Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier: Iit5vEZuMqCIqigiQ8NviAg5uYRFbmCi0qhE6UWBTZ4=
Subject key identifier: 81:9F:B9:32:68:52:E8:87:7F:D4:EB:12:27:94:6D:FE:DE:C2:C1:02
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial: 0195DFD8DCFB2B0A341F806DCEE5CAAE96E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number: 0707
Signing time: Sat 29 Mar 2025 03:01:26 +0000
Manifest this update: Sat 29 Mar 2025 03:01:26 +0000
Manifest next update: Sun 30 Mar 2025 03:01:26 +0000
Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: DI5iC6B0luUbaqAhleX/5Ro9ph06aHmHrdSMh9YAUCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:dc:fb:2b:0a:34:1f:80:6d:ce:e5:ca:ae:96:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
Validity
Not Before: Mar 29 03:01:26 2025 GMT
Not After : Mar 30 03:01:26 2025 GMT
Subject: CN=819fb9326852e8877fd4eb1227946dfedec2c102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:9b:52:70:bf:84:da:cf:d4:20:13:4f:71:
7c:9b:bb:e7:e3:54:e3:aa:f6:da:25:48:ac:a5:eb:
b9:35:05:c5:89:7e:cd:11:08:b2:f8:12:af:1c:0d:
da:69:f0:7f:f6:1d:0d:77:ee:ab:07:cc:44:96:f9:
cf:00:8e:d6:8d:5d:bc:c6:d0:a0:4e:50:64:fc:aa:
3c:78:80:d2:df:be:25:5f:6e:60:e7:40:6b:01:fe:
83:2f:98:c6:01:62:59:e9:17:28:26:03:07:77:f8:
95:5f:c5:60:6f:50:cd:11:7e:59:7f:ba:b0:09:c9:
94:c0:ae:ac:f6:0e:72:86:86:df:65:bf:48:fb:8e:
35:c3:22:cb:6c:11:89:e3:9f:65:50:81:2e:1e:1f:
97:76:99:22:7d:d6:9f:ad:ec:9a:0f:76:49:e7:b1:
df:fe:1c:0a:c4:ca:aa:34:75:7c:02:f2:5e:d3:2d:
93:ba:b1:c3:6c:ff:85:9a:6d:9e:d3:3b:3e:71:73:
8e:c3:89:4d:9a:7e:94:82:f1:6d:d7:9f:16:14:ad:
1c:eb:5d:5f:67:0b:38:07:6f:33:3f:dd:89:97:98:
3b:35:c5:eb:06:d5:35:58:47:88:0a:87:52:0a:3f:
9e:a8:3b:21:73:3d:af:6b:8a:c4:93:74:61:63:0e:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:B9:32:68:52:E8:87:7F:D4:EB:12:27:94:6D:FE:DE:C2:C1:02
X509v3 Authority Key Identifier:
keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:aa:c2:12:1e:cc:53:37:5d:79:9d:e1:cb:33:ad:e3:54:e7:
7c:9d:77:d4:a7:f7:1d:39:79:6a:47:25:fe:86:88:be:d6:07:
a5:f6:fa:72:ef:72:e8:0a:8d:28:80:e2:b0:c5:49:e6:39:b7:
42:7b:25:70:da:77:ef:3b:69:5d:e1:09:b2:5e:05:d8:1a:a9:
cd:6b:c2:27:87:8e:cc:86:46:62:c3:58:45:d8:75:3a:7b:df:
43:1d:43:5c:8b:57:72:ef:22:49:dc:c9:e3:70:d9:7e:dc:a8:
a2:5c:fc:cc:0a:3e:7b:85:dc:31:08:b8:7e:71:a7:de:30:d9:
05:6b:8d:eb:cd:16:09:6c:f4:df:b5:70:b8:c6:d4:20:88:e5:
e7:c8:91:a6:2d:d4:07:13:b7:3e:73:d8:cd:ae:f7:58:2e:2c:
7c:1d:7d:3e:0f:c9:f4:29:79:f5:ae:29:ac:34:ce:81:39:79:
75:38:62:cc:8a:d2:c6:29:c7:e5:3d:ae:8a:75:18:d6:57:e9:
ba:2c:2a:c3:7b:cc:25:39:4c:c7:5f:53:09:a3:de:5d:ea:89:
d9:38:38:1b:3c:9e:74:30:29:49:ef:b4:87:61:f1:c5:81:16:
e7:70:9c:dd:f5:eb:5b:9e:35:65:71:77:a3:39:f6:a8:5c:8d:
ee:21:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:39 2025 by rpki-client