Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: 4OTEuUFyUSYbYPNpPoCloekrqtiMsliZafHQmohEPMU=
Subject key identifier: EF:CE:0B:04:8A:4E:90:2B:A8:A5:12:4F:60:7D:73:DD:DA:6F:10:32
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 0194BCA9718854E8302418630CA4601942A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: OgSAwiQJ34jKQCWGSQeOzSRdcLkuxJ+9drcu2UkS1S8=)
3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:71:88:54:e8:30:24:18:63:0c:a4:60:19:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=efce0b048a4e902ba8a5124f607d73ddda6f1032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:6a:a5:78:ec:13:06:89:b4:d1:f4:d6:46:
05:83:7d:f2:0c:90:f9:af:cc:71:36:00:f6:df:ab:
e5:db:b9:64:83:2a:b9:9c:1d:bb:84:fc:94:64:84:
8a:ba:12:61:c9:0f:d7:9e:b5:f1:30:2f:3f:76:ac:
2a:4d:70:8c:7a:ad:cc:55:16:ab:3c:19:9c:d9:47:
a9:aa:5b:9c:5f:ba:a2:f1:27:54:a8:67:c8:27:d9:
4e:42:65:3f:44:f7:d5:cb:d5:26:6a:44:13:db:75:
5c:6e:00:3c:5f:80:2d:3a:08:b6:cb:b1:49:82:8e:
a9:fe:0c:75:b7:4e:1b:7c:67:f8:1c:7d:78:d9:41:
ed:53:e7:24:a6:0b:fd:62:d4:07:1f:7a:db:ab:b0:
e5:66:71:43:66:16:b9:88:08:15:37:63:96:77:ff:
58:43:c2:b9:62:42:aa:68:d1:76:94:26:38:47:65:
10:0b:09:56:a1:4e:f7:86:93:74:74:b3:85:79:5e:
5f:15:0b:41:79:62:60:7d:f3:ed:8a:d4:13:4c:fe:
53:8e:c9:2a:e4:67:da:a7:5d:6c:8d:bd:3c:e5:af:
f9:b0:02:2a:a1:0f:92:49:e3:cc:e7:91:76:21:6e:
f7:86:23:87:4e:24:b4:68:f3:9d:41:12:69:53:82:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:0B:04:8A:4E:90:2B:A8:A5:12:4F:60:7D:73:DD:DA:6F:10:32
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:23:b2:07:ac:8c:90:16:9d:20:10:84:d6:ba:53:cf:ad:
4b:b3:79:4e:2b:75:ca:d8:f5:35:24:e1:82:d7:1f:d4:72:60:
4f:01:94:65:b4:74:2a:7b:f2:ee:9d:2f:d3:c3:ce:9d:59:ea:
2a:aa:17:b6:02:9e:31:13:52:0d:6a:47:e7:ad:d9:8b:96:fd:
5f:b9:10:24:d6:8d:20:9b:53:43:6c:f4:08:01:96:12:56:92:
16:85:e1:70:55:94:78:13:0c:5c:43:b4:32:97:8a:f0:77:ac:
65:e1:44:1e:c4:73:4c:25:5f:ff:c4:d1:17:24:71:fa:80:62:
f0:41:cb:0b:7a:e5:7a:86:d4:8f:50:ad:65:4c:bb:d8:d5:86:
06:40:77:c2:d5:60:34:a7:fe:42:1c:f0:bb:ce:3d:d7:ef:87:
e9:ab:d7:1d:25:2d:82:16:d8:e6:79:a7:f8:5d:03:a5:91:14:
f5:57:d8:69:71:a8:21:04:87:a1:59:49:9b:bf:8a:dd:11:81:
b4:1a:18:31:51:15:63:e4:f8:8d:ca:c4:b0:56:c9:85:06:42:
46:80:5d:74:f7:a2:b7:42:a5:45:8f:dc:85:39:1a:0c:97:31:
ec:0b:6c:01:c9:58:b6:f5:d0:8d:6d:bd:66:d8:69:40:aa:1a:
8e:7e:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:27 2025 by rpki-client