Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: LkXIYa+7bbxJ9tt7o71H36+B+n8W2f4WwolO17gqlLM=
Subject key identifier: AA:07:B9:16:21:BE:5C:F4:00:5E:4A:7C:0A:DE:72:07:77:03:A5:4B
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 0194BD852E2EE55C0FD78E2733D51C5E737B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0926
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: hGyAvx0z+JGmpmtdLjLcujPGe48aAeso7gnaFbTS/wM=)
2: wvepJ_S5tr7m_zhxo8MkVscbOBo.roa (hash: 3bW1rADdI6dgzgPslPIXDLnlwFBtZeQLDvcY24JdJFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2e:2e:e5:5c:0f:d7:8e:27:33:d5:1c:5e:73:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=aa07b91621be5cf4005e4a7c0ade72077703a54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:03:84:24:f1:a8:23:fb:1f:dd:0b:22:ed:
bb:fb:22:70:48:a4:a5:d4:67:cc:d6:6a:c3:2b:09:
c9:a6:28:04:5f:a4:cf:5d:49:fc:fc:15:cc:88:b7:
05:ca:da:92:10:c9:ca:3e:bf:d1:39:47:1d:a9:e3:
fc:4b:67:a6:06:40:eb:fd:0e:e9:4c:ba:bd:fe:40:
f6:54:ed:2e:9d:fa:9a:8c:a6:ba:3c:1b:86:bc:2e:
32:12:99:28:de:ad:74:fa:1e:22:45:a2:bb:6e:34:
ec:74:01:76:8b:cf:87:41:ed:38:c1:fd:c7:24:25:
2e:c9:16:27:2f:db:e7:58:99:c8:19:20:53:ae:8d:
bd:9f:8e:a2:b4:d7:30:01:4f:bd:e4:55:ef:de:f3:
43:0c:0e:a6:21:77:c5:b7:72:9f:f7:c7:82:06:7c:
10:7d:1a:3d:7b:17:9c:9f:4a:5d:de:5e:ca:cf:64:
9e:ec:2c:d5:a7:26:ca:8c:6c:87:7f:67:10:dd:09:
2f:7a:4b:bb:36:0c:0e:b4:d0:25:b4:9c:db:dd:a0:
91:07:ed:e9:ba:87:ea:26:d1:a1:b2:f1:f2:a6:bb:
b7:fb:55:d1:5d:72:1f:53:05:cc:a9:a7:aa:c7:7d:
17:36:82:b0:e4:d9:cb:ae:87:8f:42:9d:4e:4d:56:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:B9:16:21:BE:5C:F4:00:5E:4A:7C:0A:DE:72:07:77:03:A5:4B
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0c:96:c8:04:25:1f:a4:fb:8c:ee:6e:75:fa:3e:82:9a:3f:
3a:41:68:db:71:5a:da:59:0e:54:01:c4:3d:25:83:66:b5:32:
8c:62:1d:80:a0:f4:1e:0f:30:cb:2b:fe:80:6a:f3:62:1f:1f:
95:5e:9f:2c:81:1a:58:b3:5a:88:c6:74:42:58:5b:c7:e8:ea:
76:4c:97:8a:be:f3:77:4f:28:49:06:ba:89:34:93:8b:6c:40:
c0:e3:c7:62:cc:72:b9:f8:e5:b0:41:39:e4:2c:b2:fd:d4:1f:
9a:e5:0d:bb:7b:0f:3d:e6:84:bc:fa:ad:d5:be:e0:bd:72:1a:
07:85:c8:4e:31:ba:b2:71:03:53:63:79:4e:ac:1f:fd:58:e2:
5b:e3:b0:52:22:56:f1:f8:3b:e5:5a:54:62:7e:10:fd:48:5e:
42:53:3e:63:37:e4:64:71:f6:ba:a6:71:78:34:17:3c:1a:d4:
cc:4c:6e:d4:29:af:b4:e7:0f:e9:ec:dc:f6:f3:a8:9d:29:cd:
0d:f8:a3:d4:c5:15:56:b3:1c:80:5c:ea:b9:82:5a:80:4f:b2:
b7:8a:57:00:90:66:46:2a:ae:4d:12:8e:53:40:55:15:4b:7d:
dd:5a:b4:ac:ab:a6:62:a0:23:2a:69:b3:bb:6a:09:46:c6:6f:
b8:4e:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client