Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/kLH-1--p_9xhgAlxlGuO34PO57w.mft
File: kLH-1--p_9xhgAlxlGuO34PO57w.mft (raw, json)
Hash identifier: 9UxjIZqm8UxKg2/BOp5XGwaDUCl3x1rAwcNhKODdrVU=
Subject key identifier: D6:9B:A8:89:6E:4D:1F:C0:38:49:E6:D0:F3:73:99:51:FE:47:B9:A7
Authority key identifier: 90:B1:FE:D7:EF:A9:FF:DC:61:80:09:71:94:6B:8E:DF:83:CE:E7:BC
Certificate issuer: /CN=90b1fed7efa9ffdc61800971946b8edf83cee7bc
Certificate serial: 018235A9B73035FA0C42C760B4946B1DFA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLH-1--p_9xhgAlxlGuO34PO57w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/kLH-1--p_9xhgAlxlGuO34PO57w.mft
Manifest number: 0A23
Signing time: Mon 25 Jul 2022 14:01:30 +0000
Manifest this update: Mon 25 Jul 2022 14:01:30 +0000
Manifest next update: Tue 26 Jul 2022 14:01:30 +0000
Files and hashes: 1: kLH-1--p_9xhgAlxlGuO34PO57w.crl (hash: pG/Nti3hvFPKoy2fX/J+FSHyP7dv8TcuYFk4BR5bKns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:a9:b7:30:35:fa:0c:42:c7:60:b4:94:6b:1d:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b1fed7efa9ffdc61800971946b8edf83cee7bc
Validity
Not Before: Jul 25 14:01:30 2022 GMT
Not After : Jul 26 14:01:30 2022 GMT
Subject: CN=d69ba8896e4d1fc03849e6d0f3739951fe47b9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:7f:75:02:e7:c2:47:59:22:31:83:ca:80:
e4:27:37:43:43:6e:13:b4:4e:a3:6f:cb:3c:de:02:
6d:05:89:b2:e4:dc:d1:08:ef:c0:78:52:1e:e5:b0:
09:89:5a:53:c5:73:9f:29:a1:65:94:16:fb:b6:67:
2e:9b:ee:70:ee:56:b6:3c:f9:9b:23:1a:13:f2:96:
03:8d:d7:9f:cb:1d:a1:a6:3b:cc:ae:e4:77:9b:fd:
83:9e:27:d8:ab:39:00:a1:ec:41:69:53:fb:a5:18:
70:fc:6d:a3:fe:63:63:23:ed:db:28:0e:df:b5:ff:
4c:27:5a:58:58:20:72:6a:60:88:09:76:c5:17:a7:
f1:cf:47:db:bf:78:f8:c3:20:41:1d:e7:c7:78:8c:
c5:a6:b0:86:ec:3b:af:9e:7d:26:c3:5d:d5:79:09:
b2:24:30:48:91:0d:00:7c:ef:d7:65:59:d6:83:01:
4c:3a:38:be:86:44:b7:9d:8c:fa:47:1b:a7:49:0e:
dd:4b:09:a9:a3:44:6e:41:d0:bf:e8:25:6e:0c:a3:
a0:33:e6:83:e3:a9:00:40:9f:ec:b8:86:21:9c:24:
d3:8c:68:e9:1a:f4:2f:34:00:4b:1b:8e:64:49:4d:
04:19:b0:ff:ab:de:dd:b8:d2:6d:67:24:06:3b:c1:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9B:A8:89:6E:4D:1F:C0:38:49:E6:D0:F3:73:99:51:FE:47:B9:A7
X509v3 Authority Key Identifier:
keyid:90:B1:FE:D7:EF:A9:FF:DC:61:80:09:71:94:6B:8E:DF:83:CE:E7:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLH-1--p_9xhgAlxlGuO34PO57w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/kLH-1--p_9xhgAlxlGuO34PO57w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bca143-295c-40dd-9ec0-eb7c7f3ecf1d/1/kLH-1--p_9xhgAlxlGuO34PO57w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2d:55:c9:b2:49:03:ec:5e:22:cc:2c:af:ea:db:9a:a5:03:
d2:34:11:e8:5e:52:0c:41:6d:83:be:80:e9:63:09:ce:58:9f:
e2:2f:22:a2:e8:00:65:aa:fc:5f:4b:43:b7:84:5f:bb:ef:8d:
bc:39:ff:c0:e5:3a:57:5a:39:02:3c:0a:2d:b7:19:1d:06:4a:
0e:c9:ff:5e:19:b3:67:f0:e4:b9:4c:9a:b4:b3:21:b9:a5:91:
19:08:01:a7:a8:9f:1f:02:34:80:ba:76:8d:3d:11:1e:be:21:
f3:c4:89:ab:74:c9:07:7f:4f:ff:99:11:07:55:78:3a:e2:d6:
a8:1a:80:ef:57:6b:7a:e7:45:4e:c4:e7:66:a0:3d:75:71:5a:
cb:fa:51:f2:fb:53:46:8d:0b:38:34:a3:c0:59:ef:e4:87:eb:
d2:2b:47:a8:b8:8c:8d:6a:b2:60:36:a2:5a:35:8b:90:4b:b0:
9e:a2:83:c5:bb:27:c8:be:a3:90:00:e0:55:9b:fa:d6:30:d1:
bb:0a:42:6c:f8:38:ff:e6:f4:65:aa:d5:8b:b4:15:22:44:7d:
10:8c:40:ca:95:41:7b:2b:33:12:c8:5c:dc:f7:c7:27:e3:70:
a9:5d:f6:9a:af:65:5c:5b:5e:ea:92:da:cd:ef:96:4a:24:6f:
4f:5e:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:10:45 2025 by rpki-client