Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
File: lMhsmzXXghFrLNhYOifOtAO49ho.mft (raw, json)
Hash identifier: J95clV3Dcl7TXBquSZ5uq3qPhfFq6kKfGG7N6wVpq6w=
Subject key identifier: 6B:A9:1A:E6:5A:73:6B:AA:8B:59:46:85:BA:2E:7E:44:D8:04:24:6F
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 0194BC052F20E6E506B040DF65BDA9B259DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: kL5tCodlPmsKcG8VmzS3vTT-EpU.roa (hash: rTcyxkJLmIdGub6lXVfezUyk6BdEW9e85j13e1XiRBA=)
2: lMhsmzXXghFrLNhYOifOtAO49ho.crl (hash: 13trB65/5jsRDQpangSYC0USQ2P7ezKiyT132/Tk0fU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2f:20:e6:e5:06:b0:40:df:65:bd:a9:b2:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=6ba91ae65a736baa8b594685ba2e7e44d804246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:9d:75:8c:49:97:2f:f9:03:2f:6a:e1:a0:
0d:6a:94:67:e7:61:29:ff:31:88:65:e4:15:10:f8:
af:f9:f9:e6:3c:b4:5c:7b:14:5c:32:5a:69:31:7d:
bf:54:be:dd:43:88:c9:de:87:03:e2:99:d9:ba:6b:
38:dc:a6:3e:5c:6c:d9:ed:03:57:56:43:89:82:93:
68:65:4d:2d:d4:46:55:7c:26:a7:ec:0a:d9:d7:3a:
02:83:4a:94:80:61:16:9f:a9:a8:11:4b:be:44:ce:
8a:04:a0:d0:11:87:dc:fe:7a:a7:ff:f4:c8:4d:3a:
80:a4:cb:8a:a5:06:f9:cc:1c:78:1e:db:50:39:df:
e1:eb:15:a9:24:27:08:8e:19:dd:98:e1:a1:29:f7:
99:e5:0f:a0:d2:ef:52:2c:24:a0:7d:f9:a1:08:f0:
89:3b:38:2d:7e:9f:67:35:05:7b:62:b6:bb:d9:cb:
2e:c0:aa:e5:8b:d8:c8:b2:80:ce:ed:17:d3:05:fd:
dd:71:68:48:db:3e:b2:b8:02:75:23:27:61:be:4d:
b0:fe:ef:27:73:44:cb:ed:3f:94:7f:24:5a:4c:63:
6b:2f:85:f6:18:dd:48:2e:b3:f6:b4:e1:f9:75:5d:
3d:13:7a:9c:24:3e:cf:b7:f6:e7:46:85:16:21:b0:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:1A:E6:5A:73:6B:AA:8B:59:46:85:BA:2E:7E:44:D8:04:24:6F
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6f:81:5e:62:16:a4:28:38:bc:2d:27:e4:59:9b:e4:5b:32:
4c:1b:d1:4c:2c:c4:b6:2a:bb:c3:19:d7:77:dc:b9:8b:1f:47:
12:74:2f:86:93:a0:ec:32:49:b6:b0:32:ee:cb:6f:60:1e:57:
1f:30:20:b7:fc:93:53:37:22:6e:2d:05:53:67:d2:6a:7d:e7:
8d:f2:ce:65:e3:48:19:fe:be:ef:69:0f:38:95:34:32:11:04:
6d:be:34:9d:25:e1:87:5f:57:66:e9:50:04:4c:63:f6:e4:d6:
c2:77:f6:67:ec:f2:96:6d:5d:f8:a4:a8:a8:5c:d7:ff:71:28:
7e:9f:ff:b3:db:69:e9:de:8f:75:96:24:4b:c1:56:8a:80:31:
71:51:17:e8:fa:9e:9b:7f:5c:b0:fc:9f:54:ff:a2:e5:93:5d:
70:5c:8b:91:66:7c:54:4b:35:3b:f5:5f:84:64:0c:a1:dc:34:
3b:3d:58:ab:df:a5:e8:32:ce:69:f2:e0:95:25:3c:b4:f1:13:
ab:0b:1c:38:96:0d:e0:12:a0:00:f4:49:f7:22:33:c3:5d:ba:
15:17:be:5f:52:4b:f7:f2:3c:c7:3a:67:3e:b1:e6:e0:05:86:
47:64:5e:49:8a:49:04:73:b9:6b:7f:25:7f:bb:35:f1:30:98:
7f:3d:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:53 2025 by rpki-client