Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: iZjuMiMWd5s1AgvOpPGfJQKYvkgHBgUvcfojduEZQIE=
Subject key identifier: 1D:EE:C0:91:13:14:D9:1A:66:57:13:51:5C:3F:F3:F6:D5:0A:97:E1
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 0194BD4E39F0B1E7BB8FAB0FFBAC11F13FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 1154
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: ULpvdYpYEXkGJJ+qhXydpR387OrOqvSPH8MvPLJ2WD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:f0:b1:e7:bb:8f:ab:0f:fb:ac:11:f1:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=1deec0911314d91a665713515c3ff3f6d50a97e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:c7:73:36:2a:f1:e2:20:9f:9e:e0:a8:f3:
63:79:92:9e:2f:99:30:f2:04:be:f7:a3:bc:6c:2f:
1d:48:9f:75:8d:4c:fd:12:39:23:67:0f:35:4e:e0:
dd:4c:01:30:b4:a4:a1:38:32:96:ec:b4:07:67:53:
9c:37:99:cf:16:64:6d:21:b1:3e:49:3a:78:2f:ac:
4c:33:df:39:e4:64:61:d4:02:ad:51:b0:63:dc:d0:
b2:b2:65:cf:bf:50:1f:0d:70:41:57:10:05:05:e0:
e0:5a:5f:c0:26:d3:7e:57:81:f9:45:71:c8:f1:e4:
a8:e6:3d:96:c3:a6:31:aa:8e:ed:07:7d:8b:f3:97:
d0:46:b3:a0:8c:3b:77:b7:66:bd:de:84:cb:26:df:
0b:13:e6:4d:58:43:88:f2:e0:c6:f7:ab:52:a8:08:
4e:21:22:e7:a3:e9:5f:6f:04:4e:fb:a2:91:11:95:
5b:01:64:c6:4c:64:e0:b7:ad:2c:8b:c2:57:f4:ec:
51:86:ef:77:c3:ae:a4:0d:41:a9:d1:25:30:01:dc:
a9:05:05:78:ab:9e:7e:94:e5:f0:3c:9c:0c:df:db:
12:54:06:67:e2:98:a3:ee:60:55:28:26:b0:74:2f:
54:d1:8e:74:25:b6:2f:ea:5f:4e:65:02:e2:e7:f2:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EE:C0:91:13:14:D9:1A:66:57:13:51:5C:3F:F3:F6:D5:0A:97:E1
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2a:b5:b1:c3:ec:4a:81:b0:d7:d3:96:cb:b5:aa:1a:f3:7b:
75:e7:dd:cc:84:42:06:19:ba:ab:b1:d1:62:10:80:fd:e1:90:
da:ad:1a:40:05:52:1a:fe:ae:ec:83:8f:a4:7b:c0:95:5d:8a:
1e:aa:1b:07:14:3f:ff:48:1c:81:46:c8:17:83:8f:0e:74:81:
7c:5f:e4:ff:fc:40:d5:ca:4c:97:3d:b1:3f:f1:f5:09:51:77:
a1:d1:49:e0:a7:6d:40:8e:ae:fb:ad:ea:10:13:d6:1c:f4:c7:
e3:84:f8:89:cd:9f:d7:cf:d9:33:5b:a5:27:23:37:14:20:a9:
73:88:73:2a:2a:fc:73:93:45:a7:d0:4b:16:00:65:b5:c0:1d:
14:b6:f1:ca:a6:6e:51:64:66:e0:e2:cb:da:62:36:2b:94:fe:
56:ef:e5:c5:48:f9:4e:b4:d0:2c:bd:4f:cb:f1:f4:1b:3c:88:
56:c7:91:3f:e5:0d:be:b7:be:1d:49:dc:fa:21:b9:08:f8:bc:
b0:c5:0e:5f:73:94:e1:eb:04:47:72:88:49:2b:fc:e6:c7:48:
23:f5:1d:fe:35:55:ff:aa:1d:b7:e3:0a:0a:e2:a0:dd:bf:e3:
bb:2a:fe:65:1c:7b:a9:bd:22:29:b9:4e:22:c1:e6:ad:6a:a0:
57:b0:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:18 2025 by rpki-client