Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: 3Ui6mS8T010M519oYR0bptL9CnS1FkaKPdz/wtTegOQ=
Subject key identifier: 06:13:96:68:26:3A:F8:36:E3:C9:A8:3E:5A:ED:1F:BA:C2:0A:5F:B3
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 0194BBCE6E98EA444D475FEC36CEB1BB32AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0D38
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: j4OaMCsnYmHzHH7wQ3oXmbvCa0M.roa (hash: 7UzCu16HaDn4ZYK9ZjSooKvaC8OCGKG8+ZmT7cxyW64=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: JYrOasKiQPisDVcY5LU5mXMs3RbwkFHDDawdz/Hcp98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6e:98:ea:44:4d:47:5f:ec:36:ce:b1:bb:32:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=06139668263af836e3c9a83e5aed1fbac20a5fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:8f:3a:86:fd:88:f5:de:2a:38:91:cc:d4:
73:72:22:7a:4d:6f:54:0a:4c:98:70:14:26:f0:4b:
ed:08:ad:c5:f3:93:d5:f4:ec:8d:da:33:3a:08:fe:
70:7b:2c:c4:4b:bd:93:6f:d4:21:0b:7b:82:d4:19:
84:66:1d:80:59:9b:02:00:b7:33:e1:9f:09:b8:50:
8d:af:55:0b:0f:21:e9:88:48:63:db:bb:0e:9c:7d:
4a:65:96:14:63:c2:c8:8b:5e:f4:3e:bd:58:f9:a6:
91:24:86:bb:7d:01:a3:2a:7f:be:a8:3e:61:98:3a:
a7:1c:74:72:c8:3a:d0:7e:93:d2:9a:1e:e4:60:3f:
7a:30:d2:76:10:d4:13:75:4f:2e:97:17:e2:6b:25:
e3:8a:b7:86:36:8a:5e:b4:09:00:66:09:2b:f3:48:
1d:4e:c2:c2:07:24:e9:99:33:87:44:fc:90:11:3a:
c4:72:0e:be:87:7b:01:95:e5:6f:c0:23:04:28:bd:
bf:4e:71:40:5f:b8:47:18:71:18:77:4a:f1:61:c4:
64:39:38:29:ac:3a:3f:1b:91:84:c5:49:2c:ed:73:
56:00:e3:29:b7:57:32:81:2a:30:25:cb:1b:7b:1c:
db:91:ae:0e:5b:2f:2b:8d:26:3f:2a:2d:f0:74:05:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:13:96:68:26:3A:F8:36:E3:C9:A8:3E:5A:ED:1F:BA:C2:0A:5F:B3
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cc:ea:c5:71:5f:d6:50:90:a7:b5:ef:3d:6f:7c:bc:c9:8e:
44:2f:37:cf:2b:f4:91:c9:98:d3:7d:d7:ce:c1:65:b2:43:7b:
30:c3:15:05:97:d7:ea:d4:0c:8d:49:3f:32:f6:d3:57:da:ce:
f8:63:6c:69:ef:b3:3b:65:23:fd:7e:96:b7:70:66:00:ca:47:
f3:de:ce:ce:e8:cc:b2:ef:dd:01:81:3e:21:b5:a1:f0:88:3b:
93:95:63:1c:b6:bc:70:a6:28:85:fd:ec:41:4d:c4:20:77:e3:
29:3f:35:44:2f:76:29:c4:51:2b:2a:b0:8b:48:e0:b7:0d:bc:
08:c7:7c:af:93:8c:94:03:e1:29:05:13:41:d5:9c:0f:d9:e1:
9d:c2:e0:06:2f:fc:b2:70:4f:2c:d0:bc:ed:03:e5:4d:fb:49:
f0:83:b6:1d:44:50:9a:49:3f:49:b4:23:9a:da:f0:3a:7b:be:
c1:0c:63:64:d5:04:5b:c7:74:dd:b8:29:9d:f2:25:59:d7:10:
e2:88:c7:e8:05:68:b1:90:34:6e:27:78:64:1d:2b:c3:4e:6d:
c2:79:1b:a3:fb:47:b0:8f:f6:c5:23:f9:1e:10:ce:39:10:0a:
5e:5c:cc:9f:cb:59:ba:fa:10:37:92:5d:65:dd:2b:9e:f3:45:
5d:0b:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:14 2025 by rpki-client