Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: wK3dMMOsAn4FSmJMGbRDL9KWzcWmGaKCXQpLWDy+y2k=
Subject key identifier: 3A:C0:1A:10:16:F4:50:09:4A:8B:E2:3B:7A:38:02:F1:C8:75:39:D8
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 0194BD85416F731598834874DF7EA5572695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: Hvr85gWWob1mxWaVPfi5aYytNqDlcR29f/te5X+nqik=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:41:6f:73:15:98:83:48:74:df:7e:a5:57:26:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=3ac01a1016f450094a8be23b7a3802f1c87539d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:d1:06:04:c5:60:9e:17:c0:1d:d9:80:90:
3a:92:69:c8:1d:af:68:b6:aa:18:46:f5:e9:3c:23:
5d:99:ec:3d:16:16:4c:38:3a:c9:df:7c:81:b0:8d:
5f:b1:8a:b1:2e:12:d5:a1:e1:fb:a7:80:e8:2a:05:
8e:ed:74:cd:1c:73:14:70:c3:bf:8e:60:ca:6a:65:
6e:2e:5e:8e:84:c3:ff:47:09:55:f1:1b:13:78:30:
fa:87:3d:2e:c4:44:38:b2:da:fc:e2:36:54:de:10:
30:d8:8b:9a:ad:29:72:8f:39:c7:e9:fc:0e:2d:66:
96:62:93:ff:0f:87:d1:7a:e7:1b:90:77:30:c9:5e:
fe:98:b0:99:96:cd:ff:e8:e4:fb:66:35:90:7f:3f:
7f:20:1b:2b:20:57:ba:2c:38:f3:03:e5:58:b8:2a:
81:bf:cd:d7:5d:24:bb:93:af:e4:4b:28:31:5c:9b:
54:b4:af:e4:96:ed:32:81:ce:97:05:86:81:96:4a:
3a:2e:7a:cf:ec:4b:74:79:b4:b1:01:a3:39:8b:03:
1a:e5:8f:58:30:27:69:e8:7a:9a:ce:21:f6:3a:7b:
8a:30:eb:41:6c:14:a1:7c:35:ee:54:55:67:2a:dd:
5d:bf:7c:a4:a1:81:4c:7d:f4:2f:fc:ef:9b:ab:d6:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:1A:10:16:F4:50:09:4A:8B:E2:3B:7A:38:02:F1:C8:75:39:D8
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:90:96:54:c2:dd:11:49:3d:75:db:46:24:db:83:40:b7:0e:
79:66:73:c4:8a:8f:9f:28:ef:f9:3c:f4:bd:6f:5e:5e:ce:e0:
84:61:7f:4b:b8:e4:1d:b1:70:92:e0:62:94:42:3a:7c:be:ce:
30:64:8b:2d:93:f5:06:91:c0:dc:8c:e7:b1:b5:30:d2:70:72:
33:0d:56:4a:06:3e:25:ee:46:c6:12:a4:ce:01:6f:73:97:2a:
a4:94:93:76:33:5b:3a:df:0f:f9:87:52:99:bc:1d:33:ab:21:
35:d7:64:e9:55:ee:d5:63:df:89:e0:fc:26:13:7c:1f:2f:33:
c2:5e:fc:a6:d5:ab:45:3a:01:17:74:42:2b:31:c9:64:9f:9f:
46:7f:46:90:d2:b2:3e:b7:07:9e:7e:74:b0:86:7e:39:ba:63:
cc:cc:8c:98:45:bd:63:76:a2:08:55:8b:d8:30:3e:d7:8b:16:
72:fe:4c:f5:4a:c5:3b:a2:2c:d1:2f:7b:7e:e1:ea:8d:c5:f9:
72:42:93:f3:69:6b:60:c3:f1:f4:68:8e:54:2f:a3:ca:c8:75:
37:5b:6c:90:ee:d9:ae:c2:c7:ae:69:d8:cc:28:40:5e:ff:1f:
70:f1:57:15:29:2e:a3:05:c2:87:97:52:02:e2:e2:52:ef:1d:
aa:dd:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:26 2025 by rpki-client