Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
File: l5FbqA0-1wRSRoFIinK-mR-mcNw.mft (raw, json)
Hash identifier: BXQQr6deJMukjHEWaAqM47KGh9rOaIoe4PuntnuIy00=
Subject key identifier: AA:66:04:21:E0:40:32:EA:7B:80:0C:45:C4:96:CE:CA:ED:4D:7C:9C
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Certificate issuer: /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial: 0194BC730F60E74602600CB07C7A302868D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
Manifest number: 031E
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: l5FbqA0-1wRSRoFIinK-mR-mcNw.crl (hash: S+BYD86/Je5/sXXL50GOhb9VwLr2wpu1/X+w/G0pVo0=)
2: qo2vOLLpvqAX5XPyfjQO2wLnHqA.roa (hash: ngupliw7DsEh4VFD2q0dSrJhCE7Y9aSPjgmNKBH+xq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:60:e7:46:02:60:0c:b0:7c:7a:30:28:68:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=aa660421e04032ea7b800c45c496cecaed4d7c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:ab:ec:89:28:5e:27:d3:1f:99:f3:28:ca:
00:1a:be:c7:f4:33:41:fd:04:f7:62:d2:c8:ea:2d:
6e:52:64:26:32:90:85:ca:91:a0:47:ae:54:32:f4:
f3:b2:ab:ba:79:97:79:6d:f5:7f:d5:e1:9c:32:78:
52:6d:af:0e:10:01:67:4b:d8:3a:84:43:05:e7:6c:
cd:a2:c7:52:37:c9:f3:4b:1a:22:e5:e7:84:83:6a:
17:16:cf:46:9a:3b:f5:3c:ba:11:9c:b9:b4:c6:e4:
3a:ae:5d:cf:b4:ca:5a:6d:78:73:69:13:c7:8e:cd:
36:f8:c2:86:df:7c:3c:48:3b:a3:78:0c:cf:12:7c:
28:b3:aa:ac:66:31:84:f3:99:fc:3a:ef:76:a0:4c:
8d:44:3d:f6:47:9a:23:9e:85:4a:ba:73:1a:8e:91:
e3:87:08:c3:c2:d1:fa:00:61:39:58:0d:1f:ed:c7:
e1:de:b2:07:6d:2c:83:38:ef:a2:db:be:52:3e:60:
75:44:3e:cd:26:69:27:93:82:3d:45:1b:51:96:95:
b9:16:32:4d:2b:39:6c:78:e3:4a:da:c0:08:28:c6:
cc:62:0a:eb:c4:8f:bb:72:de:6a:5f:e4:8e:bf:a0:
a9:91:d9:7a:55:bc:9f:c3:af:33:38:d1:5b:e6:c0:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:04:21:E0:40:32:EA:7B:80:0C:45:C4:96:CE:CA:ED:4D:7C:9C
X509v3 Authority Key Identifier:
keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e4:0f:f5:d0:de:70:d3:d5:6c:7b:45:c8:cf:02:2b:b1:6a:
b5:8a:5a:b7:92:9d:55:2f:04:ea:77:34:41:bf:2b:1e:71:b8:
2e:7f:9f:51:a5:f2:66:6d:dc:43:4c:fa:18:9b:63:ed:89:32:
c8:1c:09:47:ec:64:4f:50:d4:7a:5f:01:63:06:3e:3d:5d:2b:
92:05:b2:24:eb:05:db:aa:0e:c4:51:81:fb:e7:2a:30:4b:31:
d9:9f:ef:f1:0b:20:1d:c7:c4:09:cf:ed:f4:c5:b2:c9:dd:e5:
62:05:4d:be:92:8c:41:4a:42:ca:55:60:35:f4:ed:4f:bd:18:
a6:46:17:83:d0:54:55:7e:63:26:03:23:18:61:c2:f8:64:18:
55:b0:b3:23:e9:24:e9:55:b0:67:23:cc:31:10:43:27:9f:61:
45:8d:06:ec:67:cf:4b:c0:09:47:38:39:52:39:42:b6:47:a2:
24:48:c1:88:67:55:77:f6:55:d5:4d:cb:2f:c2:41:4b:e9:8b:
1f:fa:46:64:1d:08:aa:e4:72:0c:a4:2a:f2:0e:a0:b0:2c:78:
92:d5:e2:66:bc:82:b5:4d:05:2b:eb:f4:9a:7d:f1:37:63:db:
a5:ac:f7:5e:9d:c0:9f:b0:f3:a0:d5:f5:a5:35:8b:09:33:5e:
83:c4:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:13 2025 by rpki-client