Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: fcRhfBy1NGsBpGje0kBu0ldWry4Uh4lafMKVgtev4lA=
Subject key identifier: 1B:D8:02:7C:2F:1F:5F:AE:3A:7C:47:D4:BB:A4:2B:E7:CD:86:D5:9C
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 0194BC3BC75CD805BAD863892A2CD1C26A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: EnIROIgyZ8xaf0MklpaXuVeYeU2L+cTt9x6aXHqfHNw=)
2: yGFlSDdiFlFUJBTzkBDJlODQZoY.roa (hash: 5kgFGMiEYqgnd4sbR3CvLQA6/mpT37R4CFK6/AUcK/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:5c:d8:05:ba:d8:63:89:2a:2c:d1:c2:6a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=1bd8027c2f1f5fae3a7c47d4bba42be7cd86d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:9b:00:e9:d2:c7:d4:7a:8f:8e:b7:e5:30:
68:47:07:f0:8d:6a:3f:23:62:2b:36:61:60:2d:96:
95:c0:85:b7:ff:8b:55:4d:93:2d:95:aa:45:f2:8d:
33:0e:b9:b8:e2:d2:e4:b6:fb:c6:7b:af:56:f2:36:
a6:49:f0:2c:07:58:46:bf:e2:e1:bf:a7:f9:90:e6:
a6:ea:91:bb:c6:75:0e:1a:25:bb:fb:2c:27:6a:4c:
a9:13:35:b5:84:b9:d3:69:b4:0a:c4:d7:f2:4f:64:
9e:2a:02:55:07:ef:a5:c3:25:c0:66:b9:6e:b1:7e:
80:bc:77:59:86:42:a8:4f:79:41:fb:4d:a6:37:98:
54:bf:f4:0f:9c:dd:68:17:40:6d:2e:40:5e:98:df:
3d:ec:b4:3e:70:ab:81:44:bf:95:41:bd:75:da:62:
83:a5:ff:f7:b0:4e:eb:17:12:5c:20:47:cb:bf:06:
74:40:41:9b:8f:3d:4e:b2:15:86:47:c8:17:6a:65:
bf:65:29:0a:4b:f1:9e:de:0e:56:25:f3:fc:06:94:
85:3c:7c:14:a1:be:20:27:b8:00:62:7c:22:74:87:
d0:a7:97:9c:19:25:6e:74:73:ae:46:d9:7d:4a:1f:
62:16:88:d7:f7:40:57:5b:3b:1b:f3:4b:77:b4:6c:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:02:7C:2F:1F:5F:AE:3A:7C:47:D4:BB:A4:2B:E7:CD:86:D5:9C
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:20:1b:50:4d:ba:9c:a1:a7:9f:8d:e8:94:5c:7a:4a:4f:f0:
66:20:1f:b2:f8:4a:e3:a3:f7:76:41:c4:bd:48:1d:73:04:f6:
48:6b:2f:9c:89:02:98:dd:ae:30:6b:0f:9a:40:7d:dd:9f:65:
f7:f0:6b:30:cb:ee:88:2b:40:80:7d:90:ba:03:8c:32:8f:fe:
8a:f1:3e:3a:bf:24:26:42:d9:2a:8f:a2:f9:4e:d4:4d:ff:a2:
04:74:1a:d1:36:bd:8b:39:28:cb:ed:6c:6e:81:5b:fa:d9:f1:
b5:b5:aa:d4:84:65:18:fa:db:e4:7b:91:a5:b5:4a:fc:7c:80:
57:9d:b9:dc:a7:07:29:3b:84:3c:29:59:db:52:11:81:0b:f5:
db:82:5a:c6:98:48:fc:2b:ee:47:c6:de:28:dd:c7:69:28:11:
ab:ec:44:71:d7:f9:01:1c:5b:34:0a:64:8d:84:c7:02:24:d8:
8b:04:e0:3a:03:d3:a0:36:b4:30:cc:21:e3:90:8c:57:6c:f1:
d9:02:0a:6f:e7:c3:7b:b9:43:88:98:5f:36:68:0c:a4:b3:38:
3f:fa:e3:76:be:23:50:f2:e5:ac:80:f0:f4:b4:46:c5:cc:46:
d5:9c:0d:d9:1d:df:6a:0e:6e:0d:a9:0a:fb:fa:5f:c2:a0:f2:
d0:52:82:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8dc2AW62GOJKizRwmoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjUwMTMxMTIwMDIxWhcNMjUwMjAxMTIwMDIxWjAzMTEwLwYDVQQD
EygxYmQ4MDI3YzJmMWY1ZmFlM2E3YzQ3ZDRiYmE0MmJlN2NkODZkNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg6bAOnSx9R6j4635TBoRwfwjWo/
I2IrNmFgLZaVwIW3/4tVTZMtlapF8o0zDrm44tLktvvGe69W8jamSfAsB1hGv+Lh
v6f5kOam6pG7xnUOGiW7+ywnakypEzW1hLnTabQKxNfyT2SeKgJVB++lwyXAZrlu
sX6AvHdZhkKoT3lB+02mN5hUv/QPnN1oF0BtLkBemN897LQ+cKuBRL+VQb112mKD
pf/3sE7rFxJcIEfLvwZ0QEGbjz1OshWGR8gXamW/ZSkKS/Ge3g5WJfP8BpSFPHwU
ob4gJ7gAYnwidIfQp5ecGSVudHOuRtl9Sh9iFojX90BXWzsb80t3tGxElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvYAnwvH1+uOnxH1LukK+fNhtWcMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSAbUE26
nKGnn43olFx6Sk/wZiAfsvhK46P3dkHEvUgdcwT2SGsvnIkCmN2uMGsPmkB93Z9l
9/BrMMvuiCtAgH2QugOMMo/+ivE+Or8kJkLZKo+i+U7UTf+iBHQa0Ta9izkoy+1s
boFb+tnxtbWq1IRlGPrb5HuRpbVK/HyAV5253KcHKTuEPClZ21IRgQv124JaxphI
/CvuR8beKN3HaSgRq+xEcdf5ARxbNApkjYTHAiTYiwTgOgPToDa0MMwh45CMV2zx
2QIKb+fDe7lDiJhfNmgMpLM4P/rjdr4jUPLlrIDw9LRGxcxG1ZwN2R3fag5uDakK
+/pfwqDy0FKCFw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:12:55 2025 by rpki-client