Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: NImKPJpsd5aq+l9dDkemGxprq55KLRIvzeyVYPJMAVI=
Subject key identifier: FC:54:0D:D7:D1:C4:D6:33:78:13:97:D6:06:81:B8:4D:44:43:56:FF
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0194BC732BC854584DB38C3D99D3293631A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 11EB
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: 3/CMRcP9/AJK0LEeu+iogNbV7oHXPo3nSoKQThnWaSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2b:c8:54:58:4d:b3:8c:3d:99:d3:29:36:31:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=fc540dd7d1c4d633781397d60681b84d444356ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:70:4c:bb:be:14:92:b0:38:ef:df:2e:dc:
f0:91:f6:60:51:dc:1e:30:5b:1e:5a:3b:af:f3:c9:
12:8c:ab:22:55:ed:a8:f3:e5:e7:89:9b:a7:52:b2:
8f:93:37:4d:bc:c0:7f:79:13:2d:dc:f1:a0:2e:5b:
71:18:61:30:1d:b7:b0:0a:35:a3:87:a5:42:fc:24:
39:50:b6:77:73:08:3e:9d:0b:8f:45:0a:8c:8b:c2:
79:d2:0b:d0:53:b1:3f:29:ba:c6:ed:61:b0:c0:7c:
75:99:23:30:a9:83:91:27:25:4a:01:22:67:49:cd:
7c:d1:d7:5d:65:e3:94:2f:93:f7:63:ed:1b:90:09:
4a:88:a5:d9:b5:08:50:f8:91:9b:0f:b7:f1:3c:20:
39:5c:f6:69:11:10:7a:a7:e9:ee:e7:2a:10:eb:15:
ec:64:f4:ca:57:6e:cb:da:ec:97:b8:dd:1e:4b:dd:
63:e4:f7:14:b5:ef:f2:7c:4c:01:d4:ad:4c:53:30:
2a:7c:14:55:cd:e0:58:fe:d3:83:f2:6a:46:23:bd:
ed:a2:68:39:3a:d3:63:85:df:34:f1:4f:32:8c:4d:
9e:11:3f:71:d3:d0:f9:d8:03:d0:6e:ee:38:50:5e:
93:85:c7:f4:a0:66:39:87:4c:74:51:56:68:fe:d5:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:0D:D7:D1:C4:D6:33:78:13:97:D6:06:81:B8:4D:44:43:56:FF
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:13:35:8b:42:bd:e3:a2:68:86:57:bc:4f:51:e1:f7:7a:c8:
00:15:24:af:36:96:8e:a7:2a:e0:6e:11:c2:99:fc:c8:a7:e9:
e5:c7:48:03:cb:55:20:0f:cc:6a:31:ba:25:e6:f9:4b:f3:25:
19:99:e6:fe:48:78:9f:62:7c:27:8a:4c:cb:46:21:eb:b7:9e:
b3:20:65:ab:44:a5:eb:61:28:52:ec:7d:16:af:45:1c:5d:2f:
4e:71:76:98:ce:ed:67:3f:8f:65:8d:7f:95:3f:fb:8d:a3:dc:
35:b9:d6:51:19:dd:09:e5:d1:02:9a:bb:1a:15:fb:e9:c3:a5:
ce:bf:dd:fa:0e:3a:3e:ff:9e:b1:0d:3c:d9:e4:ce:d6:11:01:
4f:31:a5:0e:8d:d5:db:ae:ad:9d:ef:0c:f0:2b:58:b7:80:84:
b3:0e:2e:9e:c4:91:6d:65:e7:78:f4:bb:71:a4:69:22:8a:e9:
e0:42:a2:e4:08:ce:78:7d:a1:e8:09:5d:f1:02:b9:7c:7d:52:
8d:27:0e:ed:0f:94:d9:17:95:cd:fa:04:1a:ff:eb:15:c2:42:
21:7e:eb:12:85:45:f3:d6:39:41:5a:f8:60:44:b5:4e:d3:35:
8f:f5:9c:38:05:b3:b6:d1:8a:cc:e1:0c:5d:d1:df:ea:f6:09:
d5:34:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:01 2025 by rpki-client