Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: FJ9dUyK9zbW0qrrtlP7hLzv5/hHu+5CNwipsNlp9OO8=
Subject key identifier: 10:05:86:FA:BE:E4:95:4E:2D:73:9B:45:47:48:10:83:C6:30:1D:53
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 0194BD85366DD68A76B80A44BFDFC96F20D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 2E
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: dIg4TNKkMSnsTJTQVJ3Ejrbskbc.roa (hash: PWSy8/5JjoBCA/zGiy62FNSv3d86zc+ySEbRw/F/ETk=)
2: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: nGY6y8GeCEUOY2imAHPDTqdD18a/8LK8F0+LfNOz1wc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:36:6d:d6:8a:76:b8:0a:44:bf:df:c9:6f:20:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=100586fabee4954e2d739b4547481083c6301d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:3d:00:d4:04:fb:3c:20:81:e8:fc:35:7d:
58:08:da:d5:57:df:2d:83:bd:8d:e8:20:5a:f1:c1:
27:44:1a:04:6b:5d:66:ff:e5:ba:95:4a:cd:1e:a1:
5a:a7:19:ea:06:e1:79:f4:10:f0:3d:ca:1e:07:22:
06:fa:2f:ed:d2:08:8e:99:ff:1d:73:30:bb:4f:1d:
ae:82:d5:01:b4:4e:3e:5d:ee:b2:0a:b3:d7:46:ff:
fa:4f:b7:b2:10:a0:b7:09:46:7f:fb:73:d0:4d:5c:
71:dd:74:54:89:e8:8e:81:4e:dd:e7:0c:2b:74:34:
1c:44:9c:79:68:e1:f3:e2:11:57:9c:db:0c:db:3d:
5d:55:66:26:19:84:66:3c:47:ba:f8:99:b7:2a:c1:
aa:59:95:63:44:7b:dd:d7:47:a5:df:bf:99:ba:53:
93:31:75:c4:de:a8:b2:fe:ed:02:7a:b7:c5:9c:61:
c3:f0:ac:cf:90:af:8d:0e:cf:3b:17:b4:26:09:c7:
7b:44:07:41:c1:7d:ff:0e:f6:cb:82:88:d2:28:49:
ef:e9:c6:ec:f3:9f:a9:63:b0:75:31:9d:11:aa:d9:
a8:50:0b:cf:2a:92:dc:3a:67:cc:97:42:5c:e4:c2:
b7:e5:53:e2:1b:3a:69:49:be:9c:28:95:d2:18:41:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:05:86:FA:BE:E4:95:4E:2D:73:9B:45:47:48:10:83:C6:30:1D:53
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:2e:77:f1:2b:f1:54:16:f2:1c:5f:57:5e:06:3b:44:e2:
b7:51:f1:9a:62:71:49:19:88:85:c4:ef:06:af:3c:46:b4:77:
af:23:3d:1d:4c:d9:5b:31:9e:15:2c:dd:5e:f0:5c:c2:72:19:
2b:28:aa:6c:95:38:64:3d:d4:cc:f8:90:00:d2:93:67:a9:a0:
56:22:31:e9:5e:86:74:a3:f8:b1:15:fe:de:aa:61:f0:8c:12:
3d:20:0f:fc:4a:6b:6a:83:d9:61:8e:c8:9f:ac:54:ac:e7:79:
d9:dc:62:14:b0:95:cf:82:9c:c4:f5:11:3a:60:5c:1f:95:8a:
7a:bc:83:1b:4c:71:66:dd:05:f1:07:8f:50:47:54:20:08:02:
e5:84:76:ac:70:e4:19:21:54:6f:2f:06:bf:be:66:23:9f:6a:
91:b5:68:6e:bb:e9:10:a3:e5:5c:63:e7:a7:2a:eb:a7:6a:70:
c4:f1:9f:7b:8f:e1:16:54:20:4c:6a:d2:4b:3e:b0:85:09:bf:
2f:c6:43:63:79:ee:de:73:e0:0c:02:34:78:57:c3:b4:dc:c6:
51:be:95:b4:c6:32:6c:e5:3b:2f:b3:7a:f5:ce:67:e4:ab:71:
ae:2f:d7:cb:12:03:47:75:84:28:8d:91:3e:ae:77:5d:74:3d:
cf:8e:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:17 2025 by rpki-client