Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
File: lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft (raw, json)
Hash identifier: s323EC58zf2Dd7kdwKVUikw4u+bdLwesLtguM9aahM4=
Subject key identifier: 40:67:4F:65:2D:63:B8:28:8D:79:0E:C7:99:35:91:C3:DC:B5:F3:10
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 0194BCA9ED1103C602FBCEB756CB038926B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
Manifest number: 09F0
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (hash: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=)
2: lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl (hash: EKpfidMbHcExOSJG7+TIF4n/bcK581HMT238sBxlWQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ed:11:03:c6:02:fb:ce:b7:56:cb:03:89:26:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=40674f652d63b8288d790ec7993591c3dcb5f310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:a6:69:a3:c2:02:c6:81:fe:dd:db:74:4b:
4e:5e:8f:e5:f8:87:40:91:c5:e7:ed:ce:1a:3a:91:
b4:9f:b4:3e:77:61:10:f5:90:93:1c:40:0e:5c:86:
76:1a:3c:01:da:4d:6c:bc:cf:09:c7:86:af:02:1e:
c7:c3:35:f2:97:da:14:66:6f:2d:2a:b1:16:62:18:
8c:0d:af:11:c0:7b:a6:5b:e1:93:33:93:4a:f2:49:
ad:1d:e5:1c:ae:8f:da:e6:9a:e8:f0:99:c4:57:6e:
50:21:41:96:39:23:fd:f1:31:32:07:91:79:da:bb:
60:22:f0:6c:ff:a7:64:88:91:06:38:65:b9:0d:7e:
33:77:7e:7d:b4:3f:10:64:1b:a3:f5:8b:60:c0:1f:
3d:a8:5f:50:94:e2:47:48:d7:85:be:c9:ee:99:49:
e9:33:e2:63:4c:8f:ce:32:bf:64:04:0b:58:4d:0e:
a9:3a:14:2f:5c:24:c5:40:a8:49:52:eb:82:43:d5:
ae:d5:8c:de:c0:c5:97:e2:fe:f9:fb:d0:ae:53:1e:
40:d3:76:bd:87:a5:4f:e9:7d:e6:44:41:7e:51:e3:
01:99:87:22:0a:1e:08:ff:a6:32:22:f5:1b:4c:30:
dd:53:62:18:77:81:5e:95:14:7d:f9:d5:67:45:f5:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:4F:65:2D:63:B8:28:8D:79:0E:C7:99:35:91:C3:DC:B5:F3:10
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:cc:67:b9:69:20:03:7c:51:0b:a8:41:2d:d7:e3:b1:e4:
b3:0e:44:32:3f:0c:7d:8a:04:59:e8:e1:2f:9f:66:04:59:c2:
1c:31:60:b8:db:94:30:63:b5:50:01:0c:a7:b1:e1:04:0a:24:
8c:af:1c:a7:e4:57:46:52:eb:e7:0d:e5:a9:32:ec:e6:e8:ff:
e8:47:1b:b8:64:17:d5:45:05:63:9c:42:a5:bd:a6:17:48:ed:
4e:0a:82:6b:c0:97:ed:bd:eb:66:73:38:fe:e5:cc:b2:70:f4:
ff:5b:ec:a0:82:1c:79:86:17:d8:aa:7e:b9:58:ba:74:1d:f2:
42:39:ff:8d:29:1d:91:5e:26:ce:e2:4d:3a:99:84:6b:52:e7:
1d:78:78:b7:58:ad:8d:5b:a7:93:04:f7:22:a7:ab:2b:e9:75:
f7:6e:0b:a1:65:f2:d6:e7:ca:0d:eb:df:95:43:e2:69:16:36:
f9:30:d7:54:f8:30:64:29:ae:b9:e6:3f:a5:49:58:ce:83:2f:
c3:eb:ba:9c:a7:4a:3a:c0:c5:52:c5:bd:2e:db:0f:e7:08:70:
e1:dd:2f:92:af:58:b5:8d:ed:e6:b8:58:a3:3b:8d:e8:27:b4:
07:25:00:a6:01:93:94:96:0d:f1:a6:b4:9b:cb:d2:c2:84:a1:
3f:b6:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:07 2025 by rpki-client