Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: 1gZ4arBJm9c6TMWHuUSfGzldGOU3JkNj2Uno+P5rUsw=
Subject key identifier: BA:A4:68:63:C2:B9:CC:21:01:B9:1B:30:60:11:70:46:85:D0:FE:FA
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 0194BD17C971D604A54B413F94B3D7CBF9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: DLWPEO_9yUOTEIMj72dvmq538V8.roa (hash: tZVtjz50VVvlvlPM3GswwaygVa7mn0i/tU1ESCZ6Cvw=)
2: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: zhKk+lsFrDfkReQTv5kfXHSa99RIgkxCS+9loYBoOCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c9:71:d6:04:a5:4b:41:3f:94:b3:d7:cb:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=baa46863c2b9cc2101b91b306011704685d0fefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:ff:87:70:90:96:2b:0d:4b:6c:dd:72:cb:
6a:0d:5a:42:64:da:75:3d:41:24:16:af:2f:48:c1:
74:19:90:da:cd:c7:a1:9e:30:e0:c4:bf:1d:5f:9b:
2b:a5:77:87:ec:aa:5a:c4:27:9e:79:22:68:cd:29:
22:66:46:71:7b:d4:1a:ac:e0:c4:a7:5a:04:a2:4e:
fa:60:64:c7:b1:55:55:73:83:38:b1:42:d1:3c:9e:
e2:2a:dc:ec:7d:fb:0c:ca:f0:b0:a0:f8:03:c6:34:
e4:7b:07:a1:62:8b:ce:1b:53:10:a5:29:cb:2f:fe:
fa:a3:57:fd:77:e7:95:13:82:60:9e:3e:2e:01:c3:
fd:7b:f5:be:b2:0e:93:1c:25:62:32:02:71:c0:17:
c5:ca:04:82:ab:bf:51:df:d2:74:fd:e1:96:48:ca:
42:7d:71:f0:c7:07:d5:c9:35:21:07:38:97:df:6e:
c4:22:b1:24:70:7b:f3:fb:60:1c:87:98:c3:05:70:
47:53:97:5a:07:88:3d:18:d7:2a:c6:1f:16:61:65:
1d:ab:cd:54:d2:36:df:4b:81:10:70:70:00:c0:66:
5d:17:a4:df:fa:4e:b4:6b:3f:66:07:41:a7:0d:7e:
37:3a:2c:17:d1:d3:6b:28:da:4c:da:e7:aa:40:b3:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:68:63:C2:B9:CC:21:01:B9:1B:30:60:11:70:46:85:D0:FE:FA
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:68:18:6a:81:24:46:f2:50:34:25:27:5b:07:b5:0a:1d:11:
93:cd:70:1d:15:9d:db:bf:7f:db:a2:25:02:fd:1f:7b:f0:0c:
2d:04:67:8e:fc:29:61:30:37:a9:e9:ce:b9:6e:9b:f8:8a:30:
0e:b6:67:e6:36:83:48:fe:3e:22:17:6a:70:81:34:c2:89:f9:
9b:f0:7c:de:0f:45:38:5c:22:9f:b6:85:28:56:38:5a:e4:c7:
64:44:b0:3e:26:16:2d:1c:b8:bd:50:57:5c:6d:12:86:ee:4f:
c0:7c:32:b3:49:5c:90:39:88:e8:08:b5:0e:eb:a1:90:2d:df:
83:28:95:1a:6e:6f:d0:1b:6b:39:a1:8c:21:6a:36:c5:01:73:
ab:bc:82:95:cd:31:7b:36:ba:a0:bc:2d:27:d3:09:f9:29:7b:
11:9a:06:e6:62:f5:af:da:fb:a8:cc:59:0a:1a:04:06:f9:6a:
c0:15:ea:c5:f5:dd:5a:62:0b:22:51:80:dc:41:9c:15:47:05:
7b:28:08:c5:3e:5b:26:0d:0c:52:eb:fe:3e:93:00:4d:63:96:
7b:fa:98:c4:20:fe:26:28:de:42:48:f3:7c:f3:fd:85:99:a4:
0f:3f:c3:9b:06:10:22:be:c9:a0:71:23:c6:95:c6:f7:47:08:
f4:2b:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:35 2025 by rpki-client