Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: 5/rZfGWXcwSaEVUE9TMSpEkKHpeNJ041Yn0MnalmWvs=
Subject key identifier: DB:9B:7B:4D:A0:7C:4D:FE:1F:2F:20:DC:42:73:9B:89:DD:05:B6:9A
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 0194BD859A6E1AF2C79E1DCE0BA866AA9C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 04B4
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: N+log2TDuOkcZ3+50+97Ryd7Zu3U2f0s2XEmboNF+QA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:6e:1a:f2:c7:9e:1d:ce:0b:a8:66:aa:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=db9b7b4da07c4dfe1f2f20dc42739b89dd05b69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:c1:ef:55:8e:43:d3:3d:8d:74:d1:7f:39:
1f:bc:6d:82:88:e5:2f:67:2b:04:79:b7:50:cf:fc:
a8:fa:c3:34:6f:c2:39:a8:85:e5:07:a6:4a:e6:f8:
b1:7a:21:5b:60:0f:c2:e8:39:8b:61:c0:33:29:36:
7e:38:a0:c7:fe:90:4a:2b:76:3a:ff:d6:a5:18:4b:
ad:8d:0f:32:15:20:02:8e:77:04:83:fc:fa:72:6c:
d5:2a:82:b4:dd:9f:bc:ba:da:d2:23:7c:d2:29:12:
90:9f:e6:78:ba:ba:bb:cb:ca:85:c1:6a:04:b2:62:
9e:5a:06:e1:47:0d:d4:96:26:db:24:3a:fb:f8:9d:
97:43:b3:2b:9a:45:ea:8c:e3:09:d7:90:37:d8:c7:
e5:13:2e:11:62:0c:7a:1b:6a:44:7d:98:7f:37:e3:
43:8e:fa:e4:4c:d8:21:c1:9c:9b:52:25:8b:6f:10:
5f:1d:78:fe:16:e8:f3:cf:85:4d:88:72:91:d0:3a:
d2:a6:99:be:35:61:94:3e:31:d5:9b:d2:11:c5:bc:
ad:43:fd:bf:46:9b:ab:7e:c7:a4:6d:e5:5b:39:3d:
e5:6c:20:c7:6b:fd:a4:f2:09:c0:78:dc:1a:d2:5a:
70:1a:c8:1f:98:73:46:52:2c:07:45:85:ac:bb:86:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9B:7B:4D:A0:7C:4D:FE:1F:2F:20:DC:42:73:9B:89:DD:05:B6:9A
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:04:f8:84:9b:e7:8f:a4:35:a9:43:46:31:f3:d9:91:09:86:
71:29:42:30:07:51:5b:4f:2b:2a:b1:2e:ff:a7:b4:0d:ac:92:
0d:a4:e5:79:64:d6:5b:c9:e6:44:fd:2d:7e:de:79:2c:ef:58:
7c:bc:3a:90:17:0d:d0:49:56:39:a3:e8:eb:5b:c1:99:f8:3d:
35:4c:aa:95:fb:53:54:95:18:b1:2a:bb:a6:10:fb:c6:7d:c5:
18:c6:7c:ee:ee:dd:1f:6d:ba:21:c6:4c:af:6d:dd:14:a3:8b:
40:91:0b:32:16:fa:6d:34:2e:fd:cc:2b:be:68:11:4b:13:2c:
b6:e2:1b:11:00:fb:da:90:88:88:cb:df:60:0d:24:db:7e:1f:
97:0b:95:26:1e:fa:d9:1b:b6:ac:56:7f:ad:14:72:3a:3b:fe:
1d:68:d6:33:da:71:15:44:43:7a:48:de:01:8b:5a:87:da:5f:
37:59:2e:95:37:29:6a:5e:71:a1:b2:bb:7e:67:d3:72:94:f9:
77:92:8a:0a:d1:a8:f5:7b:63:cb:b6:e2:67:f0:be:0e:1a:34:
27:35:ce:23:da:d9:7c:cf:c7:ed:fd:41:40:54:f9:78:af:56:
a5:f1:b3:03:9e:ea:93:37:4a:96:b8:30:0b:61:d8:42:2c:6f:
02:ae:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:13 2025 by rpki-client