Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: rt3avK0YECb5KxXKkxoCCcj62I4uek+EDq0emiOS9l4=
Subject key identifier: 31:7F:B9:AD:7F:40:E1:CB:E4:5E:BF:A5:19:35:3F:23:CC:67:91:EA
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0194BCAA10C716DD870E1DCA2792954DBBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: tt4yKGIueyfLDhGkcjLa07n8yMXpCzIfNxhCqC8H/ak=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:c7:16:dd:87:0e:1d:ca:27:92:95:4d:bb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=317fb9ad7f40e1cbe45ebfa519353f23cc6791ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:3c:3a:17:be:ea:2c:9e:7f:2b:e2:1a:7b:
40:76:26:79:c1:6a:59:dd:7a:b9:b1:c2:8a:f7:da:
cb:71:08:21:a4:7e:ce:f1:70:60:aa:ed:ad:74:0e:
68:9c:ef:b2:51:19:07:63:6c:58:9a:3e:cc:42:9c:
e8:b7:44:df:e2:55:9b:91:57:42:b2:bc:6d:1e:d9:
8b:49:13:d2:1a:20:0c:2b:4a:16:ae:c8:55:af:d6:
dc:82:23:a4:c3:1b:62:e4:8e:4b:97:c9:cc:57:e9:
ae:89:7a:12:a2:99:24:82:8c:32:50:8c:8b:28:5d:
cb:77:b5:1c:ec:55:77:97:c9:41:04:bd:f1:21:29:
04:16:f1:37:e9:e5:39:87:a1:5f:1b:0e:f9:2b:43:
fe:c4:17:2b:b0:15:3a:83:87:ed:6c:65:b2:3a:30:
04:53:ec:50:74:84:5e:67:ef:67:b4:85:23:8e:fc:
10:55:01:af:5a:f5:3e:24:52:4a:95:bf:47:ca:1e:
c5:a9:04:25:7f:4e:f4:a4:5a:5b:7f:dd:0b:7f:79:
d6:eb:9b:09:72:e4:14:0f:a0:2e:0a:3f:9b:e9:1a:
02:61:91:c6:90:56:ab:21:f4:58:3c:5b:34:93:2e:
ca:a8:d0:85:08:10:cf:97:7a:55:cf:ba:c6:94:d2:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:B9:AD:7F:40:E1:CB:E4:5E:BF:A5:19:35:3F:23:CC:67:91:EA
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1f:18:ce:f8:09:68:c9:73:5b:d4:63:b0:cc:0a:9f:b2:ce:
21:10:98:34:8a:21:62:25:6f:ce:59:37:41:17:87:34:f8:67:
0a:41:ab:f2:4b:aa:89:e6:a3:fa:9a:0c:62:72:27:a3:2b:4e:
96:a5:19:35:29:e2:17:3d:52:e1:29:57:46:d7:bb:4a:7e:5b:
45:80:90:f5:d4:21:08:10:de:79:30:79:e7:72:86:c0:f0:2a:
79:6e:f1:09:59:98:10:21:39:d0:6a:36:6e:75:3a:96:33:5a:
ba:55:2e:93:2b:79:16:c2:95:b4:7a:f4:2d:b6:fb:59:69:97:
0b:47:7a:0f:1f:86:a3:05:1d:2d:c1:1f:e0:48:fd:ab:a2:85:
3f:ea:55:21:f3:64:65:76:13:54:76:32:60:48:27:8f:f6:a4:
91:c2:2c:58:1f:42:7b:a9:ee:a2:37:84:02:0d:4b:1a:b0:57:
f6:7a:56:49:53:9b:c6:01:14:4c:22:44:ba:b4:cb:d5:ab:b0:
d9:f3:46:56:7f:9a:a3:67:4c:17:0d:41:ce:f5:21:f6:7c:31:
97:b0:65:d9:53:08:26:36:42:be:ff:2c:3f:59:98:21:dc:7f:
f0:e1:53:7e:82:c7:a0:45:29:ce:78:22:3e:9a:30:16:59:d8:
28:91:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:10 2025 by rpki-client