Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: 7TsYpcKZNlyI6Mziz6hKXzl1yCtwyYbPVTQpkglU1nk=
Subject key identifier: B1:50:61:FB:CB:B1:10:DD:D0:3B:4B:38:E4:D8:20:81:A4:B8:AF:58
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0194BCA99F3EB41D285453AC7A813ACACA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 0E6D
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
2: gxWWshLVL78MLbUOGS_UTSmDxeY.roa (hash: G/YwVFA1eLZG30BPIX1DOxGfW057e/H/rKZfMewGrbc=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: POFIFlVZn4/AIfHupHj3RD/V4ngKvj9Z84UxZvQ4uvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9f:3e:b4:1d:28:54:53:ac:7a:81:3a:ca:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=b15061fbcbb110ddd03b4b38e4d82081a4b8af58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:18:eb:c8:37:d5:ec:4b:c3:1c:31:a8:9d:
99:b3:7d:c7:6d:43:34:7f:35:39:7c:61:9b:8c:15:
34:cf:42:7a:3a:48:fc:bd:b2:bd:f0:b7:1f:94:96:
32:b2:36:c0:28:4b:29:0a:62:e1:e4:13:4e:bb:c6:
b8:31:53:bc:1e:1b:3f:06:04:f7:20:82:f2:c3:80:
7c:cf:ce:47:dd:a1:5e:47:3e:81:54:56:df:6e:c9:
bf:3c:11:07:4d:13:5f:af:7b:57:90:65:85:c0:61:
a4:0a:f8:a2:7b:27:b6:b0:90:38:5a:6d:db:fa:13:
70:e2:e5:ce:32:cc:23:17:3c:79:4a:1e:f3:f8:7a:
e3:db:db:69:c2:1b:7a:38:a1:ec:15:41:ed:4a:9b:
11:77:a9:d5:4f:7a:84:bf:5b:d9:58:ff:f6:9f:6e:
a5:d9:ea:e4:cc:8b:b5:7d:80:85:c2:c6:6a:bb:c1:
3e:3c:8e:33:26:95:31:70:ae:ac:f4:98:1f:7e:b4:
9e:39:17:31:76:c8:0e:67:56:76:57:07:a8:58:0d:
b0:75:46:9f:d2:83:3d:30:af:de:80:9d:5c:5c:de:
10:54:d0:45:50:00:ad:81:b5:37:87:ca:b5:d3:1b:
d7:3a:1e:ad:22:59:b8:f3:3b:02:0b:e8:90:e5:b2:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:61:FB:CB:B1:10:DD:D0:3B:4B:38:E4:D8:20:81:A4:B8:AF:58
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:a0:e9:7d:8c:3a:94:cc:24:f8:29:a2:fc:c1:83:69:f7:
1a:b7:f7:e4:c0:2d:a4:11:14:bc:b6:bc:71:e4:b6:f7:08:f7:
f5:f9:ba:27:76:05:48:30:59:28:4c:53:48:fc:6f:7e:03:fe:
7b:6d:a3:a6:31:31:fb:ae:54:fc:17:a6:c0:d3:9a:65:69:1f:
7e:c7:60:9b:48:50:97:87:8e:98:86:4c:c5:a0:a5:7f:11:7d:
8c:34:1a:e3:e4:c9:62:66:13:e8:8c:ff:76:56:f2:81:94:10:
7c:d1:9b:5e:1d:a6:5c:cd:a0:58:92:91:8b:87:e5:6b:c9:f6:
e0:94:a1:ca:12:da:61:2c:ac:7a:a7:29:bc:f5:ed:ec:79:80:
3b:f0:5a:9f:e4:f2:91:38:87:31:68:a1:2a:b3:10:73:53:18:
36:6b:6b:b4:55:fe:29:31:7c:bc:00:8e:79:fe:47:dc:21:a2:
b4:51:66:a7:58:bf:d1:39:5f:e1:2e:6b:2e:99:99:d5:c6:61:
02:43:46:61:cb:35:02:db:91:3b:4f:3a:f2:9d:21:87:d9:c6:
d7:d2:77:07:e2:91:59:86:e1:78:6f:9c:d1:87:0f:a2:01:cc:
16:cb:8a:5d:f1:7f:5d:83:20:0b:3c:0c:70:04:b8:04:4a:b1:
d7:03:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:34 2025 by rpki-client