Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: RhvwOU5ExUIa11wStRSmoGizhQbkbelXY+29K8IWzRY=
Subject key identifier: CD:16:8B:20:BB:05:98:2D:A6:59:43:85:73:03:10:1F:E6:22:CB:74
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 0194BCE0C33438B06D75FC12602CCFD67EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 1273
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: 3X1PlLpfeL/Od7uisOD0hCmMkYOxNvO+o4sZjvcQIN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c3:34:38:b0:6d:75:fc:12:60:2c:cf:d6:7e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=cd168b20bb05982da65943857303101fe622cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:4d:ef:63:11:77:27:49:d5:bc:2c:e0:e8:
7e:b1:fb:75:02:86:c9:f8:34:9d:27:51:71:e9:6c:
c1:7b:35:1e:f3:12:6e:5a:df:73:a1:f6:98:ee:95:
86:ba:ad:6b:7f:39:15:4c:93:4e:40:e7:37:ed:cf:
2b:9f:98:b5:82:b7:5e:62:2d:38:ed:36:bb:cc:ef:
7e:88:2a:a7:3a:41:14:a8:e6:84:6e:a5:21:02:a4:
2e:1d:8f:62:75:8c:c7:b1:de:95:e3:79:d3:4a:36:
f4:38:27:66:d4:c2:27:ad:16:e9:93:d4:86:e3:7f:
34:83:3b:82:de:85:ec:ec:9c:37:75:69:b5:eb:60:
24:e4:64:f5:3d:2f:74:f7:98:5b:51:64:e3:a0:d6:
fd:3d:17:a8:72:07:1c:ed:e2:37:87:34:7e:18:2f:
cd:09:07:5f:83:9d:c8:9a:d7:b0:c1:8b:0c:47:ac:
a6:80:c2:2f:df:38:05:69:20:ad:e0:5f:90:67:a8:
cb:0d:4a:4a:36:28:dd:d7:e6:cb:65:84:f5:cb:81:
dd:07:6e:ce:5e:b1:02:89:14:48:2c:1e:92:38:19:
25:4f:71:83:26:2e:0d:15:11:ae:5a:3d:65:b4:b0:
03:bb:90:27:5e:50:73:84:73:05:f5:95:86:ed:cb:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:8B:20:BB:05:98:2D:A6:59:43:85:73:03:10:1F:E6:22:CB:74
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:28:87:d0:22:d4:50:a6:93:cd:3f:62:ba:8d:78:1a:76:8d:
bb:27:0b:90:bd:2d:b9:e5:ce:ac:fe:cb:4a:fb:02:7b:67:34:
f6:93:7e:0b:6e:9e:0c:78:c9:1f:f1:75:ac:68:4b:42:c3:b6:
6d:3e:19:e3:49:a9:91:72:e8:30:96:e9:44:b3:04:11:73:1d:
f1:6e:c1:cf:08:8a:29:b8:79:50:d3:4a:07:88:77:d2:d8:4d:
cc:c0:2d:d9:76:3a:66:13:fc:52:cc:bb:bf:de:eb:ca:79:bc:
e3:b2:c5:8d:be:34:86:70:e9:b4:d9:b7:73:ef:80:de:f9:23:
6d:13:5b:4d:30:c4:1f:65:79:e4:71:60:e1:92:91:ef:4c:69:
7d:69:2a:fd:c3:f6:ad:82:bf:16:51:bd:c5:4b:72:d4:4b:bb:
1a:e3:26:c0:ca:7d:f4:42:07:76:f4:05:a3:15:26:ef:bb:75:
c0:0b:3c:6c:97:f2:9e:65:ed:e1:17:c2:47:4d:d8:f6:7a:d5:
98:e2:4d:5c:9a:e1:37:bc:55:e8:a9:f5:84:e4:36:26:38:71:
3f:80:a4:2f:50:63:41:38:7a:39:da:8c:ac:41:68:26:ef:bc:
61:bf:09:f0:b4:f2:8a:24:d6:0d:ec:44:5b:b2:77:2c:a3:c6:
9d:59:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:06 2025 by rpki-client