Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: LWY/RzNdZT2npdSEvtU89ZKpKdzgzEtQ7SXXUQiXD8c=
Subject key identifier: 8F:23:B5:9C:8F:7A:19:DE:2D:0B:E8:35:9B:D9:5A:74:2B:BE:A8:6F
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 0194BC3C805F0EB4AAFF3BDF15BF83D5256D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: 3Xgc6UfoClmG337fQj2FnxwI9uOod6RMDrnrPtMv6cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:80:5f:0e:b4:aa:ff:3b:df:15:bf:83:d5:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=8f23b59c8f7a19de2d0be8359bd95a742bbea86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:f9:ef:12:62:4d:5d:98:1d:c9:55:44:91:
8b:3b:c3:06:57:d9:34:23:16:41:28:86:53:5a:8b:
45:49:f3:17:38:ce:b0:7d:7b:0d:2f:50:7c:f6:41:
a9:b9:f4:b3:42:0a:20:41:90:2b:88:e1:24:97:07:
e0:cf:8a:10:f7:a6:49:fe:c7:50:43:66:12:ce:fe:
f4:45:43:2e:09:77:3b:95:43:8f:3b:b8:72:f9:44:
ef:62:06:65:54:52:78:58:69:12:87:89:62:c3:ab:
58:27:fd:9d:5e:e2:c5:36:29:a8:00:53:e5:1c:7c:
e1:7c:4e:7f:65:67:19:1e:c0:38:03:f6:5d:c8:3d:
43:ff:ff:ca:ac:fe:a2:88:68:a4:96:30:34:d1:dd:
8c:58:0f:74:24:5c:8f:b4:7f:87:79:d0:01:01:f3:
a4:ef:63:fb:86:64:16:d8:ca:51:f5:0f:fa:62:4f:
b6:b8:44:60:2c:f0:9d:5f:e3:c0:64:e5:32:53:9c:
33:71:02:05:0a:bd:08:bb:cc:04:b2:90:4d:7d:2a:
e4:d7:95:0f:66:1e:a4:51:cf:d6:e3:96:4a:9c:da:
cc:2f:6e:93:1a:fe:fe:fa:f9:5f:a1:9c:ff:3f:da:
1a:34:a9:98:b9:93:14:db:07:bd:10:96:cd:77:d5:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:23:B5:9C:8F:7A:19:DE:2D:0B:E8:35:9B:D9:5A:74:2B:BE:A8:6F
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:81:45:be:a1:0c:78:47:8e:41:3a:0a:ed:8d:f9:07:03:30:
32:ad:d5:3e:da:c7:28:49:33:ee:3e:a0:9f:64:f6:21:3f:56:
62:6c:9f:07:a0:4f:cc:43:a2:d2:89:80:a8:9b:08:92:e5:e9:
45:70:00:62:f1:b9:81:e0:98:48:9b:98:20:fa:a1:dc:f1:b3:
c9:57:6f:d0:a9:d2:d5:24:e4:5c:2e:80:85:a9:7c:75:4d:56:
73:b7:d9:3b:73:a6:8e:9c:f9:f4:eb:d5:69:fa:2a:70:69:e1:
1b:c3:93:e9:5c:66:76:81:b8:f2:7e:f8:8e:bc:ff:98:21:45:
18:38:50:a5:74:48:00:db:7b:a7:0b:8e:5d:da:5d:4c:17:21:
0f:7b:15:d6:81:62:77:17:38:57:cd:e4:ef:00:b8:4a:9c:38:
be:82:41:8f:c4:a9:ae:d9:54:4c:5f:15:d8:6d:83:27:36:cf:
1b:7d:73:c1:74:de:cb:f5:e4:11:08:d6:ad:c8:7e:f4:39:7e:
7c:57:94:2b:e3:48:75:7e:f2:be:c0:5e:54:6e:3d:d6:0a:f3:
61:dd:cb:00:74:74:c4:2e:07:8f:bf:06:c7:db:e5:c3:0f:03:
a5:f8:91:f6:2c:5f:25:a0:03:39:78:26:2a:4b:88:c5:1d:05:
21:af:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:01 2025 by rpki-client