Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: 7OT/jYRJREoPI8Dpc8IbXKy9BLmRqCVD4tQwDNq7Z5M=
Subject key identifier: 0C:67:D4:1D:BE:5F:98:27:66:06:0C:C5:68:03:EF:B3:FD:E2:4B:87
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 0194BC730852E0CCFB971B0C909449C764AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: 3vykuCnFey2ntocxPQ50ayF90ApxX01Tco8/hHIKt+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:08:52:e0:cc:fb:97:1b:0c:90:94:49:c7:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=0c67d41dbe5f982766060cc56803efb3fde24b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:1f:16:59:cf:0b:05:64:7f:09:2b:eb:37:
70:94:56:b7:59:33:85:d1:90:0e:aa:df:11:bd:f3:
79:04:10:d9:e1:c4:32:12:fb:1e:f6:82:ba:12:5b:
c2:43:fe:59:90:4f:4f:b1:b8:b1:ff:55:09:be:c3:
d3:64:19:f0:57:2e:ff:3a:fd:18:5c:d8:40:8d:9b:
9a:b7:69:01:8c:3f:ff:66:61:f3:77:3f:4c:0b:e1:
70:ee:fd:68:01:74:81:49:8d:ef:d3:43:a4:05:ef:
95:08:c1:79:61:f5:39:a0:70:b7:76:7e:41:df:63:
5a:87:4b:56:1f:c0:86:8d:df:37:5f:b6:4d:33:af:
d7:7d:0e:b8:bb:a4:7b:c7:01:76:00:8c:f5:5d:9f:
49:2b:63:e4:6f:44:76:68:a8:41:95:ac:ee:87:da:
d7:07:95:25:c5:00:00:70:d6:18:a1:c1:32:d2:2d:
5c:8a:5e:bf:10:bc:22:60:aa:63:c1:04:31:5b:17:
4a:ae:a9:43:11:20:95:ca:6d:6f:65:2d:d6:01:a2:
c3:98:02:a4:fd:d7:98:b6:0e:21:3c:18:2e:7a:51:
2b:76:85:5b:00:81:e5:f9:57:9d:86:d2:0d:96:f0:
98:ab:94:a0:a2:9d:4d:f8:2d:c1:7d:b4:a9:95:4f:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:D4:1D:BE:5F:98:27:66:06:0C:C5:68:03:EF:B3:FD:E2:4B:87
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:76:f1:7d:74:9c:b2:db:c2:c4:8e:11:18:f3:d7:c4:22:
ae:59:d6:52:9a:3c:c3:34:c4:fc:c7:72:20:1d:7b:16:a9:24:
62:7b:8f:c6:16:c5:aa:f5:1a:60:89:48:dd:6a:16:42:38:a3:
a3:a7:87:55:ba:36:5e:b7:2b:56:2c:a1:14:8b:b2:21:54:8c:
52:0d:05:1c:a8:c8:d4:e6:87:45:ab:39:28:0e:84:7e:7b:cb:
38:42:eb:90:e9:b2:5c:b7:0c:2a:60:df:9a:77:08:30:e7:7c:
b2:23:c9:2a:b1:46:5b:4a:6e:a0:ee:18:7d:70:e4:ad:4e:b9:
81:9a:62:6e:01:ef:40:f5:7d:3a:6b:10:2a:69:49:a5:41:37:
0f:6f:fb:ed:6c:81:87:8f:df:95:92:fb:7f:f1:51:c7:40:78:
a0:b3:54:a2:c1:6d:f0:30:2e:ae:a1:24:24:a0:ad:31:8f:d5:
24:90:da:4b:d7:c1:be:95:bc:6f:b6:3a:c1:9e:14:10:a1:49:
f9:ce:2b:3d:c2:46:a0:cf:bf:03:5d:e5:ed:40:3c:02:69:bd:
70:6e:33:9d:d4:29:a3:ee:33:e5:15:d8:ea:d4:2c:cf:3d:d4:
7a:02:db:2a:78:95:e7:56:72:cb:c7:fe:45:bb:0e:50:f5:76:
fc:25:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:52 2025 by rpki-client