Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier: Iehqc2dmCtc1s3VjVBBVbh8fqIcyMZgJKdiB5VXgi6Q=
Subject key identifier: E0:E4:EF:20:C0:84:40:C5:93:F0:C1:7A:82:52:BC:E4:FA:7B:BC:3B
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial: 0194BBCEEB6D1F116C0B55862B16C536C0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number: 04A1
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=)
2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: GreW3JMVndh1z06YSx69f7axGeIb3BEhFW4gc5B8Uu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:6d:1f:11:6c:0b:55:86:2b:16:c5:36:c0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=e0e4ef20c08440c593f0c17a8252bce4fa7bbc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:9d:71:e9:c5:06:db:3a:4d:b7:ba:0b:db:
f8:f2:fe:8c:81:d5:17:68:52:6e:b5:f3:27:d1:4b:
6a:c6:ec:ca:bc:e3:03:03:93:cf:2c:2a:e2:68:08:
91:aa:2e:9d:63:e8:ba:db:55:2a:ac:c7:99:6d:32:
32:38:17:41:f5:35:ff:86:07:8e:f9:7f:c5:8b:ea:
ac:a0:96:22:fe:9f:bd:dc:62:c5:bb:f4:4c:4d:7e:
fc:cd:a9:00:47:f0:12:bb:c4:6d:12:54:3f:67:49:
af:37:a5:68:d7:92:95:da:5d:d7:ff:59:27:c3:19:
d2:54:f2:45:ee:fa:d5:31:a6:d3:99:ae:c0:cc:f8:
9c:c8:d9:12:97:45:b7:7f:24:68:bb:7b:b6:83:2f:
56:4f:bb:92:7a:b4:70:ed:92:60:58:fd:df:3a:61:
53:e8:a8:bc:b7:59:b6:45:58:4f:39:76:fb:3a:6d:
0c:33:56:91:42:ed:f2:0b:79:d2:88:f1:33:8d:50:
de:98:ee:6e:e6:98:6b:61:1d:43:a4:09:a6:88:49:
83:f7:78:46:55:19:41:82:4a:e2:0b:e5:b3:64:b9:
12:15:0f:7e:eb:10:89:36:5c:61:9e:83:8f:15:1e:
34:c0:88:30:7c:cf:cb:bb:76:85:29:2e:66:31:8d:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:EF:20:C0:84:40:C5:93:F0:C1:7A:82:52:BC:E4:FA:7B:BC:3B
X509v3 Authority Key Identifier:
keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e4:8f:46:ec:05:1e:a0:d9:22:9f:a7:ce:3e:54:e0:b2:6d:
3d:1c:6c:89:b2:4c:82:8c:eb:88:08:1e:f3:4b:43:d6:fc:3a:
4d:8e:83:71:ca:f1:1c:82:45:ff:0c:fd:6d:2a:95:c4:b7:52:
64:fa:8e:9b:90:2f:70:e2:d5:a4:89:48:48:0b:51:7d:4d:b9:
29:18:d0:30:64:0c:6c:c3:86:ed:5c:96:11:8a:90:dc:30:1a:
b2:c6:8f:3d:c8:27:27:23:03:79:b8:a8:32:f4:9e:fa:f5:60:
9e:74:d5:ea:b3:b2:7e:c0:a0:fc:b9:e9:fd:b4:5f:6c:88:b1:
36:69:2a:e0:12:b4:14:43:13:a9:8c:e8:c6:17:4c:07:a5:e2:
d7:53:33:59:08:cd:e7:b0:17:6b:ed:d6:34:82:00:0e:46:bf:
12:27:a3:ee:2a:91:5a:eb:58:25:00:49:3e:2d:18:18:fd:78:
90:c5:26:92:64:b2:48:d1:42:94:5e:12:10:83:06:a4:67:c6:
6a:69:b2:c0:82:3a:ab:58:9e:62:58:cc:bd:a2:dc:d2:d2:fd:
c8:83:06:f9:43:69:8d:81:24:13:59:7f:5d:ef:5f:8a:29:4e:
d9:7d:c6:19:75:fe:11:8f:71:05:a1:01:85:f3:23:b5:07:aa:
61:ce:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:33 2025 by rpki-client