Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: gKQe8vfRVZwbIduGIyr0kMWr1KoGOD1UyiYZ9VnJqRI=
Subject key identifier: 7C:B6:F1:D5:91:E8:28:D8:E1:DD:37:FE:3A:62:6C:01:3F:51:8F:2A
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 0194BC3C694E4510C393B91E634A716291CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: v2JlLf9lKRl7K8bZ7P7DDtBi6C37vDHWAWvl8BPMqq8=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:4e:45:10:c3:93:b9:1e:63:4a:71:62:91:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=7cb6f1d591e828d8e1dd37fe3a626c013f518f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ae:dd:34:74:e5:cd:64:9e:9e:73:f3:e0:2c:
92:80:a4:49:e7:61:47:5b:20:59:5b:98:12:36:46:
d2:f2:3b:d0:09:b3:90:c3:5c:df:48:06:5f:ad:cc:
f9:c4:4a:bc:a3:2b:dd:5b:17:fc:51:20:55:ea:aa:
27:3f:2a:e8:ad:c3:96:bd:2d:fc:59:5c:fe:db:94:
75:8d:5d:7b:e0:cd:da:90:76:08:43:7f:a0:0b:fe:
1b:17:81:82:78:40:ac:04:7d:e3:86:4f:9c:52:d1:
82:95:eb:b8:e2:c4:c8:cf:9f:1f:1c:56:f4:5a:a1:
a6:ce:35:46:17:db:9b:a3:ea:d0:27:d5:9c:07:07:
03:fa:ca:d6:63:e0:6d:9d:6c:59:86:cd:c9:8c:73:
7a:de:04:2f:d0:cf:a4:89:1c:8c:78:4b:df:fe:32:
58:74:21:4c:8d:ad:59:bc:06:3d:38:11:26:50:16:
76:a5:2e:c3:19:e0:f2:35:f5:3f:fa:a0:b2:9c:38:
0a:c3:ba:b4:d6:1b:4c:12:53:a3:ac:5b:28:b4:eb:
91:b3:0e:31:41:fe:a3:ce:c6:3a:cf:df:4d:51:f0:
3f:05:91:21:7a:29:29:3a:40:30:bd:f5:a7:86:0f:
27:f2:cc:87:63:22:03:71:61:11:3d:cc:de:60:3e:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:F1:D5:91:E8:28:D8:E1:DD:37:FE:3A:62:6C:01:3F:51:8F:2A
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e0:32:b3:84:4c:d4:0e:98:12:8a:00:e7:dc:ba:73:d0:ea:
f9:aa:35:a6:17:d3:97:f6:d1:63:2c:9a:99:61:e2:f0:9c:f3:
92:c4:66:42:b4:b9:15:1d:f0:93:ac:5f:11:ec:63:84:b4:32:
0f:ed:c8:94:cd:67:dd:53:7c:e4:f0:70:02:d7:2c:96:89:c8:
10:07:61:03:5b:06:7f:2f:da:c6:af:ab:95:8b:95:d6:c8:0d:
96:68:63:18:7f:1b:a0:82:d5:ab:b6:63:47:5d:1b:b4:67:15:
a1:be:34:34:b9:9b:fd:c9:0e:0c:a9:a2:7a:cc:e0:c5:4d:a6:
cd:2e:8f:bb:56:4f:c7:5d:da:93:89:34:c1:1e:54:75:58:38:
1c:ea:c1:1b:4a:cb:86:cf:05:f2:00:09:10:67:3e:72:a6:b7:
95:67:b6:18:6d:02:88:86:18:0c:1a:db:62:c5:3b:b8:9e:c9:
7d:6b:02:0c:95:bf:5f:50:fb:c4:5a:8f:9b:eb:15:5b:73:b1:
c7:8e:ea:ee:e8:fd:cb:df:18:93:40:70:f7:26:2e:77:e5:40:
db:01:84:4b:54:25:a5:31:d6:03:d8:84:d6:f6:f2:5d:b3:3d:
6c:a2:96:2f:18:98:dc:5c:9f:6f:15:cf:f3:60:cb:72:23:0c:
10:9b:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:02 2025 by rpki-client