Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
File: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft (raw, json)
Hash identifier: QSQGQD9ZCeZtxSFdrcjlVNLdiSEb9s/ngPvGickLeFU=
Subject key identifier: 6C:CA:2D:BB:24:F9:8E:AC:44:94:08:B2:B1:F9:69:AE:88:83:D2:4F
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 0194BCA9C2B83EB9F8558AAF05B5453E72D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: bdAF9viIHB5V5FhTALS-owQhcks.roa (hash: lPv9YsuyVHwxqfP/RRJpZeMDZjwRG/d34AhteS5V7Ew=)
2: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl (hash: ZVb/k5vfotR5QZlbi9KPdhty5ACh42jHfjy21lVge+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:b8:3e:b9:f8:55:8a:af:05:b5:45:3e:72:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=6cca2dbb24f98eac449408b2b1f969ae8883d24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:2a:44:3c:d7:12:bb:70:ac:37:62:20:be:
b8:3a:f9:2a:ba:cf:e4:b0:c8:7f:5c:bf:04:eb:35:
f4:61:18:db:0a:48:4a:51:0a:cb:00:98:5b:66:4d:
80:18:4b:7c:cd:e7:a4:71:f8:83:a1:78:cf:8d:63:
b4:8f:10:97:ab:65:a5:7b:ec:c1:59:01:a0:78:ed:
79:ca:02:1c:50:f2:c0:5f:8b:1a:c4:3c:7a:d5:e9:
0a:9e:93:a3:a6:e0:38:4d:68:d1:88:da:e3:b9:f5:
aa:42:8d:2a:b4:cc:e6:30:42:33:1b:a6:41:bb:5e:
39:c1:2e:7e:19:2e:22:70:2a:75:4a:84:6e:b3:a1:
66:b5:77:3c:eb:ca:d9:e4:ab:7a:7a:3c:52:0b:f8:
7f:b1:ed:50:6d:6d:ab:f8:3c:f6:c6:38:89:5d:a0:
89:98:dd:61:ba:15:81:15:95:8b:45:69:23:8c:ab:
36:d9:b5:b6:12:69:76:89:de:33:ec:d5:f8:35:5f:
28:5e:71:7b:06:83:7b:cf:7e:da:b6:00:0a:08:b3:
95:d1:0e:87:f7:0a:a8:93:0c:6b:8b:62:88:c1:2b:
94:75:73:0e:e8:04:2c:81:70:f2:24:5b:85:2e:cb:
26:ee:10:8b:54:f5:81:0b:8e:a3:ac:e9:9b:74:53:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:2D:BB:24:F9:8E:AC:44:94:08:B2:B1:F9:69:AE:88:83:D2:4F
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:43:fd:94:00:19:28:c9:1c:69:6a:3c:8c:8f:e5:2a:9c:54:
4d:00:23:c1:f9:85:b5:50:f8:0d:ff:ae:14:75:65:b3:47:90:
12:c4:a9:e4:58:dd:25:32:06:65:95:8a:01:f8:bf:9c:42:ad:
1b:78:22:00:34:29:f4:49:b8:95:11:e3:90:4a:de:ea:00:97:
b5:81:a7:13:6b:15:11:a4:a1:87:9c:a0:70:4c:ae:c4:e7:41:
c3:4d:ba:32:ef:da:23:56:5e:4c:91:ff:15:6a:8b:9b:a9:f8:
82:08:2a:c8:67:c6:3c:42:44:6f:62:96:3b:f8:34:ff:94:f0:
64:dc:f1:f6:03:75:d7:86:f5:6e:7c:32:69:bd:9b:2f:06:14:
f5:ff:e3:69:a3:43:c6:d9:d7:9e:a3:9e:f4:9f:2f:72:ce:e4:
92:2a:79:74:37:9d:b4:72:9c:0e:c1:8f:5b:43:59:ac:3d:81:
a7:46:a3:ff:06:a4:3b:73:18:a4:0c:85:bc:7e:97:6a:29:69:
6c:6c:b1:b0:61:98:98:8b:fd:56:94:74:bb:b1:2e:67:b7:a3:
51:de:30:52:43:6f:f7:e7:38:f8:4f:f0:2e:5d:82:b0:f1:2d:
da:53:22:62:0c:b5:de:9e:f3:0a:69:19:94:59:d7:b9:0d:9a:
a7:d7:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:46 2025 by rpki-client