Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: NNNH8jIx29jatOuYP45WMUF1Kyi4NNJbeDqIp3fQpbI=
Subject key identifier: F2:04:19:D4:3A:69:CD:B9:C9:6C:FA:8F:D7:77:CD:76:60:9F:D7:62
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 0194BC04E179EF039F3ED222716540536892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 0BE2
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: ew1zgYS28PrRo2_vyICjeeeZzZk.roa (hash: Fhi/oH9QUYxK/iP3UryNP+xQPg6T4wc9jRF/RdGEuMY=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: 1/IICw/2cxiCtTubM1fuVt8BX54hzeMCwqx/FzI3hbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e1:79:ef:03:9f:3e:d2:22:71:65:40:53:68:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=f20419d43a69cdb9c96cfa8fd777cd76609fd762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:d9:54:a7:56:d9:3f:33:1d:1b:20:58:85:
d9:b8:2d:76:fe:80:4f:f2:16:a7:ae:db:14:fc:bc:
76:2a:c2:94:58:f1:d6:02:08:e8:d5:5b:de:1b:78:
8f:f2:2b:b1:12:f9:78:bb:8c:af:be:18:21:a4:ec:
5a:f7:2a:df:a2:25:0a:4d:d3:c8:db:2d:7e:5e:12:
57:7f:87:b5:1b:90:9c:61:a5:fa:d0:d7:5e:eb:ac:
7c:fb:11:c0:a1:ac:41:fd:3f:71:e4:97:cb:02:d3:
9d:ab:81:c2:37:52:1a:d2:b8:75:b5:34:8e:34:0e:
f1:b4:0a:bb:7f:09:d1:28:14:97:12:0f:97:ff:61:
d7:ef:e1:e8:74:44:7b:61:d8:b8:61:9b:f7:03:46:
a9:b5:50:c7:3d:b5:7a:ce:39:e0:20:1b:d2:c6:f8:
11:48:39:a1:51:c8:0b:d3:86:28:87:41:e1:62:6b:
22:0e:f7:ba:41:4c:40:83:cb:91:4c:14:52:b3:51:
99:08:ae:1e:56:60:0a:3e:8f:83:e2:63:57:54:ed:
eb:03:24:fc:c7:e8:c0:2d:5f:ff:02:58:85:b0:34:
ce:d0:67:21:fd:9e:25:04:e1:94:0a:ed:60:78:04:
2b:e5:5c:e8:48:28:e6:f5:92:36:36:ee:f6:6d:14:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:19:D4:3A:69:CD:B9:C9:6C:FA:8F:D7:77:CD:76:60:9F:D7:62
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:49:cd:bb:c5:df:d6:4e:b9:6b:2c:db:b1:92:e1:d7:c1:60:
78:34:d2:99:42:d1:91:26:ad:9d:f6:c8:cf:67:66:8f:20:4d:
ea:33:7f:fa:6e:1a:44:32:01:fb:27:6d:c0:f9:20:32:a5:d9:
03:5e:ae:3c:32:db:45:c5:d8:78:15:85:b1:ac:d9:10:f5:88:
c4:54:07:cd:f8:d0:ee:d7:27:0a:2d:99:d2:d5:92:7b:96:47:
15:35:15:11:e5:f9:1c:59:7d:ab:3a:4d:d7:7c:a3:a1:ac:95:
e1:94:5d:9c:02:d4:e2:0b:e3:e2:b7:bd:42:2f:68:8b:4e:13:
97:17:f9:44:2a:96:9b:a8:32:e4:e7:c9:ae:ff:4c:07:26:20:
43:c2:e3:62:0e:4b:b3:8c:f0:6a:28:bb:c4:0c:a9:08:13:8b:
8b:02:bf:71:b0:ba:62:0a:ef:e6:40:ce:05:bc:96:b3:3f:b6:
63:a9:54:9f:01:b7:22:10:ac:f3:d7:64:d9:f7:de:3b:09:e1:
f8:c0:7a:ff:35:dc:d9:11:54:cf:2b:d4:19:30:a9:a4:74:21:
92:e1:01:e3:3e:c5:f2:16:a7:7d:1a:e0:5b:d5:01:d8:dc:ab:
b0:c8:8d:98:f8:59:04:6c:16:42:06:49:35:36:31:df:4e:7a:
af:52:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:52:59 2025 by rpki-client