Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
File: lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft (raw, json)
Hash identifier: aBctIKWKc3KgmmJtvmgt/Q7bVgQgQSU50/OQDUlQo+A=
Subject key identifier: D6:CB:19:BB:34:47:2B:1E:69:6E:C2:19:E6:5E:14:FE:7F:0D:69:C2
Authority key identifier: 95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
Certificate issuer: /CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Certificate serial: 0194BCE07087ACD3C3DB7754A54613898C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
Manifest number: 127B
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl (hash: EvpFP0oImsMq1NZcXWGpF0aGFWAIJbpOpIY3b7zT34A=)
2: xW2URwmy3MAc43ukfcbqMYMuxdw.roa (hash: Ma/n0ismeTjhAebqRYXqWhimU+dr8eW7Fszdn7DlAoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:87:ac:d3:c3:db:77:54:a5:46:13:89:8c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=d6cb19bb34472b1e696ec219e65e14fe7f0d69c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:47:25:3c:ee:9f:78:0c:d7:af:a7:d2:95:
ea:a8:23:c3:56:ed:fd:07:65:1f:e4:a0:88:d5:f5:
6f:f4:ca:8e:a4:52:58:1f:b8:15:16:5f:35:bd:54:
54:95:79:14:e5:2b:08:bb:0a:4e:01:52:22:03:77:
ab:3f:14:5c:98:01:d3:ed:87:80:7d:2d:ea:b2:19:
96:8f:e1:84:6d:dc:0b:e8:22:c6:41:a8:95:a5:55:
b1:1a:20:31:cf:83:4d:33:a3:c7:1e:65:a5:c3:b1:
b1:61:4e:a3:45:33:eb:c7:b9:9e:e6:6f:4d:34:77:
fc:4f:d3:be:b9:c1:ee:ad:c4:9f:f7:28:46:97:85:
3c:e5:65:39:94:47:15:07:90:aa:2e:c7:77:d4:1a:
e8:36:57:a5:17:8f:ae:11:8a:53:87:ba:b2:9d:e1:
5e:31:f6:f6:3e:c5:95:0c:c8:b8:ae:51:82:3b:c5:
fc:fc:5a:08:58:80:32:5c:19:5f:17:2f:48:ef:f8:
16:de:96:10:ad:ff:78:a1:78:1f:db:6d:b3:1c:3b:
fa:35:0d:87:d3:94:df:39:5d:50:87:cc:30:6f:fe:
ee:87:08:db:2f:9c:b6:1b:fc:24:5b:5a:33:39:e5:
cc:e6:a5:77:56:99:f0:5f:27:2c:f8:6a:15:78:10:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:19:BB:34:47:2B:1E:69:6E:C2:19:E6:5E:14:FE:7F:0D:69:C2
X509v3 Authority Key Identifier:
keyid:95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5a:26:38:25:08:fa:76:31:ba:c9:9e:de:78:93:ca:01:d0:
d7:e6:f8:32:43:38:be:c5:bf:f8:0e:72:12:12:f1:15:3b:6a:
e0:a4:3d:3e:1c:fe:5d:9c:58:7d:56:de:12:f8:49:5d:6f:3e:
55:88:24:a7:c3:89:c7:00:fb:13:4f:c2:15:dc:0c:24:7f:92:
97:26:0e:b9:f7:05:6f:c4:fb:b9:17:d2:10:e5:4e:8c:14:bc:
3b:a4:b7:ab:5b:3d:98:a5:bb:42:1a:a0:ce:7d:b0:69:73:15:
1e:07:7e:36:2b:52:0a:14:8b:05:9a:87:82:8d:4b:ba:42:06:
95:61:17:4d:7a:f5:75:ea:84:46:bc:ce:f8:06:81:06:90:53:
41:47:da:05:c0:42:0f:5c:12:95:9c:d2:2b:5c:c1:20:58:c9:
67:0f:8c:23:fe:7c:25:1a:e9:36:e2:1d:c5:e5:44:cc:3a:2e:
88:55:b2:49:bf:f3:df:4c:b5:57:5d:e8:35:95:f2:c4:cf:ea:
d4:c6:fe:00:18:73:65:56:a5:10:52:43:26:8e:cf:5e:99:5c:
8c:71:19:55:87:68:d6:8a:8d:eb:5f:72:9c:9f:96:99:00:34:
a8:d8:94:4f:fd:b4:6c:e7:77:41:f3:3e:63:ae:f8:a3:02:ee:
c5:82:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:45 2025 by rpki-client