Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: qntxaH6R1Nqa61eQ0W6f6e5/feS400yXzlFeunBnlDA=
Subject key identifier: 79:F9:9B:DF:1D:A3:7E:69:DC:D5:3C:50:5A:3E:D0:35:71:86:BC:16
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 0194BD17B95C44BB3F37DB78ED39F1F36D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 0654
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: viCYXp4lsvDh3xh2IJH0GnaEa6fV93lUPjGZGur6rsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b9:5c:44:bb:3f:37:db:78:ed:39:f1:f3:6d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=79f99bdf1da37e69dcd53c505a3ed0357186bc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:f1:03:37:6c:fd:f0:03:5e:5a:7b:0a:c6:
eb:fd:35:ca:8d:b6:7e:ea:ee:ab:a7:12:96:d6:d7:
7a:df:c8:4a:d3:67:cc:30:b6:f3:80:b6:81:41:0e:
63:88:f8:00:09:ea:f0:e7:0f:b7:41:c4:23:0f:c1:
92:d0:9f:81:55:27:20:c2:0b:89:70:d4:f6:aa:f2:
e6:36:47:3d:e3:b0:b0:4c:a4:7c:0c:e2:88:c3:d6:
89:ec:de:12:32:3e:7a:1d:20:e2:f3:96:db:21:a9:
fd:df:68:47:b2:f5:b8:dc:a9:35:37:4b:77:8e:92:
5c:df:7f:6f:98:89:3c:ad:af:a0:67:9e:b4:2a:67:
0b:17:22:6d:15:b9:52:58:af:6b:46:2a:6f:a3:50:
5e:73:ef:74:e8:23:45:27:32:73:b9:7e:5c:4e:71:
61:91:b2:c6:0a:45:cc:fb:55:c3:d6:c1:61:3e:bc:
31:d8:69:c0:ca:1c:39:5f:7c:32:43:15:bf:b0:08:
15:91:eb:c3:88:e9:ea:c3:73:66:8f:f5:f6:47:d2:
64:51:e4:65:e5:61:30:e6:17:54:64:93:84:9c:7e:
04:5b:04:4c:85:84:b0:ed:c3:8e:a5:dc:e3:1b:23:
7b:11:95:dc:4c:30:bc:54:87:72:b3:d2:2c:0d:7f:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:9B:DF:1D:A3:7E:69:DC:D5:3C:50:5A:3E:D0:35:71:86:BC:16
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b4:da:52:1a:3b:46:a5:fe:fe:70:9c:92:30:dd:57:a4:93:
03:fe:5d:f0:a0:d7:f2:27:d9:a5:c6:11:37:33:60:c5:d3:4c:
3e:dd:3e:6e:b8:87:31:39:d2:f5:6d:d5:95:4e:e7:73:0e:29:
ac:ec:f4:57:fc:8e:57:ba:41:1b:de:97:49:84:f6:2f:2d:09:
f3:6f:6d:67:d6:d7:96:71:32:dd:3f:43:a8:84:bb:d6:e6:c5:
ec:4f:e7:21:ed:fd:bb:6c:f6:95:44:9a:41:e4:91:65:ee:59:
26:82:e1:07:de:12:48:8a:3d:bc:44:b9:99:eb:4e:b0:07:a5:
0b:58:12:cf:9b:13:d0:4e:f6:43:29:34:16:ca:d8:cb:af:29:
fc:f6:1c:27:88:2e:fb:8d:a5:0f:57:c6:7e:b4:02:41:62:de:
c3:87:12:2e:5c:1b:10:aa:cc:4e:77:fd:cb:56:4a:c5:95:da:
86:6e:db:2f:d3:ac:3c:b1:49:81:81:59:fe:65:40:f9:89:84:
c8:26:50:ea:99:db:9e:3e:a7:5f:13:0e:20:10:77:1d:e4:98:
4d:a2:10:a9:7b:9b:7f:09:17:d6:2d:e0:4a:ac:c1:1c:24:e5:
a3:d9:a5:b5:f9:a1:89:65:ef:24:d0:0c:c2:12:6b:ae:d6:18:
33:57:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:27 2025 by rpki-client