Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File: llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier: yrO5kB0GYdQhGuVD1O/zlh688xRFFdhPTPOP6gaRAtg=
Subject key identifier: 74:ED:56:D2:B8:DF:9E:86:3E:DF:D4:B2:85:DC:79:47:8F:B4:2D:50
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 0194BD8597A67F6155CD4A074A17C16006A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: QRV0RjgfZhZvkvgnH2qX7kBp9AumM6gyKQmnE2HKOLQ=)
2: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (hash: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:a6:7f:61:55:cd:4a:07:4a:17:c1:60:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=74ed56d2b8df9e863edfd4b285dc79478fb42d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:17:51:7d:45:91:c8:14:ee:c1:cd:a8:8e:
04:e2:a9:7d:59:bb:d4:14:43:1b:ca:aa:4e:79:4d:
f1:ea:5a:17:1a:e2:7e:b0:bb:b3:e9:bb:7a:d4:37:
fc:40:09:79:62:67:7e:18:9f:61:bd:3e:ed:1f:3a:
4a:7b:3c:63:3d:60:42:3e:7c:55:a4:65:be:8d:26:
b6:ad:0d:03:f0:18:1c:56:40:ad:5b:fb:b7:28:33:
d6:7e:08:84:e1:c9:a5:e1:26:69:40:f0:f2:7e:15:
96:8b:15:fa:11:9b:7a:23:d8:cd:d9:ee:3b:8b:95:
88:31:84:b9:54:70:63:61:e2:74:c8:60:26:08:6f:
9e:3b:26:c0:53:da:e1:a4:33:b9:31:ff:cf:81:7d:
87:cd:0e:5a:8c:ea:ac:0a:3a:6b:90:53:66:5d:98:
01:03:c5:b4:ab:c3:8e:96:ef:8f:b6:a7:f6:c1:42:
d6:a0:e3:44:69:88:08:8c:ba:f8:64:b0:f5:f5:7f:
ab:4a:0f:e0:1e:49:bf:d3:4a:fe:4e:8b:c4:96:e5:
33:6a:88:16:d0:a4:4b:82:fd:0c:71:bb:ed:74:bf:
b8:33:50:79:45:2b:da:c0:fe:9b:c9:2f:d2:1e:76:
a7:c3:46:55:48:5d:a9:39:57:6f:73:7d:08:41:e5:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:56:D2:B8:DF:9E:86:3E:DF:D4:B2:85:DC:79:47:8F:B4:2D:50
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f6:10:fc:7c:2b:3f:ba:c4:17:aa:55:62:4b:8d:1e:bb:29:
cb:65:bb:3f:f5:9e:82:bb:79:c9:cc:b0:d1:97:e9:4b:94:79:
af:60:ee:5b:1d:fe:1e:58:f3:d5:79:11:f9:3f:88:97:1e:be:
58:de:39:70:dc:2d:cc:79:cb:27:a3:f2:da:ee:c7:27:c4:74:
a5:6a:4c:2d:b4:17:53:00:d5:d5:ee:37:2b:e1:79:53:bf:58:
46:6f:b7:94:f2:cc:bb:62:92:b5:07:71:4a:d1:3c:0f:7e:39:
98:93:4f:2e:59:dd:c5:3c:2f:fb:8c:f0:f8:71:8b:6e:c3:89:
a2:20:75:1c:77:6a:3a:6d:8f:aa:d0:ad:69:27:1f:a2:82:23:
c5:6e:46:58:dc:4e:43:2e:e6:b5:a6:72:c9:7a:bc:f1:d1:2f:
f1:dc:83:5f:01:75:4d:1d:72:73:09:43:f5:5a:4a:f4:05:d5:
e0:c0:7e:2f:71:05:2d:0c:a4:48:51:ac:85:cd:13:3f:c2:fd:
82:e1:c2:ca:34:37:c2:0f:25:aa:80:1c:ec:23:d6:5e:6d:7a:
60:f4:5e:9a:0c:35:df:7b:fd:73:5f:c1:35:73:97:42:4e:19:
be:d7:61:a1:1c:10:89:9b:68:fd:55:fa:21:f3:57:e3:cc:1c:
d2:a2:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:45 2025 by rpki-client