Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: gSpxx1OSrMxuFYmLyRh40W/aWk0iMq/rthUkRajD2rc=
Subject key identifier: 4E:84:00:36:53:29:45:33:E9:B1:52:97:A8:9A:65:36:D3:33:F3:C4
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 0194BC3C2D2D8FAE5E38C77E7394D66C8077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: qmeotxQKB1uZvkJDe0Hsc0Ii5gcGS5o7Y4iU+P29D/o=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2d:2d:8f:ae:5e:38:c7:7e:73:94:d6:6c:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=4e84003653294533e9b15297a89a6536d333f3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:7e:0d:ec:86:fc:d1:66:09:57:81:b8:de:
84:f4:d6:30:21:73:58:91:27:54:e4:70:d9:5a:6a:
ed:d8:97:95:17:ba:5c:8f:7a:5e:2f:ee:e4:9a:03:
fb:e8:bd:b9:cb:59:81:a0:1d:d0:11:d5:96:43:38:
fc:32:6d:1f:b9:2d:b6:86:e0:49:91:0d:55:ca:75:
0f:2e:38:59:28:7b:1a:8b:7a:4a:e4:e8:5e:8c:cc:
c1:60:1c:8d:27:cb:10:42:81:af:c9:df:df:e0:0f:
5f:46:6f:e6:d5:1e:8b:57:c8:ae:54:58:fa:25:8a:
eb:e0:44:97:31:8e:ab:ed:7b:1c:0c:73:e4:e1:1c:
93:ff:b1:ac:4c:b6:12:38:d6:68:1a:ae:d4:06:1e:
0e:4b:84:ad:ac:82:ae:00:52:8b:91:2f:aa:1e:51:
d0:c2:43:df:6c:83:be:41:d1:d9:5d:6a:73:9b:a4:
4e:95:eb:04:9f:fb:9a:77:5d:9d:50:39:57:03:b8:
c7:a3:60:52:2e:77:9f:bc:f8:2e:27:ce:e5:3c:8f:
c9:7a:8e:d8:ca:99:65:80:42:99:22:fe:cc:e2:e4:
cc:c5:88:92:c3:75:97:e0:21:53:ef:02:d2:9b:7c:
b4:44:71:9a:81:b9:a0:a5:b6:5b:31:78:47:39:03:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:84:00:36:53:29:45:33:E9:B1:52:97:A8:9A:65:36:D3:33:F3:C4
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:14:8e:ef:f9:e2:e9:be:7f:dd:9c:40:28:35:37:ad:5c:
26:db:d9:a2:cd:20:76:35:b5:99:a2:68:52:87:9d:bf:6f:20:
77:c7:00:e4:01:ff:03:1a:ca:58:da:93:ee:e5:b6:9e:8b:0d:
a6:c4:ca:d2:ff:ff:45:25:7d:d3:ab:da:33:a4:31:32:aa:61:
ef:e6:96:b3:6f:f7:6b:c1:0e:9f:c9:10:53:d3:41:63:b8:91:
38:3b:40:ad:e6:a4:e8:32:f0:89:67:e1:81:97:3d:ec:cb:8c:
2e:01:bb:a6:36:a7:03:b7:6e:76:ef:f8:8f:72:49:53:95:10:
d3:5c:b6:e2:cc:21:0d:b2:96:c2:1f:44:65:0f:a2:b5:36:d0:
95:04:72:ad:a2:81:9a:15:e8:00:24:4a:c9:ce:5f:8b:c0:12:
60:0a:f2:88:d5:6c:b3:05:9d:e5:0d:b9:d4:74:17:b6:37:bf:
14:32:4b:ae:3a:38:e5:54:e1:d3:b5:41:7e:6b:6b:5b:54:9b:
78:3f:88:8a:ad:ae:1c:67:0a:70:56:a0:f3:9b:f8:0e:99:71:
7d:58:91:14:e5:9b:1e:85:c6:26:bf:c6:6d:f5:f9:f9:29:f7:
86:d7:a0:b0:f0:76:31:33:66:7a:95:a2:d6:b7:90:8e:fb:ae:
6f:7d:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:17 2025 by rpki-client