Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: lOefQgCwXy5VzDXdOrbFJUDmq/P1JiAUVlc7UD2shS4=
Subject key identifier: 09:97:B5:D2:51:1F:F9:AA:AB:A3:A9:DB:35:22:6C:8F:0A:D2:17:31
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 0194BCE0C11C5A645D5FA7A60BD214972189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 99
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: 32WtKH3EfM7-S6v7tTmyQcU-a9s.roa (hash: Fn/80HetfWjEwrwQy2saw9cqkA9VjrY/6O3eDGyjCbw=)
2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: Nlaq8nK+V+JY+jJ+evs8TmyuLXhFTX/zWyQE//62UnA=)
3: ef1K6dC6_lGn3rxGTHxMT8fcB0w.roa (hash: KYKxli5ZRinkaBImEiWWBBcr8lpZPoWAqbzOeddaU7I=)
4: pLMH0ozDSiYZXzqiHdSEzphkheE.roa (hash: CFbM9K2hMJ4HkUaVbEdJq2H47xHqfonXY2RvABtKsw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c1:1c:5a:64:5d:5f:a7:a6:0b:d2:14:97:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=0997b5d2511ff9aaaba3a9db35226c8f0ad21731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:0a:d0:2a:88:82:4f:01:d3:51:f4:fc:1e:
30:fa:1c:80:6b:62:60:ff:fe:3c:4b:ba:a0:e3:b7:
21:d6:e7:fa:76:e0:71:6c:c7:d3:a6:56:ce:fb:f7:
bf:01:05:33:93:d4:95:6e:ca:0a:64:f2:92:e8:f0:
18:9d:b3:92:eb:f2:fc:25:08:14:ea:b1:6b:2d:31:
42:0a:95:11:b5:bb:fa:48:2e:47:6a:7d:c3:6f:79:
15:56:04:42:16:b8:02:3e:e3:fa:91:5a:b8:75:dc:
29:79:a8:2b:87:ae:09:3a:24:73:ac:d0:f9:8f:0f:
02:a3:8f:83:0f:57:84:98:14:48:cf:5e:14:f3:80:
f0:b2:b7:f4:f4:fa:6e:c2:5a:c0:e7:07:b3:63:5c:
6e:3e:2d:55:02:05:c4:00:9d:f0:45:c5:20:bb:5b:
00:da:e2:fb:e8:cf:01:3c:ef:de:b1:81:53:d7:14:
5e:e4:32:45:f7:03:8c:22:6d:2c:f3:64:4a:1b:e8:
08:78:e2:1f:2c:85:06:0a:81:e1:97:6a:2e:e9:81:
c9:d9:38:18:c8:3e:7b:fb:64:f2:42:73:76:04:4d:
45:83:cf:aa:c0:79:6f:32:2c:b3:85:8b:d4:a1:83:
48:c4:74:9d:46:09:67:e2:02:17:34:1f:40:ec:61:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:B5:D2:51:1F:F9:AA:AB:A3:A9:DB:35:22:6C:8F:0A:D2:17:31
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e3:05:37:63:d7:07:8b:39:3e:c0:5f:89:d7:ea:ac:d6:6b:
49:b2:d1:08:28:b1:19:f8:2e:68:a9:8a:b8:bf:3e:6d:cf:57:
84:00:d6:b4:f0:8b:b2:a8:ab:6e:f7:7c:f0:c7:22:86:79:44:
d7:34:a2:10:55:81:93:a4:6e:b0:c2:b4:ae:75:27:fd:cf:f4:
11:7b:31:a5:34:b0:d9:8e:76:58:58:d7:57:8a:0b:d5:47:c5:
c5:69:ff:96:9c:3a:31:b4:18:3f:ce:92:8e:47:f4:9b:d5:dc:
70:05:92:ac:e3:02:0e:98:f4:65:ef:01:11:ae:a9:17:52:d8:
d6:8c:da:59:64:9e:47:28:ec:33:f9:73:05:38:6e:36:d4:e9:
78:53:53:3b:77:3d:56:5a:a1:8b:52:aa:48:2b:9b:4c:39:79:
55:74:bd:d3:1b:e9:9c:4f:25:ed:8e:74:50:47:3b:d8:15:e4:
f9:29:a4:c0:7b:fa:2a:4d:67:77:2b:1d:27:ae:86:80:54:0b:
b9:c2:79:f8:34:25:00:3f:2e:72:6d:58:67:fb:8b:31:e3:fc:
ba:07:05:2d:7a:9c:39:39:40:91:6f:b5:e7:91:9b:d6:3d:2c:
8f:ad:46:fc:5d:87:35:a0:68:ac:c1:08:4e:cf:b0:a6:b7:69:
02:10:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:39 2025 by rpki-client