:
c3:a0:79:24:89:57:2b:b4:b3:82:b1:2f:7e:f3:65:95:78:38:
2e:c4:07:3f:2e:84:22:34:77:ea:4d:d4:18:1b:70:d0:98:8d:
8b:94:67:fc:72:c4:a9:1d:90:12:60:07:e9:03:65:e7:d6:fa:
15:89:dc:22:98:ef:79:cf:3d:c7:13:40:32:fe:b4:fe:53:c6:
54:05:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:28 2025 by rpki-client