Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: ItXHnurrxt3oGU+Scy3UyDFXsKCev9McfIHh+k5rXYE=
Subject key identifier: 28:C8:F1:A5:DA:D4:01:5D:B1:29:A1:1C:5E:80:B5:4F:EF:AD:7E:B2
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 0194BC04F793DF3B9B2A6FBD8CC475704D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 116C
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: vO+mqMuXeLIFqf99v5OwuDbgNr25aGCnQXTGOTGtYkI=)
2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f7:93:df:3b:9b:2a:6f:bd:8c:c4:75:70:4d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=28c8f1a5dad4015db129a11c5e80b54fefad7eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:50:53:49:12:30:e8:e3:f6:54:6d:32:5e:
6c:cc:21:cc:4c:15:ec:0c:01:30:2b:55:ac:bf:d7:
9d:a5:92:cb:99:2a:43:f9:2e:ed:e3:e9:86:d6:99:
f4:de:ef:3c:d0:c8:6d:a7:ad:56:51:68:ed:bc:d4:
a2:70:47:80:e6:29:68:87:5b:82:80:3e:f4:2a:99:
b1:ab:cb:d7:f3:d8:07:a7:6b:96:2b:c0:27:ee:56:
60:2d:47:90:2d:bb:ae:3f:8e:8a:b3:f4:ba:27:a3:
eb:16:ff:c5:7d:ba:ce:5e:96:44:47:e5:74:d2:a7:
ea:45:df:4d:14:60:2d:d0:95:cc:dd:63:07:1a:a9:
dd:09:96:e8:6e:00:1b:30:70:2b:d1:38:e5:7f:c9:
73:3b:89:89:d0:f6:a5:1c:ed:d9:62:51:cc:8c:58:
f1:13:44:d1:2e:ab:40:8a:07:b9:e0:73:0e:2b:ed:
4a:74:1c:4b:b2:9b:14:ba:38:6d:fc:94:ac:b4:e3:
00:5e:fd:c6:89:ee:be:0a:19:4f:3b:b1:b1:07:1d:
98:11:21:b8:63:57:7f:65:be:8f:df:d0:0a:2a:d9:
c5:0e:cd:f4:7c:c9:21:8c:49:41:2d:c7:0d:35:6e:
c5:68:50:e5:ef:ed:51:01:4f:c4:51:c6:8c:8b:f2:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:F1:A5:DA:D4:01:5D:B1:29:A1:1C:5E:80:B5:4F:EF:AD:7E:B2
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4f:37:69:8a:0d:c2:d4:68:e2:af:72:0b:ab:dc:37:8c:0a:
17:10:02:14:e6:c8:88:9e:73:8e:df:a3:d0:4e:db:35:f4:a5:
56:c8:23:4e:67:0a:0e:27:b1:88:1f:18:26:d2:fc:a2:ba:18:
bf:9b:94:64:a1:1b:c6:89:17:6f:bc:d9:a0:4f:de:9b:15:8b:
37:08:b8:7e:c2:39:4a:64:42:0c:1e:c1:46:09:63:24:05:eb:
b0:2b:a9:3f:c1:42:5e:16:4c:a0:6e:bc:1b:83:03:9f:a3:76:
fc:23:b6:e1:ec:e5:85:f8:01:b7:97:e5:11:a5:6d:f0:43:00:
f2:51:f6:1e:ab:fa:45:0c:ae:01:44:b7:8b:24:7d:e6:a6:1e:
98:37:46:10:03:eb:6b:19:dd:7e:09:4f:5f:a8:ee:9d:61:a1:
56:f7:f2:f3:33:ee:31:48:08:8a:4e:2d:f8:68:c3:25:09:0a:
02:50:66:8a:61:ef:97:bb:9c:e0:36:0a:ee:21:f4:35:ae:72:
34:47:23:3a:c4:45:08:ad:21:24:62:d6:94:e5:ff:a9:0b:f0:
8d:d9:ce:e1:eb:e6:d6:50:67:e8:bb:b0:97:08:54:33:ef:ec:
c3:05:b6:d6:7f:0c:84:e3:6c:55:aa:67:9d:92:1c:7e:d6:5a:
dd:8b:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:44 2025 by rpki-client