Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: +9WsvYb1lqWoZM3wGYNiCD5LZvpQ9JinxNiwR/PZPww=
Subject key identifier: A1:74:2F:94:6B:10:D9:50:C0:CF:60:F4:48:9F:9B:D7:C1:BF:2F:E1
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 0194BBCDEDEE7E2B06EADBF8FB401C61ECFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: esRgqc6I7hQ784mN0xKzGug2IFMXE269BXmJp7HZvXQ=)
2: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (hash: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ed:ee:7e:2b:06:ea:db:f8:fb:40:1c:61:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=a1742f946b10d950c0cf60f4489f9bd7c1bf2fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:f7:f4:38:db:cc:37:b8:55:83:1b:c4:88:
80:18:5c:de:4c:9e:07:5c:41:f3:92:e3:2b:9d:bd:
d1:c7:52:03:fb:79:17:ea:0d:f5:b4:a9:07:1b:f5:
98:28:3d:00:2f:0b:f9:54:fe:a2:72:34:10:00:a7:
0b:3e:20:a5:73:eb:42:23:d5:04:e8:49:0f:43:55:
5e:34:ef:fe:81:3c:94:9a:81:b5:69:9a:95:23:63:
cd:e2:44:f7:f0:8e:7b:c7:7a:03:9e:8b:53:5f:44:
d0:ad:2b:13:5e:77:42:03:f3:94:8c:2d:dc:d1:dc:
6a:3e:92:70:da:18:fb:1c:4f:0b:86:5c:6c:2f:83:
e8:fa:e8:0f:c3:ae:d1:a8:63:eb:24:d3:09:d9:ec:
73:f6:cb:f9:ac:09:79:2c:d6:5e:6c:65:c0:22:a4:
13:1b:7a:d8:10:42:8f:3b:82:e2:45:0b:b6:b3:d4:
56:5f:20:19:f8:fc:3d:ab:99:5c:2e:a1:be:88:fb:
8f:f9:56:9f:ba:bb:ba:90:93:f0:36:a2:71:e1:f8:
62:d2:d8:e4:1e:46:26:26:57:bb:f4:1d:c6:6d:8a:
da:b1:1c:fd:33:04:ec:73:93:1e:10:1a:af:01:af:
d2:70:fd:5a:4f:ba:8f:1f:46:71:7b:c5:4e:05:38:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:74:2F:94:6B:10:D9:50:C0:CF:60:F4:48:9F:9B:D7:C1:BF:2F:E1
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3e:bb:b8:54:cc:8f:c2:87:47:c6:43:e2:8a:fa:b4:93:62:
40:1a:81:ef:36:71:3f:d5:a7:08:10:65:0e:da:2e:e6:41:14:
23:4a:26:fe:e9:d6:d6:f7:72:a8:e5:35:18:8c:54:75:77:3d:
4d:f1:8e:6f:34:d0:ff:ae:5d:bd:05:31:7d:52:a5:9b:73:15:
7f:f3:ec:5a:14:20:09:a9:e8:67:2d:06:38:e0:59:98:14:d4:
33:27:df:99:bb:7e:78:4f:fb:bf:e7:53:26:d1:56:71:86:8d:
6c:fd:e5:a4:41:2a:b6:27:53:b8:c8:c1:2d:4c:0f:df:12:df:
b6:72:35:ea:2a:07:fd:da:7c:59:42:d9:19:e9:db:4e:d7:78:
fc:45:9f:d6:43:10:c4:eb:8b:f6:e7:74:a4:ce:11:32:f4:16:
ee:65:b8:47:d6:2b:f4:c1:2e:56:f7:23:51:4f:d2:2f:f7:10:
f6:86:16:ed:c7:7c:49:00:e5:5a:7f:5e:9b:8c:b5:b8:52:99:
e6:a6:7d:fc:7a:48:e0:5e:12:cd:1a:ad:bb:41:73:03:bc:46:
2d:45:f0:e7:93:49:fb:ba:d1:71:75:44:36:ff:58:10:7a:41:
87:8d:f7:81:a5:a1:08:07:dd:c5:ac:31:64:54:41:f8:67:79:
5a:a9:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:20 2025 by rpki-client