Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: UzpnUiddV9S0dLspUX701lXAu0Es9WIdXaPfBvRzUSU=
Subject key identifier: 94:07:70:7E:88:6E:55:9D:CE:52:B4:80:ED:F8:73:55:8B:66:CB:D1
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 0194BD858896EB52D509838F7923A7DB326F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 123B
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: ojgHUhyWU96AL/ts+mursrWfiUZB3sVnV0sYyorz0s8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:88:96:eb:52:d5:09:83:8f:79:23:a7:db:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=9407707e886e559dce52b480edf873558b66cbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:e3:12:54:9a:05:59:70:a3:11:2d:0e:ee:
ff:1e:50:e2:f8:1d:1c:da:88:e2:7d:43:9c:0c:ad:
09:9f:0c:47:ea:dc:44:4a:4c:a3:c1:20:49:52:14:
92:ef:cd:55:31:35:0a:0e:cb:67:87:0b:c2:72:05:
b8:04:28:39:12:6e:b4:c3:67:90:29:44:93:20:98:
ec:3b:98:c6:28:c3:df:a7:e6:f9:ef:50:e5:e5:06:
e0:2b:84:0d:2f:4f:d1:15:11:ff:fe:9f:ff:be:a1:
17:bb:aa:2b:c8:25:c7:ab:56:ce:b5:b0:28:2a:83:
e4:cb:da:a7:24:f6:27:7e:52:1b:99:a1:61:f7:3c:
a7:ac:9a:cf:c3:fe:5e:16:59:ce:f2:80:ef:8c:fd:
04:e6:59:9b:e3:51:c7:d1:b9:73:db:b6:a0:f3:58:
7f:71:39:57:0d:c3:e6:d8:0b:da:61:c3:15:19:b5:
20:8b:de:58:96:e2:96:98:d9:42:57:86:a9:88:eb:
5c:a4:4a:03:54:e9:79:b8:55:81:6e:66:b2:53:70:
10:ab:db:f8:34:0a:21:e5:c1:5e:1e:e8:7f:69:46:
1e:75:9f:10:7d:59:67:98:8e:89:fa:60:5b:80:f0:
9e:24:2f:e7:28:cd:30:ab:b7:73:88:db:25:dc:66:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:70:7E:88:6E:55:9D:CE:52:B4:80:ED:F8:73:55:8B:66:CB:D1
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:59:c0:f9:7d:2e:e5:6c:84:fa:1b:1d:20:e6:be:ff:7b:9e:
e2:a2:2f:68:87:dc:a6:ef:6d:b3:23:d2:d3:bb:c0:af:a6:e2:
16:d8:50:0b:6f:c3:b0:b2:2e:04:01:28:80:a7:05:d8:f4:f7:
75:de:c7:42:87:47:d4:ef:9f:ed:77:44:60:d7:9f:9d:5a:a6:
05:a1:cc:39:ee:29:e0:d8:be:2b:16:c3:41:6c:79:08:66:cf:
00:74:8e:d7:fc:a7:38:fb:95:21:02:73:14:78:ba:b7:e9:b7:
1a:06:27:80:00:8c:c1:f0:26:01:e3:0d:97:2f:b6:50:3a:cd:
9b:29:75:ad:be:67:90:ac:ad:f5:03:d4:7b:30:bf:aa:2d:ab:
73:e0:ad:94:b5:a9:4d:46:76:86:63:ba:3f:f9:a6:ac:a8:92:
21:bb:d9:06:ac:37:5a:77:84:64:62:d4:13:2c:45:37:78:b2:
04:95:91:5c:f9:28:7f:e9:d9:70:03:d2:04:b9:da:e4:d9:33:
d1:76:28:ac:99:21:36:e5:0a:fd:ee:fb:b4:94:c3:96:91:1c:
95:ee:5b:f5:8b:05:47:db:18:eb:60:84:0d:09:41:03:96:11:
29:a5:08:7c:de:39:0d:3d:f2:5a:38:49:fb:c9:d4:53:e9:91:
3d:ce:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:10 2025 by rpki-client