Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: 0X4R1xVUeUPBEHel7SkSX2OnmoslOLDFlquFH2hWuO4=
Subject key identifier: 4A:80:DD:02:7E:39:50:6B:89:41:C3:DC:B4:35:C4:27:C9:D9:00:C6
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 0194BC052990EF4794D792287161064C6C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0749
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: 4whj2wCKh7FBWOVJNaYIwSdTV8QSQUcKeR+G5ubed6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:29:90:ef:47:94:d7:92:28:71:61:06:4c:6c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=4a80dd027e39506b8941c3dcb435c427c9d900c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:0f:6c:ba:96:e1:a1:60:85:4d:ba:91:95:
16:2f:de:48:d0:5e:f2:fc:23:cf:ef:d3:83:1a:79:
c6:64:c2:6f:d1:25:e9:f7:ae:c0:9d:72:50:3c:d8:
bf:c2:78:65:b8:43:33:56:66:fe:80:8e:c9:51:fa:
e5:04:46:37:7f:49:d2:90:5f:17:78:e3:af:37:c3:
ca:3f:34:04:65:47:b0:48:95:3d:19:01:9e:99:e7:
e8:94:dd:f9:f1:16:3c:2d:87:b1:d4:5f:f8:18:21:
df:c6:ac:ff:ef:7a:cc:df:df:c0:96:62:20:ab:10:
5e:e2:38:91:3e:3b:e9:41:55:d7:ae:d2:be:47:53:
e6:74:86:12:5f:0f:1b:5a:2e:de:15:d1:c3:ae:b8:
99:be:6c:53:c9:2c:c7:14:f1:fc:71:95:06:4f:01:
5b:f8:59:d6:4f:63:72:67:8a:4e:56:59:cc:3b:65:
92:1f:f0:68:14:32:ba:cb:a7:55:0d:03:69:d4:17:
b1:46:4a:e5:e3:b2:98:42:80:66:97:ad:46:bc:52:
a6:c8:7d:2f:75:b5:5f:e2:84:01:22:52:65:e3:a6:
ac:8f:e9:81:e2:60:a0:e2:a5:60:ce:a5:7f:32:a4:
a1:1c:38:f9:8d:fc:e5:5c:c3:9a:9b:fa:36:1c:40:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:DD:02:7E:39:50:6B:89:41:C3:DC:B4:35:C4:27:C9:D9:00:C6
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:97:54:73:5f:83:f7:5e:2c:f4:27:d2:78:4f:fb:03:84:b7:
d8:38:c9:4c:79:11:54:57:fa:0e:d4:87:aa:fa:5e:67:b1:c4:
87:64:4f:2f:56:94:84:8a:45:fb:8c:62:75:31:9b:71:d8:74:
49:df:fe:61:ba:6f:9a:63:60:14:7f:cc:29:be:11:d5:88:b0:
95:53:50:b3:45:17:09:f7:98:0b:2c:e7:71:c1:ee:b3:e7:9f:
dc:e8:e6:a6:45:0f:a5:be:da:27:03:08:88:40:ba:77:63:90:
d3:04:f8:c1:c2:79:f0:e5:f7:33:59:24:7d:ff:1f:00:86:34:
23:6f:89:63:1c:44:a0:ce:b5:a5:2c:00:3f:c2:b5:ad:59:6a:
1a:23:5e:b0:4a:29:d7:52:eb:2b:51:bc:8f:4e:9f:c4:f8:50:
5a:d5:56:a4:7b:f9:3a:7e:22:05:ce:bc:d0:0c:24:43:1e:25:
93:63:d1:77:eb:98:fb:7c:c0:3d:b0:0d:48:b3:50:e0:0a:45:
44:84:08:8a:ea:14:23:6f:70:94:33:8d:db:6a:d2:07:73:22:
0d:bc:0d:a7:6e:d8:dd:af:d2:12:c0:93:73:10:bb:08:15:0b:
66:42:c9:a8:38:58:68:5c:62:11:92:70:b6:b0:54:c5:66:dc:
2c:aa:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:46 2025 by rpki-client