Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
File: lWmTFkJJYHEcLo7LU2vdArxyT60.mft (raw, json)
Hash identifier: MvToURpxLSzequWfzi3rs1a6PxG7S1+sco/9uVwAJAs=
Subject key identifier: 2A:49:F8:9B:CF:AC:BE:8C:C9:52:9B:7E:74:83:DE:F2:51:D7:18:AD
Authority key identifier: 95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
Certificate issuer: /CN=95699316424960711c2e8ecb536bdd02bc724fad
Certificate serial: 0194BC728DE5968A380D02B969FC664BF942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
Manifest number: 02A3
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: QlwSz5QY3CNReEwoqy5_qdcxp7E.roa (hash: J1QwLI9Oak3umoZp+VK8k+3z4SfC016Ed6Yx+Y0FOX0=)
2: lWmTFkJJYHEcLo7LU2vdArxyT60.crl (hash: cLvZiPEHt/jkzCEXIT/aN/K1XplUFzdyVZzuB7TEp0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:e5:96:8a:38:0d:02:b9:69:fc:66:4b:f9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95699316424960711c2e8ecb536bdd02bc724fad
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=2a49f89bcfacbe8cc9529b7e7483def251d718ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:5f:23:fa:0f:b4:0e:a8:e6:e4:55:59:76:
8f:3e:ff:ca:6b:e4:5c:6b:34:ac:68:83:e6:ab:e3:
60:b8:aa:2d:e2:dd:3f:a4:c0:dc:74:f4:c0:9a:88:
90:73:c7:5e:33:55:c8:bf:b1:b9:dd:5b:fc:3c:a7:
16:f3:87:7e:37:d6:19:69:bf:1a:c9:77:38:d5:b3:
7d:9b:8b:ae:1c:5f:1e:1d:f5:47:7f:3b:15:8c:a9:
f5:14:6a:3c:a9:28:10:48:8c:9c:70:66:0a:fa:e5:
61:b4:05:7a:ea:3e:67:16:0c:d4:2f:ea:12:e5:07:
23:18:39:a2:05:72:36:08:fc:6e:f4:72:6f:a7:52:
07:ad:e0:a7:ad:90:ec:66:d8:71:77:de:cc:0a:31:
79:fc:70:49:9c:02:1e:29:58:09:94:88:ac:26:66:
c4:d7:33:36:12:22:13:64:d8:72:d8:f6:70:d4:21:
60:26:23:66:63:4b:f7:ca:19:b0:4b:01:15:fd:60:
3c:3e:43:c0:29:d7:69:dd:c8:ef:11:81:82:06:a1:
fd:8d:18:72:7c:d2:8a:9e:95:7d:07:ee:b0:a1:fd:
75:6a:bb:6b:59:29:c2:3d:6e:19:8a:f7:1a:18:c4:
c0:96:ce:85:97:48:13:5b:82:a9:27:0f:77:ac:ae:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:F8:9B:CF:AC:BE:8C:C9:52:9B:7E:74:83:DE:F2:51:D7:18:AD
X509v3 Authority Key Identifier:
keyid:95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6d:44:79:a2:b3:60:06:64:5f:a6:cd:a4:be:6d:5d:f6:8d:
c0:ee:d9:e0:42:89:16:d5:b3:d5:95:8a:9f:d4:55:62:c6:94:
4b:4b:4e:27:be:12:65:77:17:53:c4:fe:7f:dc:9e:6d:79:46:
73:ae:64:b7:cf:8b:8e:fd:11:46:85:39:fc:6c:13:69:bf:21:
df:34:94:08:61:2e:b4:e0:5d:15:39:fe:8a:a7:1a:7b:a8:f7:
b2:c2:dd:6c:cf:2e:3b:d9:b3:58:58:e1:60:02:10:53:a4:6f:
9c:3d:f1:00:ce:89:a5:38:14:c7:91:90:da:0c:58:2e:69:a8:
72:79:04:57:72:90:d0:0a:06:a9:43:6d:f2:11:cf:40:8d:f1:
94:0c:2b:10:17:e2:b1:82:70:34:a9:66:82:f5:e2:4c:37:76:
bd:4d:ef:5b:25:f4:19:7a:25:09:74:28:50:14:97:63:21:27:
a6:3f:f3:df:bd:07:fd:ac:57:7e:19:9f:8d:49:94:87:fa:f6:
98:03:fa:1f:8d:f8:3b:52:3d:b7:6a:d1:fe:bb:09:ac:14:99:
71:a0:21:59:e9:04:1c:66:73:25:81:11:04:23:5f:40:f5:25:
6c:43:5f:54:f2:55:f9:2c:57:06:91:f4:a7:e9:96:19:58:7c:
c8:50:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:00 2025 by rpki-client