Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: +SO35b8R5rZ8mmdXRHAAvgMLchBG9gvFNRlAMghPfj4=
Subject key identifier: 8C:63:CD:C4:A3:00:E6:D3:C8:DB:CF:31:78:D4:FF:67:CA:39:77:AC
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 0194BC3C8B71C1116B94AA1DBF8F366FEFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: ED7XaooGfLatk9FQ+YqFL03RJ6sBCNE+JxLkRmaX4Bw=)
2: qmxsyUbW81VdsinEooDwPTqDgYg.roa (hash: 5mMYBqM+9mhhKL1z8ft7+FIG5whvIdm78M3vwoV475A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8b:71:c1:11:6b:94:aa:1d:bf:8f:36:6f:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=8c63cdc4a300e6d3c8dbcf3178d4ff67ca3977ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:e7:43:fa:7d:58:77:3b:b4:fb:13:4f:ee:
de:d0:a5:6d:f2:e0:e4:49:9b:54:84:45:cd:76:87:
6b:4f:50:ca:13:46:93:5d:e8:b0:ae:50:8d:a4:1d:
9c:24:63:28:c6:4d:1c:9a:9d:86:10:19:66:b7:d6:
ef:28:71:8c:e9:09:06:76:d3:25:32:90:f8:c2:d4:
36:62:3e:5c:91:59:48:11:b0:fc:38:2d:9a:e0:6f:
ec:2c:ad:d5:5d:3d:38:cd:bb:ea:4c:08:a6:a0:1c:
e2:5d:80:4e:62:ff:ef:c7:dd:85:7c:79:60:73:d2:
14:32:1d:19:df:f2:70:ca:19:c0:6e:9e:6d:aa:bb:
c0:b3:ef:91:e7:f9:00:38:06:6e:8c:73:ab:31:1f:
db:5a:88:e9:42:53:8d:23:18:b0:37:8e:ed:e7:2a:
c8:97:cd:57:db:6d:07:45:1c:fd:5f:49:57:de:59:
7c:26:c0:e7:51:4a:76:6b:f3:49:51:d3:51:e2:67:
53:33:34:43:8e:87:84:f9:2f:89:f1:ad:9f:4b:99:
0c:0f:2d:fd:37:94:f0:09:32:f5:30:fe:f1:90:07:
1d:71:f5:85:38:10:3d:32:40:2b:4f:78:85:92:f7:
d3:b5:d9:7c:21:1e:5e:a0:1f:ac:ec:89:c0:dc:25:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:CD:C4:A3:00:E6:D3:C8:DB:CF:31:78:D4:FF:67:CA:39:77:AC
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:48:8f:21:63:0a:19:06:a7:66:e8:0d:b7:56:3c:b1:0a:
88:15:cf:b1:74:c5:7c:df:db:00:fa:d0:3e:88:13:f1:86:1f:
aa:70:b9:9f:63:ca:c9:c7:de:32:25:9d:d0:ac:a3:d3:10:5e:
0b:01:fd:a3:85:df:0e:cf:57:53:2c:aa:83:06:16:a5:01:8a:
2c:30:a2:84:df:22:5d:a2:e0:03:ac:55:2e:68:86:59:20:d2:
92:1e:8a:26:e9:00:4f:1d:ef:8d:4d:51:7e:24:82:1c:97:18:
08:5e:16:86:20:e6:7c:a5:7f:83:6c:d4:fc:85:fb:53:c6:71:
78:64:e1:6a:5a:38:f1:36:f9:bc:3f:6d:69:9e:4c:4f:dc:b3:
c1:90:38:ec:b8:68:ae:9e:6c:40:84:1b:cb:81:56:81:68:a5:
9a:25:09:22:59:28:13:0e:10:b5:b3:d3:c5:99:c0:ee:1a:4a:
56:99:e5:c1:1f:2c:c8:79:d6:67:a7:67:67:c6:4e:b6:59:5b:
54:fd:63:8d:56:82:a3:f5:11:ad:15:af:30:e1:53:dd:d7:8b:
2c:ea:58:72:c4:87:07:21:18:40:39:0d:45:ad:b7:97:73:f8:
e5:06:90:7a:df:52:92:96:b9:50:d0:6e:e2:67:76:20:d7:75:
e8:21:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:05 2025 by rpki-client