Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: x5xY1OegwuNip57Sgb+9sUO9WWYKVniBrL0ouRNCWUY=
Subject key identifier: E4:64:4E:C6:2C:99:D2:A5:E9:6C:BD:E9:2B:8A:99:6E:9A:C8:97:9F
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 0194BCA9E64EFC8D7E9B7D9832D0810F4084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 1413
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: U9S0iHbVcceW2GW91Szn8OAZ89QELOqIJ5kEsIDWM/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e6:4e:fc:8d:7e:9b:7d:98:32:d0:81:0f:40:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=e4644ec62c99d2a5e96cbde92b8a996e9ac8979f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:ac:ba:cc:88:ea:1b:eb:05:d1:da:ea:5d:
fb:68:0a:f8:73:fe:aa:30:0b:3c:26:a5:a0:ab:c7:
28:52:87:6c:07:64:f4:50:5e:3d:61:20:03:f7:a8:
eb:ad:c9:46:78:a4:ae:78:01:c5:5d:1b:af:e3:a6:
6e:30:65:11:80:b3:6c:f0:38:84:4c:90:42:06:2c:
29:ca:62:8d:03:a8:3c:a5:b1:c8:c5:9c:ca:bd:78:
c7:9e:46:5f:98:f0:88:bd:64:44:4f:92:4e:f1:ea:
6b:bc:9b:96:68:80:99:8a:0c:45:53:70:0f:fa:8b:
6c:a8:29:f9:58:44:40:73:e1:1c:c8:52:0e:81:c4:
c7:44:b3:fc:f5:39:8c:08:f0:91:75:ee:cf:6c:29:
c6:22:fb:98:2f:05:a7:99:91:37:0a:87:46:05:42:
dc:e6:d6:a4:0c:d8:5e:de:c2:b4:2e:49:2c:80:29:
b4:27:95:b7:0a:ea:12:36:90:fe:bd:1e:de:80:c4:
fb:45:40:62:14:cc:59:03:5b:74:31:de:90:e7:b2:
99:cf:dc:27:29:6c:f6:ad:c2:98:52:57:37:9c:1c:
a1:6a:6d:e1:98:32:de:d1:52:a5:c9:88:43:41:8b:
8b:5a:98:e6:09:78:43:02:c8:78:48:e2:b8:ec:84:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:4E:C6:2C:99:D2:A5:E9:6C:BD:E9:2B:8A:99:6E:9A:C8:97:9F
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:62:78:bb:e3:4e:ed:c6:2f:2f:3c:e2:0f:5c:16:d6:ea:2a:
a8:87:f5:e9:0d:1b:15:9f:94:62:cf:c1:6b:b3:fc:19:7a:72:
47:81:09:aa:a2:e5:da:32:42:9e:7e:fa:01:9a:10:28:27:1f:
d1:00:98:25:d4:42:d8:cf:55:65:ee:ff:06:38:bb:a3:8c:5d:
32:e5:5d:ef:4e:94:e0:49:95:33:ef:ac:41:bd:ab:5e:45:13:
6a:85:d6:c9:07:f8:95:87:db:cc:11:4f:99:95:45:e7:e7:b0:
75:cc:12:16:c0:ed:06:be:bb:e2:75:93:27:a3:40:95:25:54:
6c:27:be:00:9b:5f:11:05:aa:4a:70:b8:05:5b:56:67:5a:3e:
11:ad:b3:0e:ce:73:60:f5:f3:5b:bf:9d:66:5d:72:cd:c6:88:
c6:01:ac:d5:9f:a3:82:0b:ef:28:1e:5e:43:18:fe:ed:8d:5e:
e0:cf:31:b2:5c:11:2d:7b:ec:34:de:59:21:ba:20:1f:d7:d0:
63:b6:b0:79:2a:c2:6a:14:53:43:5f:dc:75:60:80:26:1a:d1:
62:c8:66:c4:a2:56:67:52:fb:47:70:76:a0:02:28:8d:c2:dc:
f2:26:25:30:4a:77:b2:a1:72:ac:c3:e3:8f:8e:12:9c:8e:1c:
3d:e8:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:37 2025 by rpki-client