Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: KN3bxDk0Qu+OWxWUjg0g0x/fiU8WfYvst7QatH6jhLc=
Subject key identifier: E2:F5:2A:A9:05:32:3E:60:8F:61:AD:1A:FD:22:65:1C:A4:76:53:2B
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0194BBCE4D0F358A6CEF6665119D5829E53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: aoEYFrCcSiRJoW+Gr6v+H8Fgx5BqeyyntZFvMvzw+rA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:0f:35:8a:6c:ef:66:65:11:9d:58:29:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=e2f52aa905323e608f61ad1afd22651ca476532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:91:2f:dd:04:6e:5c:a4:5e:2d:b5:c9:04:
c4:53:de:e8:89:d8:6e:e6:f9:58:23:a4:26:71:17:
e8:2e:a6:27:dd:0d:2f:d8:c5:9b:46:2d:de:a4:d8:
1c:77:f7:67:2a:94:4a:0f:da:77:9f:cd:5d:a4:3e:
91:ee:84:6e:0a:ae:f4:09:0b:91:a7:74:ac:b2:91:
71:c4:b3:f4:8b:08:6a:b4:af:02:80:5d:f4:19:80:
4e:f5:d9:e0:98:5b:34:40:af:6a:53:9a:98:c9:49:
70:8c:f3:d5:07:6a:db:16:40:63:ed:83:3a:c5:94:
b0:fa:e8:9f:4e:e8:1f:28:cf:d9:83:56:14:11:62:
6b:d9:0a:eb:fc:ce:b0:d4:e8:db:18:b2:7c:a0:93:
62:67:d4:05:54:c9:c0:3d:eb:4f:02:7e:f7:8f:a4:
92:8d:80:53:73:45:d5:f2:7e:fe:63:81:4a:44:bb:
b2:53:98:97:bf:61:a4:29:9a:98:7b:3e:56:ad:d0:
b7:9d:d2:ea:7a:0f:93:e5:2a:0a:1b:82:6b:cb:af:
f0:6a:22:99:d1:b6:1e:a0:d5:8d:73:e6:c8:60:08:
6e:86:ea:18:cb:c0:b0:5e:95:e4:04:0b:02:f7:ed:
c2:b7:85:4d:de:06:f8:94:30:2d:a5:e3:b9:47:5b:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:2A:A9:05:32:3E:60:8F:61:AD:1A:FD:22:65:1C:A4:76:53:2B
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:04:bc:c2:bc:9d:97:22:bf:00:f0:da:28:1e:cf:10:51:fd:
c4:d0:7c:08:a3:03:58:2a:d5:56:75:11:6b:c8:03:ec:86:89:
7f:e1:6b:ec:04:34:e5:0e:32:a4:f4:04:36:d0:bf:9d:5e:d4:
6d:b0:65:bf:45:19:fe:4a:55:9e:99:22:34:3b:3e:ce:2e:9e:
7a:21:a4:b9:08:da:86:3e:0e:bf:aa:a6:48:d9:a8:09:a8:6a:
2f:3c:45:e8:b4:4d:cf:2d:ce:6f:0e:ad:2c:ea:d9:be:79:74:
e3:46:10:d6:48:2a:d9:0a:58:59:54:d3:b1:5e:f4:9b:48:4c:
d6:00:1d:c2:bf:65:51:ab:7a:77:c5:63:34:41:32:bd:76:8b:
4a:ef:08:8a:70:f3:45:71:ca:97:49:b7:e1:bf:0e:d4:8a:a9:
f3:ac:4d:8c:8b:20:a4:a5:6a:3a:df:d8:72:14:9a:77:1d:f5:
54:16:89:e4:3d:c0:2f:85:32:1d:dd:fd:70:aa:7f:79:d7:cd:
78:ee:d6:7f:e5:ae:03:eb:6b:3a:24:26:82:c0:a7:7f:6f:50:
67:d0:cf:a0:26:99:5b:ab:6a:ff:54:4a:03:93:19:ba:55:bc:
68:f1:4e:49:2c:95:16:a3:39:3c:bc:12:bf:97:ef:4d:ea:12:
94:fe:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:09 2025 by rpki-client