Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: NcMHNi4SX3yiQYiSWW7b0rEgqi+LzaNEizy9Cu829Sw=
Subject key identifier: B5:7E:DB:58:03:52:7C:4C:6F:88:AA:1C:B0:1B:5F:87:BD:AB:B6:25
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0194BD85544A994EE638FE38C77CD3185BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 09F8
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: Aqp8uTSTnibAmpOp2sBanVlvvNs.roa (hash: cMnur1KELmy+RSYzYfRu9NgELGYKasLuCbT1n5LoRew=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: fay3xTIPK796BUTbHfMqMLHPgl4lVhwwPg0sj82FZko=)
3: grTXuofPixn6xRm0cfAo_IU0-vw.roa (hash: pEDlXByv8i5l6MBv45d5Zz8GtQAK/sVMSFR6YB3YvYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:4a:99:4e:e6:38:fe:38:c7:7c:d3:18:5b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=b57edb5803527c4c6f88aa1cb01b5f87bdabb625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:21:8b:c1:dd:51:f5:1b:24:ac:ab:1b:60:
5c:ac:3c:cc:71:91:35:53:24:33:46:a1:8b:a8:52:
2c:1e:39:6b:71:7c:59:3d:b4:59:6b:ec:af:c6:e7:
e8:b2:0d:3c:05:32:f0:e3:a4:43:8e:72:3d:15:4c:
ec:37:55:03:4a:70:54:15:64:a2:36:b0:29:f6:e1:
4d:2c:09:68:8f:4f:98:0f:42:c4:6c:4a:a3:dd:d9:
2c:b2:f7:3c:d8:c2:f1:5c:63:95:73:6b:c6:0e:25:
bd:9f:43:cd:3e:9e:1b:a9:17:6f:da:26:9b:82:9d:
61:0f:5b:94:7d:a9:33:32:db:0c:15:fb:6b:5b:26:
8e:f1:46:0e:b3:b1:b7:82:44:8f:a7:22:a9:e3:ff:
45:11:fa:bd:85:18:65:f7:1a:b3:6d:5b:17:a8:b6:
5f:a6:75:b5:13:60:72:cd:48:1b:96:c0:4a:6a:0b:
ba:5b:d3:8c:cd:15:33:df:9b:20:58:09:98:35:0e:
65:11:ef:67:ae:4b:96:a0:1b:79:eb:a5:87:08:fa:
49:c5:4e:4c:2f:a3:74:f6:ee:8a:32:3b:ef:b7:c8:
e8:6e:07:9c:45:57:4e:ef:d9:7d:44:99:22:ab:5e:
4b:59:fe:70:3c:ec:c3:94:dd:d9:a1:c2:c1:93:f3:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:DB:58:03:52:7C:4C:6F:88:AA:1C:B0:1B:5F:87:BD:AB:B6:25
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:05:2a:a7:71:4b:4d:a8:bd:59:18:44:34:cc:20:1b:bc:42:
af:07:25:1d:42:14:46:cc:30:87:3c:a3:3c:68:bc:8e:a3:8a:
48:ae:eb:ef:4f:a0:88:12:ae:37:a7:a4:94:14:c1:9e:0b:31:
83:92:03:a0:62:c8:b9:5a:fb:48:b3:e9:e5:02:cb:2c:f4:5b:
c3:98:b4:09:e2:3e:3c:fd:36:88:e8:21:26:23:91:1b:80:99:
df:cb:4d:4f:21:cf:e2:09:a5:f0:4a:32:4e:73:6e:0b:d9:fe:
03:03:5b:5c:66:3f:c9:38:20:f9:7c:c4:6d:73:72:c2:a4:91:
4c:d3:56:be:f1:fd:63:88:f5:40:ff:bd:28:c6:28:96:2e:47:
75:6e:a1:b2:19:99:42:06:e9:fb:bb:e6:ad:f9:3c:49:ca:ee:
e7:2f:31:48:93:1d:04:33:98:b4:5e:d5:78:40:b1:c6:6c:72:
ad:af:d3:8d:7b:b5:61:16:4b:4a:20:5d:0a:59:f1:83:f2:24:
c9:62:fd:3e:e9:07:70:b5:ff:e1:f5:6c:2c:1d:71:de:f5:fa:
89:69:0f:f8:9f:aa:d8:fa:44:03:7d:e9:df:2c:6d:e4:d2:d2:
ab:8b:15:0a:22:fb:ec:49:c3:d4:41:5a:5a:5e:01:87:b9:2d:
6c:f1:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:14 2025 by rpki-client