Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: bzv5KpYMargiQpS7ldbZMZ8oaLzNeop5vob11Jhnhh0=
Subject key identifier: A1:AF:3A:67:7C:F9:30:CD:AA:BD:35:34:C5:03:5B:49:A1:89:90:3F
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 0194BCAA070D9A23E91C25A2D5EF1F89984A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 1468
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: HV6okiZ_Mm9pgAnQyp-neXvD9Ys.roa (hash: Z8kbWAqPsQVcPrsGh46E3DnYGpnTYUasQHe7qcWJi5s=)
2: KChU0Ss7IUSMmcrbp9hvvsOcKSI.roa (hash: tqUwPcZIIPi8c5hbtPgv87qi30gm6VRMDquHIJzvPTE=)
3: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: CbDmEWb2oEUKPtHhJn+Ea+svsttiFmQZ5UA0jCQ0oK0=)
4: nTfJHvOT3Md0YAT3TOEczzSv8EE.roa (hash: VL31GlFtYpNeSOK+C/j2TrSHKldZgXfdQN4cx739hDI=)
5: phbXQYwJCQjuQ5dKxd5byinNiNQ.roa (hash: kHOoH2iIMj11c3Wy2E0Dsfj63b+DkqvcxB6hcxTgJsc=)
6: vG8ApR1CQ1vNge3dxtdCOeCSYfo.roa (hash: nw6PuYrQxCJ0rSOnM3T0R5CkZe6WaGcEiSuktc0QJXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:07:0d:9a:23:e9:1c:25:a2:d5:ef:1f:89:98:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=a1af3a677cf930cdaabd3534c5035b49a189903f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:82:14:7c:35:63:ff:ff:0c:93:ec:4c:87:
2f:b1:1c:94:8d:3a:16:a1:5c:c0:54:12:60:ea:f5:
46:56:04:00:62:8c:c5:f6:36:8e:7c:9c:c0:83:7f:
dc:ef:24:f7:0b:67:5f:d8:01:29:9e:c0:69:19:fb:
6f:0c:9b:04:90:30:6d:94:25:46:37:02:2c:04:07:
bf:7b:c0:84:55:aa:83:9d:0f:84:a5:cc:8d:bb:66:
2a:31:2d:0e:eb:c1:85:6f:0c:e7:84:22:e3:5d:fe:
fd:35:b0:14:f7:1b:12:b5:e3:6f:22:f4:36:70:fb:
25:4a:b7:05:44:57:9b:07:4b:59:51:e0:07:51:0a:
36:09:8e:25:f6:75:d1:cb:93:0e:68:ff:9b:e8:08:
e8:46:82:4a:30:45:8f:26:f4:6d:3d:be:d5:fd:9b:
e2:4a:50:ba:6c:74:77:b8:d3:2a:82:0c:0c:43:c4:
58:a4:80:2a:fb:64:2b:80:0d:b0:b8:98:3d:c1:11:
36:ce:28:57:ee:cc:67:18:c3:eb:3a:23:df:5a:dd:
18:66:b4:cc:b5:83:6e:67:4a:dc:c2:1b:1d:e1:0d:
7c:35:2b:a8:0f:70:7d:17:9d:d8:4c:04:21:47:ce:
c4:64:30:91:bb:90:e6:5b:00:b2:60:d2:e8:80:26:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:3A:67:7C:F9:30:CD:AA:BD:35:34:C5:03:5B:49:A1:89:90:3F
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:16:37:15:c0:29:23:ef:49:fc:33:ce:fa:bc:fe:b5:99:84:
97:7f:ed:e3:5a:82:d6:65:f9:ce:1a:6b:c1:fb:e3:ea:6f:5b:
40:da:6a:d5:45:a7:e4:4a:ed:13:4c:ba:59:db:db:7c:ee:9d:
61:ab:e4:01:70:86:6f:d6:4d:87:0d:d3:0e:cc:36:b7:22:62:
16:37:ac:0c:81:21:57:5e:28:ed:9b:ab:6e:c9:e5:f1:7e:ac:
bb:15:a4:6c:55:4e:2c:ff:db:0a:a8:fa:b4:88:d5:cb:42:55:
40:65:10:5b:8b:9a:63:ec:7a:ac:71:38:5f:d5:0e:83:6e:c2:
9f:df:2e:df:81:87:fb:e5:bd:26:24:f0:27:9d:18:e4:92:d7:
63:79:2e:60:ae:c7:7f:b3:d7:8f:42:a1:1b:c6:54:c6:91:79:
07:92:34:0c:31:86:a6:d9:eb:58:9f:71:43:be:07:16:8f:9e:
1c:99:3f:18:ee:14:89:4b:60:aa:32:bf:57:76:2e:05:cd:f7:
74:67:a4:b2:26:48:b4:87:44:52:eb:9d:a1:9f:0f:4e:05:ad:
e5:59:37:96:29:c1:f4:8f:2b:5c:31:2e:39:d8:79:b6:e6:91:
2b:c1:90:76:01:4e:83:8d:4a:30:14:1b:04:15:c9:c9:a4:c8:
56:5e:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:02 2025 by rpki-client