Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File: L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier: DLenRnmyAuO8Ap7KhUD2zOne1vgnNq9pPdU7+vN8q/I=
Subject key identifier: 83:DE:3C:1E:C6:9A:CE:D1:61:CD:75:B7:A0:0E:34:E8:2D:5B:E0:9C
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer: /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial: 0194BC3BE14878B810B8DE3A7F7E69700548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number: 1035
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: 5KaqhnPFCgreQRZumiSZ+y+xd6GdYI07QrYa8Qb8600=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:48:78:b8:10:b8:de:3a:7f:7e:69:70:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=83de3c1ec69aced161cd75b7a00e34e82d5be09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:4a:c3:5c:0b:ad:2f:a4:5c:49:43:a8:08:
d5:76:bb:ac:11:15:cc:3a:5f:b6:4b:8e:b0:ce:41:
29:27:80:63:63:6e:47:f5:0c:9f:e4:8e:79:48:3e:
83:16:16:12:70:b8:77:15:30:70:e3:1d:b6:b6:ed:
2a:a9:0e:9a:ef:09:28:4e:50:22:3d:27:6b:05:50:
5c:dd:a1:dd:b2:d9:a4:b4:e0:62:a8:a0:e5:da:1f:
e9:84:79:41:d1:59:98:94:22:a7:13:1c:29:21:21:
9e:98:67:f8:d2:b2:95:6e:2e:0a:7c:a8:f9:cf:c9:
86:13:5e:85:2a:a7:b8:00:03:31:35:a6:29:0a:e6:
c6:63:6f:41:62:de:97:10:68:db:18:21:73:c3:fe:
81:25:7e:8d:5b:96:bc:6b:a3:9d:5b:a2:eb:66:57:
84:03:29:17:1e:69:8d:59:d3:bc:c8:54:e9:28:32:
7e:8f:68:54:e6:90:92:e0:a6:35:d2:3d:53:74:43:
e0:3b:42:4d:e7:96:e4:3f:6b:35:ea:a8:40:7e:7d:
df:68:06:ea:d4:26:21:0d:e6:5e:84:e4:d8:5b:10:
d2:7c:aa:d2:75:21:b7:de:c3:1a:ce:3f:dd:a3:00:
8d:6b:ea:75:63:05:39:1b:48:9c:96:52:d5:ec:47:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:3C:1E:C6:9A:CE:D1:61:CD:75:B7:A0:0E:34:E8:2D:5B:E0:9C
X509v3 Authority Key Identifier:
keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d2:4c:34:cc:c5:f9:d4:77:af:e7:6f:9e:67:3a:c1:c4:9f:
7d:7e:4a:3f:63:0e:69:5c:38:8b:db:4f:42:7d:fd:fc:77:4f:
7b:7c:16:77:57:d2:51:91:ba:c0:09:11:de:f5:ec:b0:2b:14:
df:ae:ca:82:6c:29:de:41:54:23:f4:7f:0f:14:36:45:d7:31:
85:d6:2a:bd:6d:26:52:a6:e1:c0:a5:98:58:ae:6a:ee:7f:7b:
64:c8:1c:e5:ab:65:d0:94:1d:da:0f:68:42:ee:ad:6f:93:c5:
11:96:74:ab:f7:db:7a:9d:f9:91:52:50:c4:23:a3:af:76:0e:
53:f5:01:34:70:d1:81:52:68:14:c2:78:97:6a:a7:9a:e4:d4:
99:f8:f1:cc:ee:bc:0f:20:b0:99:28:19:bf:52:e3:d4:e7:ea:
b0:d7:c6:19:4a:fb:13:29:ed:37:6c:f1:a0:3b:4a:80:03:8a:
cc:64:73:a6:64:31:0a:4b:c3:c3:3f:79:df:92:89:5c:9f:c5:
5d:da:d3:d5:59:b3:09:db:76:1f:cf:3f:20:2d:3b:66:c2:61:
21:d3:65:3d:30:6d:c2:d4:03:2a:5a:01:1e:29:93:30:bb:b4:
c1:7a:dd:58:bf:9f:58:fd:f3:9e:6d:0a:1f:cd:46:c9:38:52:
90:c2:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:39 2025 by rpki-client