Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier: laXaPUwHgc+jjJ5vRdlA3Wq5lEzi3r6CAs7QESPpy5o=
Subject key identifier: D5:CC:61:3B:E6:F6:D5:B5:B5:5E:95:11:0A:77:24:1A:05:FB:35:E7
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 0194BCA980670862BC2F303C0BC70BBFD30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number: 121C
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
2: DkVQImbCsVleHHHZYb53DPQtA2U.roa (hash: Mqp2wARLK9ercD1+lXxlReMPN7jDlfCCEgEdsZzLKng=)
3: EChZaKa0Cz2IX4jZxhi7bn8pK6c.roa (hash: vYmi+J93Y9dc2MozCwELd6jXkEqT6SwAGb+op6KYL1w=)
4: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
5: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
6: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: eKnWnn4e5LuZio57AKD8ZelwkVmebakrFFm83pSVylI=)
7: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
8: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:67:08:62:bc:2f:30:3c:0b:c7:0b:bf:d3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=d5cc613be6f6d5b5b55e95110a77241a05fb35e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:2c:6e:23:fa:67:1f:e0:14:ab:38:b9:be:
af:0f:33:ef:ea:1d:ef:6b:3d:94:58:fb:bb:af:95:
ff:a1:da:fe:58:d5:bb:b3:ed:5b:82:c7:f2:94:14:
2b:26:e7:fd:66:90:cc:3a:59:68:45:1f:0f:8c:d8:
1e:ba:bd:ee:21:25:62:1d:65:30:26:4c:2a:fb:1e:
27:c2:4d:ca:ed:b4:07:c4:14:1e:f1:99:09:40:e6:
80:24:bb:5e:16:91:a0:5e:85:66:63:45:18:42:8d:
de:ab:f3:4c:25:c2:78:48:40:c2:09:3a:71:13:0a:
61:60:67:56:3a:a0:ba:74:53:34:1b:b4:96:c6:d5:
43:28:0c:c5:f3:70:36:e9:07:b5:ae:f0:f7:d5:04:
a5:e0:da:9f:b6:ba:1e:37:7f:e3:08:00:b6:e1:4c:
82:d1:69:3b:7f:27:33:04:15:6c:2a:4c:80:ed:1c:
40:2c:3a:78:60:91:15:3b:c2:d7:b2:1a:e0:53:0c:
6c:a1:9a:bd:74:34:96:cb:c9:18:1e:94:bb:97:16:
38:5e:f0:24:06:9c:79:60:e4:5d:04:d5:32:a7:23:
da:37:5c:fb:70:8b:13:39:88:23:d8:54:ed:65:10:
d1:a1:54:a2:58:e2:0a:4e:ca:39:00:f1:00:b4:08:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:61:3B:E6:F6:D5:B5:B5:5E:95:11:0A:77:24:1A:05:FB:35:E7
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:54:e0:cb:de:6c:01:70:73:17:dd:ea:8b:6f:6a:f5:af:3d:
a1:74:17:53:3e:97:02:09:e9:09:d4:f6:29:d7:7d:e4:cb:81:
a3:08:ba:cf:8c:40:96:3e:59:c3:2a:76:71:15:b5:4d:1a:2f:
25:49:9b:26:c6:4f:c1:4c:91:4e:b5:17:a3:99:ad:2a:17:5c:
3c:6a:41:7d:34:01:21:bd:e8:d6:b0:0c:a1:f8:1d:88:14:d0:
a6:b9:5e:15:8d:10:2a:80:2f:04:2a:30:10:ff:9d:81:31:d1:
5f:43:fb:b6:9f:c3:bd:7b:64:74:b7:e1:8e:d2:4d:6c:21:04:
e7:ee:1d:77:a8:39:e7:e6:d9:10:29:ee:dd:c4:aa:47:a4:87:
5b:c8:dc:db:b5:0a:03:e7:d6:6f:4a:01:4c:83:b7:e9:06:87:
e1:b7:36:bb:30:37:58:4b:bc:2e:53:53:3d:e2:4a:af:dc:b7:
bd:aa:a1:5a:60:80:b6:93:fc:0b:70:30:7b:d2:e4:fd:5e:5f:
61:dc:7b:ac:bc:08:c5:1d:ae:81:d3:cd:ce:1e:cf:b5:75:26:
92:ff:95:cd:a9:4b:32:c3:0e:94:f4:59:67:fe:db:aa:ad:72:
7e:90:4a:cd:2e:ec:6a:81:b3:c1:76:69:5e:64:45:6a:54:22:
f5:23:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:03 2025 by rpki-client