Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: DaHVe5yyRZMDk6MprTnKM3SJ3xzbREsfuX890jH4JcQ=
Subject key identifier: F6:4F:F1:6F:30:28:36:CF:46:5B:61:A5:92:33:39:D3:96:26:2A:13
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 0194BCAA39978B649E5FD0C7E9C9BE380D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 05D8
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: seSLwFSB70seFiByLkPEd1SgdscdFL9ToXhksW5qhXg=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:39:97:8b:64:9e:5f:d0:c7:e9:c9:be:38:0d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=f64ff16f302836cf465b61a5923339d396262a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:84:3d:0b:2a:60:2a:92:b7:e7:bd:22:90:
ea:18:3f:7e:0d:0e:d6:b5:f1:57:f9:91:d9:cd:f6:
da:fc:79:e2:8b:15:47:c4:8b:d8:89:84:64:de:ab:
1c:c1:96:74:3e:19:5b:2a:35:0a:db:9c:81:63:9a:
04:82:b2:50:a2:06:d1:4c:dc:dc:d0:5e:16:77:aa:
85:3b:39:a9:1a:db:6a:c3:8c:02:fa:36:e9:9d:bd:
31:a3:e4:31:1f:11:a8:e7:ef:8f:c5:a2:df:50:ef:
5f:9c:67:a0:90:a7:81:49:f6:cd:08:ef:90:c2:86:
f8:45:3e:59:dd:83:32:85:f3:a1:6a:fa:41:7c:d6:
93:30:41:72:a1:31:4f:66:a7:4b:be:98:ad:d6:2a:
48:e2:6f:e1:43:6d:ac:f2:9b:cd:90:ba:f5:56:a4:
d2:2e:ff:5d:ab:ad:39:26:30:e1:e7:c8:63:f5:47:
5d:07:df:ff:ee:fb:de:e3:97:b0:f4:f9:07:fa:96:
00:75:39:af:26:ae:a6:e0:10:be:c6:d4:bd:a3:5a:
92:fb:2c:51:ea:22:43:ac:20:2c:d0:34:55:98:51:
df:6b:0b:5f:08:ff:4e:14:a1:98:e9:40:eb:4a:1c:
d2:00:83:f0:10:90:46:ec:ce:27:0a:b1:73:29:1f:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:F1:6F:30:28:36:CF:46:5B:61:A5:92:33:39:D3:96:26:2A:13
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4a:d9:53:1a:3f:7e:82:be:02:78:05:3e:67:11:9a:42:90:
89:fb:cb:61:c3:9d:4b:2b:e6:cd:1a:2a:ce:fb:1e:7e:b7:72:
63:ab:46:dd:9c:52:73:94:71:e5:88:95:34:8d:58:00:e7:e7:
b7:ea:b0:e9:42:d6:f6:03:7c:26:ed:2f:d2:e9:1a:4b:0c:fe:
16:de:b0:d8:7a:54:c6:61:ad:9d:8b:31:59:81:ca:d4:fb:4a:
24:a5:61:75:5d:b9:1d:30:25:09:01:4e:1a:97:f0:b3:3e:45:
ca:16:a7:00:58:35:c9:b6:70:64:f1:9b:e5:93:7f:3e:8a:ee:
af:5a:27:b9:b3:ad:4e:3c:4e:87:af:96:f4:0a:c5:e0:24:e8:
b2:d2:1f:26:a9:27:7b:79:7a:70:c1:b1:1b:50:84:ad:37:48:
e0:52:b5:4d:81:63:6b:fc:d2:da:b6:3a:96:77:80:98:bc:db:
e4:77:45:3a:e8:8e:0e:13:2e:be:74:38:1f:65:bf:bc:aa:e0:
4e:e5:cf:67:d9:28:df:b5:b3:b9:0c:de:13:c7:ff:97:31:13:
13:1a:3a:c0:87:74:73:96:f0:b8:34:af:c0:7e:1f:49:b7:ea:
6d:86:cf:61:c6:a4:42:be:b3:1f:ed:d3:7f:34:a2:3a:5c:b9:
96:2b:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:02 2025 by rpki-client