Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json)
Hash identifier: TW3Bg3CV0t9SwDpGOCeEv6h+eG9/JGDfD702K+uDUqQ=
Subject key identifier: 3B:83:95:0F:1C:76:D3:58:5A:33:30:AE:7B:18:0C:06:E1:93:51:25
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 0194BD174B1E53EA27BA47F7A2068205CB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
Manifest number: 1166
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 1ibpJfSu5zvmElDRsm3yBPA2Psc.roa (hash: fl2TXrWlprslHDoqKeFpyUnoLUsON1oTzkxdU0IwAjQ=)
2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: n9sP1/tGhq3p2LU+mS229QgFZOWKZY+dHsgXRGSSeGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:1e:53:ea:27:ba:47:f7:a2:06:82:05:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=3b83950f1c76d3585a3330ae7b180c06e1935125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:c2:91:3e:48:2f:d1:77:f2:42:ac:be:81:
7c:8a:ed:c7:4a:9c:ae:ab:4a:9e:96:88:d6:d6:79:
d2:c5:52:33:47:c5:00:77:50:99:38:f5:92:c1:af:
20:34:40:47:5a:31:1d:54:02:de:8d:70:95:0d:7b:
82:dd:29:09:f4:53:ad:37:56:9b:7f:99:f5:bd:41:
9e:7f:26:d1:c2:e2:33:c7:cb:99:b4:d3:80:1f:a0:
97:f3:02:0a:6e:e8:df:ac:67:a9:ff:d9:21:e6:0b:
30:28:89:b7:06:72:6e:ab:8f:e1:3e:e7:90:0e:9a:
d9:38:fe:cc:a0:50:35:fc:82:0b:85:76:ce:82:8c:
3a:a7:17:22:0e:7e:87:8f:00:db:df:01:eb:fb:26:
b9:fc:31:4a:e6:af:69:db:28:41:28:4e:14:4b:34:
bd:85:cd:b9:0f:76:9e:64:7c:4b:8a:02:25:0c:b1:
e8:50:49:cc:57:65:d0:72:fa:fa:11:69:a7:50:ad:
47:b6:82:67:1c:5c:7d:ef:f3:5a:08:00:67:00:e9:
be:38:c2:a8:8f:1c:b9:58:3f:8d:32:47:30:61:3c:
21:68:25:30:e5:cf:c2:01:30:3d:d9:4a:29:7e:1f:
64:79:3b:73:14:a8:a9:b8:ba:b5:23:48:82:fb:b8:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:83:95:0F:1C:76:D3:58:5A:33:30:AE:7B:18:0C:06:E1:93:51:25
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4a:94:75:e7:95:1c:7b:3a:6d:28:fb:76:1c:77:63:58:d1:
f5:79:5c:a8:b6:1b:0b:d3:57:fb:f5:4e:aa:2c:30:c6:f0:1a:
19:e1:88:e6:25:07:96:fb:c8:24:ef:d3:48:28:d8:99:e1:62:
34:35:38:a2:4e:d8:94:97:3f:83:0a:56:22:67:2d:e8:44:59:
25:dc:7c:a6:0b:8b:5d:d8:e8:18:04:28:8a:71:3e:a3:35:cd:
af:d1:22:ff:20:94:b9:66:ce:ec:21:87:ab:ac:7e:68:aa:f8:
d4:45:4f:b0:a4:02:b1:db:a3:a3:36:ab:60:e3:b4:10:1d:6b:
3f:a0:7b:73:87:1c:35:fa:23:e0:66:ea:32:e3:03:9c:50:9f:
b8:e1:f5:be:c3:23:8f:f9:95:06:6a:da:88:09:61:68:a1:38:
5b:98:9f:73:87:5c:3e:f8:a8:73:63:83:6b:7d:a7:d6:28:aa:
ec:1d:99:df:c4:2a:14:a9:0d:10:eb:b8:e0:43:56:d7:67:c8:
ed:4a:74:25:69:03:c4:a6:ce:f4:1c:e5:ea:ed:0c:d5:5d:e7:
b1:b4:7a:e6:22:dc:92:19:47:4a:a0:c1:52:c5:a1:ca:2f:94:
d6:79:6f:6e:3f:57:8a:06:1c:82:d4:3a:71:74:e3:21:9a:a1:
f2:aa:35:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:38 2025 by rpki-client