Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: sZQtEZh1/i84MCM5rVDuGsDSPlZePprVglqzb6lV+bA=
Subject key identifier: 00:F2:9E:87:63:46:04:31:A2:B2:3D:20:F4:DD:BE:3D:18:C0:96:F4
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 0194BBCE777DDD6FBEF27BB2828657C1D909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=)
2: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: 7qOQbT8Pk4GF+C+dF/KplL+IhAvyayUP0kghVmepoOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:7d:dd:6f:be:f2:7b:b2:82:86:57:c1:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=00f29e8763460431a2b23d20f4ddbe3d18c096f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:9d:49:39:2f:d8:99:24:1d:42:e1:b2:6a:
75:1f:8c:2a:87:19:e4:dd:06:c3:61:61:1b:85:6d:
4b:46:67:63:1f:33:ed:1e:e3:36:7b:21:de:25:da:
0f:a3:2e:40:d5:29:a5:d4:c8:56:d1:ad:dd:f3:d8:
fe:8c:e5:55:eb:7e:2f:54:ef:19:0f:19:24:c6:92:
2f:64:a8:d4:70:2d:f9:2b:23:06:9a:03:99:65:87:
87:36:8a:9e:e1:f6:b9:99:e9:bf:b6:e2:0a:fb:aa:
c6:b4:c0:be:34:1e:a5:47:7c:08:1d:2d:75:3c:f7:
e9:7e:ef:cf:52:07:42:55:29:37:e5:77:2e:8f:76:
60:f0:8e:fb:e6:2b:30:cf:bf:c4:97:21:7e:e9:95:
0b:40:81:1d:11:91:e3:01:03:3e:74:e5:0b:b4:05:
d6:f4:cb:0a:36:1c:26:f2:f8:39:cd:cc:51:4d:cb:
e4:61:53:89:94:3f:94:00:50:59:c5:67:7a:80:b8:
32:dd:2c:26:78:91:c4:6d:a1:8d:7d:33:d8:07:bc:
e7:1a:b8:42:e5:5f:73:61:1d:65:21:69:24:f9:1a:
a2:b0:11:69:41:17:68:7d:44:99:65:9d:c0:c8:54:
cb:f1:cd:0d:ee:52:ae:b9:d3:9a:d4:e7:10:e3:a7:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F2:9E:87:63:46:04:31:A2:B2:3D:20:F4:DD:BE:3D:18:C0:96:F4
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:2e:99:1d:e2:da:af:a9:cb:2b:9e:32:eb:c9:40:27:e3:
a4:be:ea:e0:18:c1:61:4f:96:1f:18:6b:f3:b7:e8:c2:15:7a:
d5:80:96:0f:6c:49:b5:c1:95:3d:31:3a:5f:f0:77:9f:c3:d7:
55:6b:7d:59:93:b8:12:db:1e:bb:4b:a9:20:bb:e9:6e:29:2b:
0e:ba:1a:da:12:e5:a8:3e:54:56:47:7f:cc:4f:0b:88:70:cc:
a9:ea:34:bd:b4:e3:3d:af:e4:ef:58:6d:e9:e0:de:85:8b:0b:
16:90:aa:75:6d:ee:d9:e0:06:49:ab:d7:95:3f:7d:e3:ad:1a:
42:03:fe:e4:e4:31:ca:c6:ae:42:79:55:32:13:7f:94:b3:05:
1d:8f:19:c2:d9:0a:cb:cd:7a:6e:7e:82:29:c3:1e:26:9a:e1:
77:82:0b:a3:96:4f:f4:6a:b7:de:05:7f:33:73:1b:ee:c7:8f:
45:db:9a:21:7d:78:c3:70:e5:06:20:b3:3e:ae:2a:db:51:aa:
c5:15:d5:b2:3e:c1:b1:a2:da:6c:22:92:fe:e6:6c:5e:ce:38:
d6:5d:ec:09:c6:9f:29:a3:05:49:a6:f4:cf:1d:91:b3:53:cd:
2a:c4:f7:95:55:29:0f:04:85:ac:38:d4:9f:95:ec:64:87:ed:
13:72:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:54 2025 by rpki-client