Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: QhR9dnD6Gpg9NVe5B4haHJAT7vmN2f/S6MKwASSaxGI=
Subject key identifier: A3:B9:7C:0E:AF:C4:C6:B2:F2:4E:CD:8F:08:0C:E3:66:30:4C:43:1A
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 0194BC3C9148A1B1382A6C4D2D633EDC521E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 0E
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 8u9hb0S_4Uuo5fYUwLVSXZK5rxM.roa (hash: 6iQilpXzVprtaKFu2A9AhzRE5Pgx6o9DaMAB494sBrc=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: TIGtazKcRRbYxbSNrvA1TptYng0OXuGkgAckerLT/hQ=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:91:48:a1:b1:38:2a:6c:4d:2d:63:3e:dc:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=a3b97c0eafc4c6b2f24ecd8f080ce366304c431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:a9:a2:eb:20:9f:f8:a4:0b:2d:ea:90:0d:
38:5f:b1:61:63:0d:67:93:bc:03:f5:45:68:d6:4e:
e1:be:f6:c8:9f:cf:8a:b6:e2:51:62:c0:5e:03:13:
4c:4d:4e:3e:91:b0:4d:54:72:cd:0d:c7:3c:84:b0:
ee:6b:92:d3:8a:de:39:46:7d:0f:7c:0d:a0:9a:65:
3c:69:b0:d6:c3:66:04:0e:ad:49:0e:9d:8f:16:30:
36:d2:d9:01:d1:a9:32:13:bc:ba:f4:42:4c:24:66:
6d:c7:73:22:2c:27:d8:b4:2a:4b:e0:a8:b4:a5:12:
7f:0e:28:72:fa:5f:9c:22:fd:7e:e8:64:78:7c:ec:
de:aa:43:1a:5b:79:c3:56:c2:2e:41:a0:bd:b4:f6:
fd:a2:97:a6:14:2a:4a:7a:2d:fd:d7:e9:12:14:a6:
a2:3d:6c:cc:88:b6:cf:3e:63:cc:4d:3b:07:13:bc:
74:90:78:99:75:22:be:b9:a6:3e:9e:d6:77:84:22:
42:04:ea:db:39:01:e9:81:94:1a:f9:4d:b4:2c:c0:
f6:0d:1f:07:67:f0:2b:94:67:bb:a8:fd:8f:29:06:
03:9e:0d:22:f3:15:98:ee:77:4f:9f:ca:4c:b3:3b:
9c:98:cf:70:ac:06:56:0c:f8:7e:c0:be:6b:ba:64:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B9:7C:0E:AF:C4:C6:B2:F2:4E:CD:8F:08:0C:E3:66:30:4C:43:1A
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:26:10:13:4e:2f:1d:0f:29:d1:ad:ca:5c:13:fa:ef:77:1f:
a4:ca:19:22:da:8c:1a:c2:bf:00:cb:fb:14:7d:5d:25:3d:b3:
61:94:55:b5:30:ed:a0:7b:5a:61:8e:10:a0:4f:df:d4:b5:6a:
81:c5:ec:66:76:3d:40:7b:04:65:0d:bd:f0:8a:85:ae:e4:5e:
f7:c5:8d:d2:f0:57:72:b7:f5:58:6b:df:36:62:f2:6a:cf:1b:
77:91:bd:4a:f2:00:16:71:13:ee:4b:4a:5b:20:c7:4c:35:16:
aa:92:a6:15:4c:11:01:c7:8a:7c:d0:e8:69:6a:c9:56:f1:3c:
ac:ab:b1:f5:0f:cf:ae:99:9d:72:bb:fa:39:b0:5e:95:18:1d:
66:dc:a2:e0:5c:9d:05:c0:ca:03:2d:68:b7:04:35:09:06:b5:
d9:d9:b7:f5:d5:81:74:9f:5f:db:9e:17:53:b4:4b:4e:32:dc:
85:d2:f4:f2:7e:59:3c:72:e6:d7:af:ca:7e:53:29:62:00:3d:
41:4a:2d:cd:02:d1:45:8d:71:02:38:ac:41:8b:07:cd:49:67:
f5:2b:2c:f7:01:9b:e9:bb:5c:f8:3f:fa:99:a4:bf:28:a0:1c:
59:f0:83:51:6e:72:de:6d:83:eb:0c:46:64:09:14:29:ce:c5:
73:60:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:36 2025 by rpki-client