Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: OnVNP/tI0n8fxLun2c9L0BFcv4Hv0+NgMvKLd5ofCxQ=
Subject key identifier: 22:28:11:5A:42:39:2C:89:5A:11:7E:4C:33:BF:AE:DA:8F:A7:1E:86
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 0194BC04A0C43687527D0869B3BF9190F64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: pKlfKR4fVBjTrU0zKeGoXiKFpWHMvEAvMYv1mD08fvM=)
2: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)
3: qvpe1CgZPsoN593wTG-k07LEjzI.roa (hash: reHGMsyJAdw5t7d1CdLGiOlH7s+tLITk+5mSuKYbIgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a0:c4:36:87:52:7d:08:69:b3:bf:91:90:f6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=2228115a42392c895a117e4c33bfaeda8fa71e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:f8:50:e8:a7:b2:7b:43:69:e4:76:9f:26:
84:fa:fb:ae:5a:ce:42:06:b7:13:05:9c:24:b4:0c:
2c:72:6f:86:c2:34:2c:29:52:01:a8:90:cc:71:6f:
54:6a:d6:ea:53:e4:b7:73:e8:80:91:64:15:07:1a:
f5:e9:d4:5a:1d:8c:c0:75:01:a7:bc:d4:07:5a:c3:
c6:e2:ba:d6:91:21:81:9f:fe:f8:89:87:a9:bf:eb:
44:a8:57:fc:95:35:56:5d:dd:84:e8:25:19:b9:b6:
76:90:e1:17:d2:64:75:4f:d0:be:ba:65:7d:c5:be:
83:80:7a:4e:c6:5c:83:ca:3d:ef:cc:ab:86:2b:b6:
19:24:fa:91:de:66:c5:13:56:ab:46:ad:0f:31:b5:
4e:48:b8:94:7e:cd:8b:59:91:29:66:f0:a2:a4:61:
7b:c3:d1:85:32:67:fd:29:bd:e2:5f:24:a9:85:bf:
07:e1:91:54:54:0b:d5:68:7b:81:85:a3:68:91:15:
92:b4:8d:f1:dd:fd:09:bf:1f:cd:73:9b:98:e1:c3:
ee:a1:00:95:3e:af:ec:f9:e4:17:f1:65:e1:57:f8:
45:fc:29:2b:c3:9a:d4:d7:b9:48:a2:99:46:74:df:
7f:6d:e2:5d:ea:b6:d6:87:55:43:7a:cc:71:49:18:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:11:5A:42:39:2C:89:5A:11:7E:4C:33:BF:AE:DA:8F:A7:1E:86
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5c:c5:78:f8:db:18:f9:09:ab:14:36:67:aa:2a:28:4f:27:
bb:bf:9e:c0:b2:7d:19:60:ff:2f:61:54:82:43:92:66:6e:dd:
e3:31:29:af:1d:3b:c8:ba:af:d7:40:33:5b:88:b9:e8:9a:ed:
bb:2d:1f:b2:6b:58:f4:25:45:82:82:59:59:12:32:17:54:45:
5b:7e:f5:b1:83:b3:4f:a2:6e:38:ba:e8:d6:e9:68:72:04:a9:
e8:57:34:c2:1d:21:ec:0b:aa:3e:50:a5:d4:67:cc:a3:13:5e:
fd:d7:10:dd:02:6a:3c:9b:2a:1f:79:e3:28:d2:fa:77:df:b2:
c5:93:fc:f3:f8:95:18:4c:c0:4d:e3:20:09:02:68:46:87:4a:
8c:e3:08:53:52:37:cf:ce:c8:fe:16:6d:1d:93:18:be:b2:aa:
ab:bd:16:9b:55:4b:e1:63:3c:49:f6:17:28:ce:f2:00:39:4e:
5e:2a:27:77:73:c2:be:2f:6f:d0:6e:15:60:be:ac:db:3c:bd:
2d:cc:72:af:98:76:67:f0:4e:93:10:0d:f2:07:95:23:88:46:
fa:e8:fb:a1:8f:bb:6a:d5:48:44:ac:b6:16:82:14:c6:04:2a:
eb:44:df:15:ac:5e:0e:bd:0c:da:99:05:86:02:b0:bd:cb:33:
76:cc:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:25 2025 by rpki-client