Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: bpfW7EJrFQL0H9rF4PnJgdHuj+XKwNx9gWaID1A7KWI=
Subject key identifier: 5A:76:06:93:14:06:C3:B5:62:AA:87:66:0C:D5:A9:A7:E6:5B:85:CF
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 0194BD85A9DECA35D607684656212880B6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1038
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=)
2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: JTis0wgKZxgiI/ZwR1dZZMwmdCtqwz34cvSO2Fx80YQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a9:de:ca:35:d6:07:68:46:56:21:28:80:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=5a7606931406c3b562aa87660cd5a9a7e65b85cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:01:93:5b:e6:de:f4:95:ee:c1:b3:aa:fb:
8c:69:6f:8d:26:4d:11:3a:16:fd:2f:fa:2d:2d:e9:
f9:75:a2:b8:9a:00:89:92:d1:0f:33:40:40:6c:a8:
c6:ee:ef:8f:cc:75:f6:da:9c:81:70:ae:00:32:88:
37:c8:fa:53:f2:32:a5:b6:0f:8c:92:84:0e:dd:8f:
28:00:12:af:ed:c7:47:f2:3f:2d:ea:51:13:4e:b9:
98:c4:39:ac:76:3e:2c:e0:7d:97:c6:ac:3d:94:1a:
8f:4a:29:65:79:9e:65:96:2f:ea:5a:e6:73:a5:f5:
8b:4c:ca:9b:28:40:c2:68:6d:a4:b6:7d:fd:93:fd:
f5:09:93:b3:4d:14:20:48:37:62:6d:16:ea:06:8d:
32:cc:f0:95:a6:ac:73:dd:79:20:71:8a:d0:7a:be:
2a:1a:6e:8c:68:fe:79:ae:19:3e:65:e5:43:58:2b:
15:bc:63:da:cb:18:a3:03:63:74:94:e6:30:38:5e:
b9:d0:70:1d:d8:f2:d7:33:35:67:73:0a:81:cf:d4:
03:02:a2:23:0a:a7:2e:eb:9e:bc:7c:1a:74:fb:a0:
d7:c0:52:ae:e5:8f:d7:48:92:c7:e1:a5:0b:78:ee:
6d:b1:9d:73:f5:b8:27:26:78:94:11:3a:fd:5e:d8:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:06:93:14:06:C3:B5:62:AA:87:66:0C:D5:A9:A7:E6:5B:85:CF
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f9:23:96:64:71:31:f2:cc:bc:29:9f:e7:fa:43:52:b6:b3:
7b:2e:25:01:11:77:74:b5:b1:a0:3c:1f:2a:af:c4:76:4a:a6:
c9:16:91:13:87:f8:7c:33:77:84:2e:dc:f3:cb:2d:c8:a2:b8:
59:59:32:9e:cb:e5:43:93:59:3c:1b:67:01:dc:85:6c:b6:d2:
6b:bd:e4:0b:a9:ba:06:68:96:3e:39:f5:bc:89:31:46:62:9a:
38:a8:87:4c:82:fc:04:48:b2:e5:0b:70:79:3e:7e:1e:1b:96:
5c:b1:2c:a3:79:19:90:45:33:be:d0:ab:ab:93:db:61:29:e5:
6d:69:ce:49:2c:16:fb:8e:93:97:a6:fe:c9:b9:39:dd:00:d8:
96:6f:44:22:19:34:e7:58:26:84:9d:3f:88:92:cd:05:fc:af:
df:c0:a2:f8:73:18:c8:fa:62:b2:73:fa:56:86:c0:b3:46:bf:
d0:85:cf:4c:4f:b1:a3:35:86:24:f9:10:5b:d8:d4:a4:3c:10:
09:0a:c5:f8:f5:7c:d7:db:12:8b:67:a4:db:4e:bd:07:b3:52:
89:f0:77:c9:03:80:ef:d1:88:01:cb:cc:23:0e:d5:11:6d:f9:
17:ae:dd:f0:c6:66:1a:1b:ce:90:30:8a:3b:cb:f3:9a:96:9e:
a8:89:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:17 2025 by rpki-client