Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: uCsB7qui3DhHv6X+jDYUybTDPu/bMHeXI5OdQo7EDJA=
Subject key identifier: CE:AE:39:58:CA:06:93:D1:9E:57:1C:A6:57:74:09:AC:46:AC:78:1B
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 0194BC3BC1AC40D1B7717BFB15972EEE9B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 04A6
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: x6t9cLr2CK70hg7DrpS+bHHWofJ+WoB5aOrElot7590=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c1:ac:40:d1:b7:71:7b:fb:15:97:2e:ee:9b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=ceae3958ca0693d19e571ca6577409ac46ac781b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:1e:95:74:fc:36:b7:3c:87:93:22:c5:37:
77:69:71:d5:26:97:ee:57:8b:e0:1a:ed:48:a2:b7:
b8:f6:54:88:79:d5:d7:3b:29:a3:5c:5e:21:8b:6f:
bb:89:e1:5d:e3:2b:23:7f:57:e7:ea:bf:f4:ef:94:
02:21:9f:99:4d:06:37:64:b5:1c:5d:5f:d6:e2:9c:
b4:99:d8:e3:a4:ca:65:ef:39:fa:37:5f:d1:ea:01:
b2:68:1f:ff:70:0c:c4:be:33:2b:5e:0b:33:2d:78:
a0:22:24:a2:0b:48:0d:49:2c:cd:99:0c:ad:d1:15:
60:bb:66:7b:9e:c6:fa:83:78:8f:e6:53:f4:96:a4:
0f:38:d0:0c:fb:84:ab:7d:74:43:da:e2:ff:7d:43:
ad:eb:c4:e7:e2:e9:23:0e:c1:23:b0:9c:d5:76:3d:
9f:e1:e0:3c:12:72:3c:98:af:65:ff:5c:1b:66:a7:
9a:8d:40:13:15:86:b9:3f:3b:0d:51:a5:c4:53:39:
7f:d8:72:59:e0:01:55:7b:3c:7f:f0:a7:14:5f:33:
3a:cc:f6:a7:05:6c:17:c2:53:d4:c9:7f:e3:a9:70:
e5:77:6a:91:c2:f8:13:f4:2a:18:f0:9c:2d:fe:a6:
4e:db:e3:ca:4c:75:f4:fd:e2:e8:14:88:e5:25:d9:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:39:58:CA:06:93:D1:9E:57:1C:A6:57:74:09:AC:46:AC:78:1B
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:58:b7:64:55:26:83:de:c7:7a:3a:48:0d:67:60:ac:15:
10:2e:10:1f:07:ff:b7:ca:52:84:e5:1a:b0:ad:51:d8:3e:c1:
75:b7:ac:84:28:d3:96:45:68:13:91:66:55:1e:aa:0d:f1:db:
61:ad:f1:d7:af:e4:b8:5b:17:7b:87:1b:69:37:a9:41:dd:f9:
1e:cb:ab:d7:e3:a3:b1:5a:b4:b8:35:1b:71:58:5c:1a:c3:0c:
39:cd:c4:15:33:5e:07:1c:81:79:49:b7:ff:9d:5b:b0:82:94:
4b:f3:38:d2:e7:db:4e:7e:15:3b:9b:69:04:2a:ad:3b:d1:e0:
6a:06:73:3d:5b:f4:e3:02:55:e8:4f:4c:fe:67:a9:a3:95:67:
d7:4b:dd:af:aa:fa:ec:65:b3:7a:b7:6a:4c:ec:37:08:29:8e:
b4:b8:ab:b4:d6:2b:38:9c:ec:5f:a8:a1:6e:6d:e6:ac:fe:27:
21:58:be:e3:f8:cf:e9:d1:94:80:34:06:37:8f:4c:8c:02:7a:
cc:01:c3:1f:1a:71:88:cf:0f:96:51:74:f0:95:6a:0c:b2:eb:
d4:e6:8c:a9:7f:23:d4:10:1e:b9:a2:ef:a6:07:0d:f7:9b:48:
df:8f:62:9b:72:a3:38:22:ef:0b:54:01:75:3b:1d:18:eb:f4:
2d:bf:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:54 2025 by rpki-client