Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: 4an3nGrwI6ncvxDtrL/neJ4DLaXVW4bxRI9ma0d2djg=
Subject key identifier: E8:10:B8:73:55:8B:C3:DF:6D:B0:69:BE:70:DB:79:48:AB:3F:4B:88
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 0194BCE0D426A8AF3BA25A6E1F31FC6DD84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 082D
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: msDyjkHGf5ho3FW2VqvggsXS8MwugtewHI5BLu4Luxc=)
2: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (hash: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:26:a8:af:3b:a2:5a:6e:1f:31:fc:6d:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=e810b873558bc3df6db069be70db7948ab3f4b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:f7:df:d4:d5:71:a1:cb:63:7b:d8:2a:78:
d1:52:4b:40:f4:29:81:94:74:22:eb:ef:42:92:83:
40:c1:d4:25:8b:69:1f:ad:db:df:84:ea:18:d1:b5:
e9:dc:ae:bf:1c:20:ef:f8:9b:8c:bf:89:e5:61:23:
71:6a:fb:00:a3:db:ac:33:5b:e6:cd:9b:21:41:7a:
72:b1:72:98:79:f1:f6:75:b2:46:bc:aa:f1:18:c2:
c7:2a:d1:24:9d:fd:5e:37:d4:5a:3c:15:08:4a:ca:
12:bd:e8:2c:7d:0f:13:d3:0c:c8:55:66:51:0e:ad:
09:ee:8e:19:25:89:e4:69:91:1b:08:58:93:8d:df:
fb:67:20:7a:a0:c6:df:ac:a4:e2:e6:42:2b:39:20:
ce:91:ad:9b:4a:bd:6c:f0:b2:b1:7b:8b:5e:ea:c4:
9c:a0:04:f0:8c:a9:4b:e1:53:0a:f1:45:9e:5f:8b:
ba:e4:15:b9:75:2c:87:1a:dd:01:b1:c9:b4:a3:6a:
ff:2c:07:26:f7:0e:30:19:17:0b:c4:e2:e0:7c:34:
ff:22:07:b4:d9:f8:ce:68:24:89:d5:4a:7f:2f:64:
c5:42:3e:26:69:67:ae:8d:e9:9a:80:11:6e:23:56:
08:73:54:2f:bb:ce:90:b8:0f:49:d4:cc:96:60:f7:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:B8:73:55:8B:C3:DF:6D:B0:69:BE:70:DB:79:48:AB:3F:4B:88
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c5:7f:16:f2:7f:d5:cc:8d:04:f1:08:f9:a9:39:90:e6:40:
c8:43:fb:a6:4e:37:d0:39:18:5b:56:76:2c:f6:6f:d9:c4:40:
40:b0:3e:34:72:b3:a9:97:a2:7d:48:8d:ce:c6:d9:cd:d0:a1:
01:cf:ca:e7:a5:06:c7:ef:85:b0:bf:e5:21:0d:d3:5d:a1:10:
93:44:a0:85:83:13:a2:74:21:99:de:f4:6e:26:c2:89:fb:3a:
90:ae:58:12:0f:6f:c5:ee:04:f6:3f:38:74:84:39:46:76:85:
0e:12:df:35:31:dd:d2:6d:93:a1:f5:74:19:b9:c1:ec:cc:50:
2b:84:8f:95:e7:94:36:6e:94:05:f0:bc:f5:9f:86:d1:41:76:
e6:7e:46:07:80:30:54:8a:bd:66:ab:78:1f:ae:32:6f:62:2b:
8f:9c:4b:73:31:be:ed:26:2d:a2:dd:7a:f7:01:a4:95:a1:cb:
5b:a3:9f:96:e0:07:3e:7a:2c:21:3c:2d:0a:84:db:67:fb:d9:
e5:de:99:05:f4:cd:13:74:3d:55:47:6c:83:2b:b6:43:5d:b9:
8d:13:25:64:a6:db:5f:fd:a4:0f:6b:43:2c:f7:dd:9f:a7:fd:
d7:ea:63:24:19:92:75:ea:69:66:17:94:09:86:1d:f5:ce:7c:
26:ff:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:01:17 2025 by rpki-client