Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
File: leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json)
Hash identifier: Mc4lCLereHEBqAR6mporXE05v88mMTQPM12LukCRZU0=
Subject key identifier: 46:0F:2B:B0:A1:68:CE:03:87:85:02:2E:75:4B:45:12:D6:70:77:E1
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial: 0194BD17865A0DBE2FB6F931C0D72F1A3B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: MCsIROpcTR7JKSRfmFoIKjJ_nz4.roa (hash: R67ARze8qlkUfDP9bKevHmAROQGEYMGNSr3mOqKWMMQ=)
2: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: dYUfR9CPrEjL7vVqa+rwlHGUkkNYay/yPUfz1yIdmj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:86:5a:0d:be:2f:b6:f9:31:c0:d7:2f:1a:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=460f2bb0a168ce038785022e754b4512d67077e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:57:ef:19:12:30:d4:54:5e:94:0d:9e:d7:
f7:7a:da:f1:86:d6:92:e7:80:65:9d:e0:e1:31:2b:
28:b1:f2:99:b2:4a:d1:f9:b8:60:a1:ea:b0:cf:0a:
cd:d6:1f:2f:00:17:38:a7:6c:8e:df:24:50:1b:34:
34:e3:03:e3:68:91:ee:a1:77:f1:7c:de:d2:fc:19:
fc:dc:2c:e8:5c:84:dc:6a:cd:a7:fa:cb:f4:96:80:
96:17:db:8b:a0:c9:bb:96:2a:0e:5a:4d:80:99:81:
76:75:64:12:52:5f:ab:9c:b0:a6:72:3c:0a:e9:1a:
1f:a0:7f:30:c3:ab:0f:18:27:62:f2:00:eb:ac:21:
5f:41:b0:77:7b:fb:26:92:ac:2c:a8:79:70:65:af:
b9:74:b2:00:69:45:87:3d:c0:33:13:5d:cd:9f:6a:
8a:ee:d5:77:c1:2e:1a:0a:9c:28:42:8b:1f:29:2f:
c1:c3:da:ec:cb:ce:a1:6b:fd:ae:5c:a0:88:32:fc:
db:fe:88:59:8c:d8:9b:34:1c:b4:ef:45:3a:ca:a5:
99:62:6a:ec:e3:96:91:22:76:77:81:a3:c5:25:c0:
13:c4:00:5e:d8:86:7a:5e:01:28:34:73:8b:07:16:
ff:c6:0b:73:ee:95:cc:e3:dd:d1:67:c4:a2:bd:af:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0F:2B:B0:A1:68:CE:03:87:85:02:2E:75:4B:45:12:D6:70:77:E1
X509v3 Authority Key Identifier:
keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:25:61:45:3c:c2:1f:9b:cd:5b:4d:45:e1:06:db:6c:e3:
7b:5f:43:9f:3e:03:49:ec:95:2a:3d:21:0a:0f:a3:05:83:bc:
44:22:67:ca:8b:2f:b1:ae:8e:da:39:81:68:7f:b1:97:da:2a:
9f:1e:49:e2:3b:79:87:a6:3f:a1:86:37:2e:90:13:31:40:18:
13:07:50:0b:97:1a:d7:a8:0f:2a:74:a3:c3:16:e5:c1:5e:f6:
db:c6:4d:a8:59:e3:fe:c5:8b:67:71:1c:8e:c9:ef:fd:4d:be:
fc:b9:5e:80:29:54:c1:16:63:49:0c:c5:a2:2d:54:19:a7:c2:
f2:b9:ad:8f:52:5e:2a:50:46:4c:bd:a1:99:b8:21:21:eb:c7:
71:b5:22:8f:03:20:c6:50:c6:10:b6:f4:5a:03:78:14:33:8a:
bf:84:62:ce:8a:4b:36:80:d9:32:08:0b:09:08:73:4a:7f:c7:
cb:c2:fc:e2:94:96:be:69:a6:5d:50:1e:70:2c:74:20:84:24:
77:38:39:ea:75:16:26:39:1f:72:d9:1c:cc:ac:e6:11:8b:5b:
1e:a3:34:96:92:fd:7d:7d:90:cc:1a:d9:39:cd:31:25:6e:66:
f0:59:77:e4:94:30:3e:a2:92:97:b6:57:67:cb:5a:66:3d:c5:
fa:1d:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:43 2025 by rpki-client