Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier: WNRHOTPIdgWP2UvREOj0i6W+Pty69JAN+QhBqP0shZE=
Subject key identifier: 21:26:BB:BD:4B:95:AD:A0:B4:39:F8:B4:C6:A8:B4:93:4B:4A:F8:31
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial: 0194BC3C951C9B27678EF2FF49F37021C880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number: 0670
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: CAl076IrqscApCMZ5981yjWVp0X1TqALSEijnrR2Jtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:95:1c:9b:27:67:8e:f2:ff:49:f3:70:21:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=2126bbbd4b95ada0b439f8b4c6a8b4934b4af831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:9a:1b:a5:b4:aa:9f:c0:e2:68:f9:0a:9e:
fe:07:a8:fa:b6:cc:06:c0:b0:05:5b:4d:65:c3:16:
1b:63:ff:e6:46:af:8e:cd:14:67:fe:2d:2d:27:07:
1d:2e:81:25:c7:7c:a8:93:7d:18:26:0d:c5:ff:20:
89:88:59:d0:02:15:2c:91:90:d7:0a:68:e3:96:b4:
de:61:7f:a4:34:2d:07:45:1c:d9:f5:38:9b:a7:95:
f4:86:e9:db:6d:43:a7:68:f5:67:af:5c:77:2f:28:
55:5f:3c:07:16:bb:d9:48:4b:87:88:f6:a1:82:a1:
2c:16:47:12:c8:09:80:88:c1:12:46:c2:eb:35:7b:
c8:13:79:cd:c9:7e:56:9f:3f:d7:73:9b:9b:a0:e3:
19:83:0e:8f:3b:9e:a7:6e:b0:ae:17:57:d9:3d:46:
73:1a:04:2f:49:0f:1f:ea:96:91:5a:6b:10:86:99:
ea:e9:9c:f6:a1:19:48:5b:10:7b:83:5d:7c:97:b6:
c9:1f:d1:1f:f0:a7:0a:f1:a1:5d:1b:77:63:f2:70:
ca:d7:5a:0b:9b:e6:7d:03:b0:7b:68:39:53:fc:37:
5f:f1:3c:83:c2:0d:ba:be:b7:f5:70:e1:3f:e2:50:
9f:e0:1a:02:b2:e9:24:62:6d:b6:83:8e:de:5d:bc:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:BB:BD:4B:95:AD:A0:B4:39:F8:B4:C6:A8:B4:93:4B:4A:F8:31
X509v3 Authority Key Identifier:
keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:08:94:07:90:27:73:f6:cd:66:67:29:6a:bc:d2:4c:3d:cb:
cc:14:af:4c:4a:d2:ea:36:16:e9:f6:5b:eb:b6:51:8b:32:b6:
75:b4:73:16:e0:18:b9:b8:a2:2b:92:e2:38:a1:fe:08:e2:ea:
e2:e7:e6:a8:98:19:96:91:0b:a5:59:52:13:18:32:1f:c6:b5:
63:ae:f2:14:43:94:2d:15:35:a4:57:e0:71:3f:66:9c:cc:7d:
13:ba:5f:af:c2:1e:e9:c0:70:60:c3:da:7c:23:29:ed:45:d5:
dc:8f:b7:28:16:c8:8f:e1:82:15:e8:52:b8:1a:de:a2:19:3e:
48:6b:98:7a:90:71:72:27:a2:2b:4a:81:87:be:70:62:be:f6:
c5:4f:91:f8:01:43:17:80:3c:a9:d2:2f:87:b5:97:9e:20:be:
d9:fb:0a:7b:30:b6:a9:23:d4:36:84:b9:57:1a:d9:1f:1e:44:
26:e1:78:5a:61:4f:8c:6d:01:76:d0:73:4f:9a:09:ca:f3:82:
70:b3:5a:ae:41:76:71:3c:a3:f7:7b:b0:b6:ba:fe:73:d9:c5:
d3:24:a6:be:15:94:11:4f:4a:43:64:4e:31:ac:17:6a:c5:a4:
88:32:5c:05:01:9b:c6:ec:d6:4c:07:1e:38:4b:17:0e:b2:5b:
a5:48:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:43 2025 by rpki-client