Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: Lay70+gCaIPDnVaaFM9RCadSqeQS6SrWVX7uJXW9bCM=
Subject key identifier: 34:F6:34:15:3D:97:34:BC:31:76:FC:40:7A:B2:9A:A0:D6:F4:83:14
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 0194BBCDE6CB2C7C4B1CF4929CDE13D2B970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: ql1lBqL/suUMyfyBld/lZ8waIH+5wTnL5ZTgLausshE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:cb:2c:7c:4b:1c:f4:92:9c:de:13:d2:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=34f634153d9734bc3176fc407ab29aa0d6f48314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:ae:a8:62:56:d8:5f:44:de:e8:e2:c9:1a:
fc:ad:69:03:38:3f:2c:95:c0:bd:0f:7f:ce:65:7a:
7d:91:82:59:60:b1:38:f0:28:31:9c:ef:b7:2c:d1:
15:1b:b0:e1:61:5d:a5:9f:df:84:a9:76:23:85:c0:
56:3a:5a:f6:af:0e:ce:cd:52:e7:c4:40:88:56:93:
b9:66:36:71:7a:cf:c3:64:09:fa:5e:a4:82:a8:26:
ae:ad:af:e4:7b:ed:d7:6f:0f:fb:a4:45:c5:0f:7a:
30:08:bc:1f:d3:4c:ca:b4:bd:06:12:32:8d:ad:31:
41:82:c3:f1:b8:a9:62:47:b6:bd:27:d2:dd:84:28:
7f:c8:ec:fc:2d:7d:9d:7e:78:be:34:cf:74:18:6c:
59:bb:dd:a8:3c:2f:0d:8a:2d:12:7b:09:74:6a:43:
39:4c:d1:64:ba:6a:08:66:dc:97:ec:fa:ae:13:44:
57:b3:db:99:a2:09:e4:44:ab:20:d9:79:f2:74:a6:
74:fc:83:61:8b:0d:99:dd:b9:e5:80:4f:4d:46:4e:
58:36:07:80:97:af:ce:ee:0c:57:3c:c3:f2:1d:b0:
99:d0:45:2f:92:b5:df:6d:42:28:87:32:97:d5:3f:
86:8b:d5:9c:3c:bf:1f:8a:b8:98:6d:75:cb:17:9a:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:34:15:3D:97:34:BC:31:76:FC:40:7A:B2:9A:A0:D6:F4:83:14
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:df:8a:13:da:79:24:0e:2c:d6:12:14:fb:4e:81:6d:00:8a:
11:2b:a9:10:e0:07:99:d7:a4:10:67:25:79:8b:6d:d2:74:70:
cc:d5:f3:d2:9f:5d:10:51:46:2f:96:42:8c:c3:71:6c:ac:68:
08:34:e2:54:de:c1:f4:a7:ad:5d:c4:2d:5a:8f:92:a1:9a:0f:
dd:9c:e7:c0:d6:a1:e7:73:b8:dd:e0:6f:cf:b9:24:6e:d4:ac:
41:03:dc:9f:81:63:f4:99:94:f7:21:78:27:8a:a3:d0:6b:0c:
7d:06:e3:46:fd:bf:bc:88:d8:aa:85:6b:bb:b0:0f:4f:38:63:
7e:9f:74:f7:3a:c7:71:42:5c:c6:37:3f:c9:a7:4e:9c:93:ea:
68:b1:e8:9e:9d:74:a6:51:4d:09:41:69:f9:04:87:7b:26:f4:
cf:1b:36:cf:9e:f5:2b:d7:40:e1:84:61:f7:b4:34:61:af:13:
5c:76:e8:ee:c1:fe:c5:1a:f3:a8:ad:15:3c:81:2b:cc:3e:40:
30:4f:76:11:30:dc:8b:79:9f:9f:d5:97:40:87:1f:30:b8:b1:
f6:70:82:3b:b0:c9:ed:b3:47:03:df:04:57:f4:51:68:06:43:
d1:f8:9a:d7:dc:a9:ea:bf:70:6d:15:da:65:6d:3b:62:c3:e3:
a9:d9:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:05 2025 by rpki-client