Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: uuR2wK65yiIWNVUscoqP9aXUtiABBPVFYoqX5ZjuaSg=
Subject key identifier: F5:C6:7B:82:DC:A3:F6:3A:FE:6E:40:2B:02:C0:09:D2:22:07:CE:4D
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 0194BC3C69578CE87765BD1D2EDB25D9FC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0A85
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: thTtYXSq4k1Y63oqW8s8V7ncPBki3nBTKjNU1RRkhbg=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:57:8c:e8:77:65:bd:1d:2e:db:25:d9:fc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=f5c67b82dca3f63afe6e402b02c009d22207ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:c1:22:03:69:1b:9f:92:a6:1d:22:04:6d:
41:85:22:57:a6:94:a1:4d:46:7d:0c:58:3f:68:cc:
04:41:02:18:b1:c9:49:2b:87:a7:4e:4e:30:ec:ad:
c5:87:96:a1:e2:9c:24:2a:5d:09:17:27:f5:33:12:
65:e3:07:6e:df:69:f4:c0:13:bc:e6:e1:e8:28:94:
6a:17:c4:f5:68:1d:a5:9f:bc:df:ec:a2:a3:b9:dc:
ab:7e:43:f6:50:e6:83:40:77:c1:75:f7:5a:6e:75:
ac:be:ad:f6:5b:a1:2c:70:fa:21:d3:2d:c7:89:eb:
6a:a4:3a:d2:4f:ac:d1:35:82:7b:34:8a:08:47:c2:
24:93:53:54:6d:95:f6:6a:aa:22:e0:8d:2c:99:1b:
08:83:0e:a6:72:ec:2c:af:48:a9:f7:8d:fd:c3:1d:
4b:0a:34:6b:6c:20:1c:5a:e2:b0:6e:2c:a0:d6:0a:
d9:99:71:d8:a3:48:0e:b8:79:e5:95:d6:5c:22:a2:
be:1e:b1:9d:38:b8:81:87:50:6f:69:49:fb:97:e4:
d2:ec:43:c4:62:69:b4:90:04:a6:ee:32:0b:27:09:
f0:22:20:12:c7:1e:5c:e8:63:7c:2e:23:bc:58:20:
7b:65:67:cf:e5:0c:50:40:96:e8:6b:e9:91:c9:55:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:7B:82:DC:A3:F6:3A:FE:6E:40:2B:02:C0:09:D2:22:07:CE:4D
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a1:03:7a:a8:06:0d:6a:7c:98:40:eb:87:9e:13:78:3b:b2:
32:f7:ee:b7:a8:2f:7f:1a:8d:fc:6c:02:d4:40:63:a8:0a:b1:
c1:0e:e2:1d:45:85:16:16:22:2b:92:b3:2c:1b:ec:f7:8d:4b:
22:fc:ec:04:29:cc:6f:51:05:bd:8b:02:fd:e2:ed:07:3d:65:
b3:17:18:eb:ee:3c:ea:58:13:a4:03:7b:48:68:bf:e7:27:1e:
77:b1:2e:a6:87:51:68:05:b2:9a:32:5b:36:d5:34:91:46:5e:
34:ec:e4:fe:bc:24:e7:9e:74:19:61:28:85:74:cf:0f:2d:f9:
b4:4e:66:e5:ff:06:6b:15:0f:61:95:7c:69:79:ba:22:4a:c5:
39:f4:10:8a:27:36:d3:50:c2:51:bd:77:2d:56:53:46:38:52:
70:c6:f6:e9:d6:27:c3:cc:b7:88:14:e4:a2:0b:4b:f8:55:b5:
da:d3:e0:6d:81:d8:6b:9f:a7:c7:e9:21:8c:b9:62:57:99:d5:
3c:1a:6a:12:b4:8b:3f:ea:00:dc:f0:c8:7d:a0:28:77:91:49:
1b:9e:33:09:2d:81:24:b0:aa:19:10:aa:d3:50:68:c0:19:db:
6f:a6:86:7c:4d:36:df:be:59:80:f8:c6:39:14:25:8f:94:06:
e4:e4:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:50 2025 by rpki-client