Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File: L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier: I32L3u3vtzsu8V+dl3czfsX4DqFfY8Q8luqGgXf8li0=
Subject key identifier: BD:16:FE:1E:CC:59:2E:2C:AC:B4:01:1D:10:01:28:9F:C9:A6:B4:2E
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer: /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial: 0194BC3C493F63B96B55937D64FE843B6356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: l5Sx5JveG4hlJWQQs5xBGOA/AIiqC2FmExFHRyFm0+Q=)
2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:3f:63:b9:6b:55:93:7d:64:fe:84:3b:63:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=bd16fe1ecc592e2cacb4011d1001289fc9a6b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:01:f0:b1:e9:b2:4c:cf:d2:89:0d:ca:8c:
7f:a5:01:ab:5a:16:ea:dc:c0:9d:55:8a:15:e6:cd:
15:f7:0e:d9:df:cb:76:34:5d:84:47:b9:06:70:03:
11:71:38:a5:ba:4a:8e:55:04:7c:4a:57:26:d9:d0:
00:c8:78:53:fc:be:5a:8d:da:8c:6a:83:a2:c7:3f:
72:37:92:03:fa:27:40:9b:b2:8c:27:9d:de:22:f4:
b3:50:bf:77:7f:5e:d4:ee:17:e4:ce:70:18:6f:ac:
a4:18:1d:86:fa:6c:a2:89:7b:25:c5:62:c2:0f:21:
32:cd:ac:ae:93:54:98:72:19:77:a1:d5:f9:a3:8e:
43:c9:d2:5d:24:5a:b4:24:0e:ea:bc:3e:46:a9:9e:
2f:6e:12:13:e3:db:4b:d9:5d:fe:8a:06:72:b3:5f:
20:82:fe:c2:07:34:46:30:5e:4b:c9:08:b4:b7:19:
5c:40:72:58:5b:fb:45:7e:e1:39:13:e9:21:ef:0e:
6d:0e:70:e4:60:3a:75:58:1a:14:01:fa:72:13:db:
82:5a:61:54:77:29:33:3c:19:d1:46:33:c1:1d:e3:
1a:54:b7:08:f8:25:43:98:16:4e:67:a6:3d:23:c9:
96:fc:3f:59:77:28:87:e0:51:33:6d:ce:e1:8f:f1:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:FE:1E:CC:59:2E:2C:AC:B4:01:1D:10:01:28:9F:C9:A6:B4:2E
X509v3 Authority Key Identifier:
keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:dd:3d:04:10:b4:db:eb:ca:ab:f1:92:2c:ca:85:7f:23:1a:
5b:00:8b:68:66:98:1e:8c:7c:28:88:eb:ae:a1:bf:91:cf:08:
5e:70:4c:94:a8:e2:e2:47:c2:9b:a5:ff:7c:46:5c:82:72:61:
64:94:f3:5a:a9:25:ef:24:00:d4:f7:3f:9d:43:d4:7b:41:3a:
55:2c:0b:bc:97:1d:1a:61:6a:04:23:4c:25:7a:fe:29:24:2b:
98:b0:a4:2d:7f:3a:75:d7:16:80:45:9b:67:35:8f:32:d5:61:
fc:7e:e1:ef:f2:9a:4d:95:f9:3c:bf:b7:9f:a4:fb:96:c5:f1:
79:d9:8b:d1:75:8b:46:71:a0:cd:37:96:01:6a:55:2f:1d:c9:
92:d3:f2:9f:8c:62:aa:aa:c4:93:68:59:ed:04:47:cd:6a:48:
c5:3c:2c:3b:f6:c8:ae:1a:9d:d7:8f:29:a7:25:e7:13:c9:75:
26:42:fb:93:d0:19:7d:1d:b0:ea:0f:19:be:e5:87:b1:e1:7d:
33:8b:44:15:ee:b4:96:f5:a9:f1:6e:ba:ec:2a:17:36:0b:f4:
eb:fe:48:2a:0f:4a:72:2b:6b:97:fd:aa:74:48:b8:f3:ad:48:
b4:e6:1c:d1:ba:d0:2a:7f:d7:a7:36:1d:0f:19:34:02:40:66:
e5:b7:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:00 2025 by rpki-client