Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: 3fk8PtlWEmBSLn7dtyqWtaJl8K+1Lut6G72PhIszN7I=
Subject key identifier: DD:FB:42:BF:47:75:D2:E1:D5:E8:64:3E:B7:A4:44:1F:02:8F:DA:2A
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 0194BD85AB46DC6F48A038FD63ACCF5E4DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 014B
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: jpTtCgNm3x1UQ6ulkiJzeJCusn4PgF22B9Mv+OmP9/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:46:dc:6f:48:a0:38:fd:63:ac:cf:5e:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=ddfb42bf4775d2e1d5e8643eb7a4441f028fda2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:e5:59:50:0e:ca:af:e2:26:2c:70:cb:3b:
49:e5:e0:fb:85:fe:6e:92:97:fb:b8:ca:8b:46:ef:
36:ab:7d:f5:1a:89:5f:85:9d:a4:c1:5e:84:01:b4:
65:ed:46:67:f3:ba:a0:99:e1:d4:69:a5:5c:e3:ed:
c7:e1:af:28:53:8c:bc:31:51:ab:6d:f6:38:40:33:
4f:43:72:bf:c2:42:1f:d0:6d:6a:eb:65:b5:e7:d2:
b4:8d:86:c5:09:d1:08:eb:c4:c1:4d:13:d7:99:d9:
56:ad:1e:99:7d:05:bf:5a:71:7e:ca:44:51:b2:e2:
41:88:50:94:a4:48:97:f3:a7:4d:e4:79:2e:8e:05:
47:ce:71:db:93:64:76:bb:88:83:53:5e:a1:f8:e0:
09:72:e2:ec:db:d0:84:fc:e3:ec:98:9e:15:d0:14:
e3:52:73:f2:7a:a9:c9:65:b5:cd:0b:30:fc:10:b0:
83:69:5c:13:ca:f9:11:93:bb:4e:36:d4:4c:8d:54:
35:4a:dd:c3:90:7b:26:87:6f:fc:8f:fd:ea:89:83:
2d:aa:e4:b1:91:01:e6:59:fe:3c:55:6a:81:52:e8:
4c:ea:9b:d3:79:93:5c:3b:6e:79:09:f3:d8:c2:6a:
03:a4:fa:c1:5f:72:4b:e6:43:30:e4:34:28:8c:ad:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FB:42:BF:47:75:D2:E1:D5:E8:64:3E:B7:A4:44:1F:02:8F:DA:2A
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:c7:7f:18:d1:d9:61:a2:ab:5e:e2:05:d1:80:8b:f6:8b:
24:9a:a9:3e:43:be:f3:a5:bc:29:42:95:54:d8:f9:fb:a5:ed:
13:0d:ff:68:f3:a3:4a:9b:32:fb:a2:69:69:32:d9:07:93:1f:
0c:60:01:1f:04:c6:0e:63:b2:a1:98:47:4e:f5:ed:9b:a8:12:
8d:2c:94:28:bd:51:55:b4:3e:4b:35:d0:0c:3c:6b:a3:c2:1e:
86:1c:2c:5d:d5:64:c1:5e:da:83:3c:41:9d:fb:ed:a2:90:f5:
52:66:1f:7c:eb:1f:0d:e9:aa:26:e5:80:c8:2a:c3:89:41:8d:
69:61:58:6b:b7:11:63:cf:fb:ec:6d:9e:a6:71:0b:74:b0:59:
54:c6:f1:cf:e0:46:7e:c8:99:4d:85:bc:78:32:d9:12:24:1d:
16:6f:82:3f:a5:f7:d2:54:e8:9b:78:3b:91:cf:f6:38:6e:40:
4e:db:29:25:93:d3:60:a7:5d:99:af:95:f6:62:25:11:e2:50:
99:01:2f:7e:35:3e:41:3d:1b:85:e3:f6:2e:ea:24:cc:fa:c2:
1c:aa:0f:8c:95:1a:fa:d8:58:93:2b:d1:35:98:86:f8:6d:f6:
22:da:db:fb:5d:f8:6f:95:3e:28:7b:66:91:bc:4c:cc:b1:65:
d8:f3:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:53 2025 by rpki-client