Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: PMIHeaT9KFCj+3oEOCcIIUpN/I3QfsQ79Fo3Of+hajQ=
Subject key identifier: 12:04:80:7D:64:C8:31:72:7C:23:4D:09:C6:96:B5:32:C7:D4:1C:AD
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 0194BBCDD7359EC5E0FD6BEAC17E40D7CCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: WQzP5tZZZQ/o1Exq/hAgZv4wvVpD7zuw4H7Mq0fLD7M=)
2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d7:35:9e:c5:e0:fd:6b:ea:c1:7e:40:d7:cc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=1204807d64c831727c234d09c696b532c7d41cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:ed:a0:e8:15:5e:7b:e2:ad:56:f4:a7:f8:
00:10:46:5f:80:1a:7a:02:89:4e:0d:39:3f:29:1d:
c9:3e:c5:f8:ba:d1:6e:d8:e7:5c:76:06:5c:bf:80:
a7:a4:7d:69:e6:f4:b4:1e:f7:21:a6:23:22:be:49:
1d:26:97:97:18:51:b2:de:95:e7:a4:0f:0d:95:44:
a0:fd:34:8f:d7:37:a4:3c:43:ae:2a:46:b8:e2:5f:
ab:d8:6d:18:12:7c:72:5a:cb:d5:22:31:ca:7a:97:
75:7a:54:d2:c7:96:98:89:87:04:4c:db:b6:c2:1e:
a1:21:68:20:e8:41:15:16:62:48:21:01:fa:50:f1:
e8:b0:60:d3:2f:3d:fb:cc:b6:8c:ec:a3:14:19:55:
8b:cf:8c:14:88:83:60:c6:3e:6b:ff:5c:d3:81:44:
94:2e:3d:94:b9:09:e8:3d:2e:d1:8c:91:c2:7a:52:
57:a1:19:88:18:a4:74:12:30:3e:a7:64:0a:08:49:
32:97:22:52:1c:3c:1f:75:24:c4:d8:49:b7:dc:9e:
b3:b2:47:da:3d:87:dc:c2:38:16:58:43:8e:8e:1c:
72:8a:97:ba:db:ce:bf:c5:10:2a:44:a0:da:5c:82:
8b:ef:c3:ab:5c:7a:1c:03:8c:af:14:6c:96:f3:98:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:80:7D:64:C8:31:72:7C:23:4D:09:C6:96:B5:32:C7:D4:1C:AD
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:59:5f:d5:39:0d:3b:23:26:b6:72:8a:5c:22:93:d3:13:e7:
c2:87:32:65:2a:64:9c:47:24:f4:2a:c0:48:25:84:fc:cf:02:
38:3e:a7:e7:d8:2d:2d:83:b4:9d:61:64:f2:15:a9:cf:b0:7f:
d0:03:ca:a5:0b:c7:09:e9:7b:5b:df:55:e4:f2:4b:92:3f:c3:
a4:bd:a7:57:ea:bd:e6:e5:2e:48:60:1b:50:06:f5:4a:70:73:
c3:f6:bd:6a:6c:9c:42:4f:4a:d4:87:66:53:80:cf:44:be:63:
b9:a2:1c:7b:83:3b:e4:e5:10:82:42:26:4e:f0:fd:af:3f:b6:
d3:c3:7f:f1:6d:89:eb:a8:0d:21:76:4a:1c:6f:53:a4:e1:a0:
d5:44:79:d5:8a:df:ae:f1:f2:4b:b9:0e:df:1d:17:8b:65:02:
ad:4c:15:15:2e:93:fa:cf:aa:df:67:77:d8:7e:40:31:73:fa:
5c:a8:d3:5e:e3:02:18:99:c6:3c:b0:4c:a5:ce:d7:32:64:df:
33:19:48:78:f9:07:13:4d:c3:fa:bf:ba:69:aa:54:7e:ec:17:
12:a7:9a:11:df:7f:13:25:22:bc:8f:f3:cf:2e:b7:fd:73:85:
53:86:db:9d:c5:b9:a7:a6:17:89:2a:33:fb:2f:39:a7:b8:7e:
f0:73:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:47 2025 by rpki-client