Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File: l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier: BdmE0c6O5WzBCkIyCZSgqGRMuqGzetCoOSd4PvVD2gw=
Subject key identifier: 86:C9:B8:92:C7:40:4D:DA:95:2B:55:1F:86:70:29:10:FC:49:EB:0D
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 0194BCA969D97923A0A9FB89A9372E83D072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: CKD_EzJsFpUNnoX4pjrt6UNhRQI.roa (hash: Er1sMrbr93QbR3Zv9Y+teqxvcF75+o/fSwKjskRLW5Q=)
2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
3: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: iZgooOxUvn15ZxntpwqJBSRe+iTyeIypbi3xPxX5d1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:69:d9:79:23:a0:a9:fb:89:a9:37:2e:83:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=86c9b892c7404dda952b551f86702910fc49eb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:8b:93:47:6c:e8:f9:8d:de:84:ee:1a:2c:
bd:a5:65:04:97:ba:ce:cc:98:bd:45:14:21:5b:9b:
09:52:b8:8d:c9:7a:c7:4d:bd:9e:33:23:87:69:ac:
34:da:98:01:ab:b3:75:e7:b2:89:46:54:be:12:06:
4d:a3:b3:fb:da:fc:9c:81:c8:fd:a1:70:bb:6b:b3:
1e:21:f8:15:a8:f3:01:a3:04:8b:bc:1a:7a:c2:15:
6d:5c:43:2b:e8:02:3f:ba:19:ed:73:ba:da:a1:8a:
e5:34:44:c6:4c:2b:43:61:86:a0:21:93:ea:b5:0c:
40:3f:70:7f:6a:19:7f:3f:12:1b:14:bd:4e:1c:65:
58:1d:5f:0e:2b:88:bf:d1:0b:0b:b7:2e:45:91:cd:
68:89:4c:48:bc:f8:14:40:81:57:13:77:43:e2:4b:
b0:4a:c2:50:ac:2e:a2:ef:53:95:9a:f6:5b:31:04:
0f:76:12:5e:0f:47:4e:7b:27:33:c7:33:11:d8:69:
44:1b:30:9f:a8:9e:f6:70:d6:91:28:fe:f7:5b:58:
84:87:e4:d4:8f:f2:d9:74:c0:b2:dd:b0:e4:7c:09:
65:3c:6e:df:71:4f:2f:82:9b:6b:ad:d3:9c:a8:1b:
35:2b:50:65:70:ef:54:e5:b0:11:aa:e0:1c:c1:6a:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C9:B8:92:C7:40:4D:DA:95:2B:55:1F:86:70:29:10:FC:49:EB:0D
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:43:1c:6b:43:66:6a:f2:87:07:7e:c6:8d:88:09:e0:7c:
aa:1d:69:2c:3c:7e:b9:b2:f7:0d:ee:86:e7:ac:50:21:ce:0a:
92:e7:b8:d1:aa:b3:c3:53:9f:09:db:0a:aa:72:d2:65:59:d9:
1d:93:a1:00:1a:6b:9e:78:ae:1f:40:70:87:97:66:27:ce:5c:
4e:54:3b:1a:c9:69:66:7a:4c:d9:0f:1b:c3:ca:7d:1c:92:66:
a3:95:07:28:1d:f6:4c:68:22:a6:5d:8e:39:a9:0a:9e:8f:87:
6d:84:73:af:82:c3:8f:f9:b0:16:a2:dc:b1:e7:d6:ac:f4:13:
83:3d:75:91:e1:47:c7:fa:16:0b:ed:69:b2:38:63:a5:08:a5:
72:1b:00:57:5c:b5:55:d0:43:e7:9e:66:62:aa:85:99:1e:dd:
42:b4:a7:8e:f3:d1:81:c9:35:43:2a:00:28:b1:37:e3:0d:cc:
ff:47:86:83:1d:63:ef:4c:0c:ed:a1:83:a1:d5:a0:84:03:88:
81:4d:40:00:9f:d6:9e:53:f3:d1:96:de:98:de:16:82:42:f5:
8d:16:2e:eb:77:e1:b5:4d:68:5e:3c:ed:68:c2:f6:31:b0:fc:
54:50:62:ee:30:e2:7d:cd:c3:fc:3f:be:64:14:f3:93:6c:2b:
ec:27:40:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:29 2025 by rpki-client