Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: qf39E+2VOT4qcAEi+B39aH8zzNnD7y8GPqB54Fz+KDE=
Subject key identifier: DE:49:0E:2A:26:56:BE:85:EE:DA:9D:4C:8D:06:45:EF:AC:B5:D1:55
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 0194BC72FE316143189793AA9C0DAFB1C8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0320
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: Eg4zth0ANX0mkRnAh6suVOeAzdk.roa (hash: zASvpGNGcNFQXQ8M9IjuKp7MbbcQqn5NoJLmUtGca/I=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: dcSaEPEeRP+tuBX4e4mFJCYvT/PcRJlvskLa8VM9nIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:31:61:43:18:97:93:aa:9c:0d:af:b1:c8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=de490e2a2656be85eeda9d4c8d0645efacb5d155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:59:1d:41:af:21:b8:75:06:98:5e:50:88:
66:75:c8:26:a0:ac:e2:09:7f:00:bd:68:bd:b1:e6:
dc:62:18:ef:28:e6:bd:c0:84:a2:f7:49:4b:7c:c9:
84:24:75:1d:c9:5b:75:f5:a8:d6:02:02:eb:2a:12:
f9:35:70:83:87:db:e7:4f:7d:d7:d6:91:2a:bc:55:
b1:17:0c:97:a5:eb:d0:ce:65:b9:a7:19:0e:d2:3a:
61:b6:99:10:93:f8:19:d4:44:99:6c:ab:e7:3a:ba:
31:5c:97:8f:bd:38:fc:0e:4d:08:4b:27:69:9a:58:
f3:da:8b:71:61:5c:00:1d:39:07:20:7e:66:df:f6:
a2:ed:90:43:22:18:4e:45:79:22:56:b0:53:a7:a5:
39:9f:e5:2b:89:07:c7:4e:66:ef:3b:ae:0f:18:37:
7c:fd:9f:b4:db:74:2e:53:55:c0:a7:4f:f1:7f:5e:
af:45:97:3e:2f:ec:46:1e:75:70:9f:1d:1b:1a:98:
3a:54:a3:26:50:52:d8:35:02:92:52:d8:a8:82:f9:
07:ab:8e:41:f0:d0:d7:2a:7c:d8:03:1c:75:37:60:
25:ff:04:c5:4a:46:6a:9d:71:f6:83:16:22:69:45:
77:0c:4d:1b:c6:61:d8:39:41:d3:00:1a:14:87:85:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:49:0E:2A:26:56:BE:85:EE:DA:9D:4C:8D:06:45:EF:AC:B5:D1:55
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a0:9c:32:0a:4f:ce:34:e8:69:2b:51:b7:78:46:c6:72:a7:
db:b5:9e:5f:88:e9:86:a5:9e:28:c8:61:ea:aa:8d:dc:70:01:
69:86:53:5f:6e:a0:47:75:4e:12:c0:b3:2a:be:89:5b:fc:1c:
7e:e1:36:61:dd:39:ba:87:a1:6e:82:f9:d7:53:4f:e9:df:16:
5f:0a:87:72:46:27:0c:28:55:43:b9:14:47:44:09:89:f0:cd:
ab:84:9a:4c:61:74:7b:44:93:ed:c6:ae:91:0c:b5:fa:77:54:
bd:f5:18:a2:f1:0b:72:56:46:9c:8d:67:14:18:02:6c:8f:68:
34:cb:86:77:24:30:39:bb:be:8a:ef:0e:18:b6:74:20:4b:c9:
ce:86:e3:4a:1d:7a:c3:39:9b:dd:57:d4:1d:d6:1d:a5:11:a4:
3a:c9:07:08:2b:36:d5:2a:b4:9e:d6:32:d7:dc:ae:0a:81:3e:
47:80:70:40:c6:09:59:f2:96:8e:8c:8a:97:18:e8:8f:b5:a2:
94:d8:04:01:88:c9:5f:51:4d:73:12:87:63:f3:5a:99:d1:87:
71:73:95:fb:79:88:d0:d4:af:b8:f0:7f:f9:6f:b3:7f:51:61:
c0:74:95:e3:6b:11:e3:74:e5:b6:1d:3b:ef:39:22:d4:be:89:
22:40:b2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client