Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: WHcs95H/vS48Ixy/Da/zZoVDUiVHZYeYoMrayEeb7L0=
Subject key identifier: 37:94:80:6C:A7:5C:8C:78:55:B3:D1:B1:DE:72:75:E5:C5:20:3D:8F
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 0194BCA9D77D2A3BD8F57E990CEC0EFF41AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 03A2
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: 3_aLlMCZrFNyrDqx_8nf23jx9U8.roa (hash: a8Ve5VVmClDkiSHwLRYAsujqRGwPwv/c9KSL3svTGpw=)
2: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: AK4YtLgQfMs5UNhnseErsCP/V6+xKxtdYCLw2KrXNkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d7:7d:2a:3b:d8:f5:7e:99:0c:ec:0e:ff:41:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=3794806ca75c8c7855b3d1b1de7275e5c5203d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:eb:45:fc:e8:98:9d:76:8f:82:89:0f:38:
a4:73:26:bb:fa:49:ae:a5:64:2f:bd:93:b3:01:3d:
0c:ea:07:e2:a9:ac:78:18:c5:d5:dc:22:57:de:0e:
81:1b:98:0d:da:94:5e:50:7b:e9:61:54:80:8b:94:
7c:67:62:e1:7e:1d:25:e4:41:b7:f8:10:19:9a:3b:
98:78:40:44:80:d5:54:e3:2f:a9:25:22:dc:e1:c6:
3d:ae:3e:3e:b5:cd:72:ac:02:bd:5c:9f:14:df:53:
83:85:ec:20:42:b0:af:21:0c:4c:b2:11:61:8d:7a:
8a:b9:7c:bb:5b:29:71:7e:47:74:6a:59:2d:c3:78:
74:c1:f8:65:67:a1:b5:00:48:8b:11:f3:d4:fa:cd:
67:9c:8e:3c:01:3b:55:4c:49:f8:ca:36:b0:e8:09:
5d:0d:bd:08:3d:65:27:ef:ed:1c:d5:bb:59:43:94:
a5:98:b0:c5:be:b9:73:1e:6f:ab:ff:1e:d8:e6:79:
de:ea:c2:fc:02:4b:66:76:02:bf:5b:67:b6:85:0d:
9d:92:f6:dd:88:51:70:53:2c:32:0f:87:f4:0c:51:
a1:ce:5a:fd:07:92:39:ad:67:ce:8f:43:6e:5c:47:
aa:af:9d:5a:a8:07:93:d6:58:a7:d9:fd:05:a3:09:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:94:80:6C:A7:5C:8C:78:55:B3:D1:B1:DE:72:75:E5:C5:20:3D:8F
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:84:41:8e:44:ad:83:54:c2:d1:bb:10:42:15:8f:79:b2:8e:
f1:bb:7f:78:4b:f4:39:24:8a:54:af:9b:82:20:79:08:a9:77:
8f:d2:ed:be:a2:c8:fc:44:a2:2d:12:7d:1d:c5:4a:33:da:48:
0c:04:6a:61:ca:51:32:9a:4c:1d:4f:b9:a6:15:b6:1d:0b:94:
49:4e:0f:d6:d8:f5:04:7c:8c:54:67:c8:ee:60:4b:a3:dd:84:
2f:ec:72:72:a1:56:b0:f3:58:c4:61:28:c8:bb:5a:a2:80:04:
e4:8f:87:20:f0:64:54:5b:12:c3:c6:76:5e:95:40:9a:5b:6f:
9d:cc:16:88:da:80:9b:1f:37:0c:0a:7b:c3:21:e9:b3:f0:10:
2b:d8:4a:39:b0:31:85:ac:ec:cf:7a:94:47:fd:9b:81:d9:9a:
5a:fe:cf:5e:5c:d9:41:50:c5:f8:36:b0:cb:90:2a:4c:8d:7d:
c6:da:e0:3a:55:50:e6:9e:e6:a7:a8:d3:b7:b9:1d:83:95:44:
0b:15:d2:85:fa:83:da:d9:de:d6:36:01:b6:74:b2:74:33:86:
21:de:07:69:31:6e:a5:63:9d:65:60:6c:fe:9d:79:f3:45:63:
b7:0b:9a:2b:41:40:0e:df:74:11:3f:8e:20:94:41:c8:08:c1:
5b:1b:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:25 2025 by rpki-client