Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: emV6BUkaXqEBrIugM+NNPZec0P9z1t2I9Ut60PuNKOM=
Subject key identifier: 88:43:BE:21:D6:02:59:23:68:73:B5:13:53:66:76:97:07:06:56:41
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 0194BD85585D8937FDE6059FCDB9308EB909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 11CD
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: 3rgYqGqnZPklgITV-WBujJljFBU.roa (hash: Tp2azEsxKTsu2hz5GpPNvovvsk7VOiHcGA1gooaCoRs=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: Uo89htwgHDyZbbJA/Vp4xcDlvcy8cYF4Wah+/GNlWvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:5d:89:37:fd:e6:05:9f:cd:b9:30:8e:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=8843be21d60259236873b5135366769707065641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:00:1b:8e:cf:15:ab:ff:d5:03:d6:4e:62:
c4:db:f2:b3:5f:62:6f:f1:85:2e:ab:8b:bb:01:3e:
32:ea:c1:22:24:1e:2f:86:54:c2:8e:07:6a:a1:43:
d3:65:b4:93:2c:52:52:24:8b:5c:42:89:36:3f:35:
0f:1c:44:af:f1:df:9b:d1:ee:d6:fa:b5:22:94:1b:
0f:f4:19:a3:2f:59:84:9c:e5:68:71:bb:47:e7:f5:
77:a5:40:20:ff:66:49:17:61:89:a8:1c:85:60:e7:
fd:fc:eb:97:d3:42:54:53:c9:7a:7c:c1:ef:44:fb:
8c:d1:22:b2:dd:ab:c7:4b:47:6a:6d:9b:71:bf:bf:
f2:52:20:d7:de:23:e2:74:62:b2:7f:de:86:c3:58:
ff:9e:2a:8b:10:e4:6c:6e:c7:a9:b9:63:38:7f:c7:
e8:31:12:2e:d7:34:be:71:52:13:46:8a:33:ff:dc:
77:4f:ca:9a:7a:c5:0f:d4:19:00:88:40:5e:c1:f6:
75:ee:3b:a0:8d:77:fd:be:91:26:84:04:f7:bf:a6:
cf:bb:43:3e:f0:fa:8d:76:bd:c1:d5:29:82:ce:56:
1e:61:79:6c:1d:5e:f8:9c:32:ec:a9:b7:f4:b2:f0:
47:09:3a:b6:43:24:82:73:10:b8:87:fb:76:0a:5e:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:43:BE:21:D6:02:59:23:68:73:B5:13:53:66:76:97:07:06:56:41
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2a:8f:a1:d1:67:f3:01:25:cf:88:60:f1:e6:17:13:8d:ea:
43:1d:f2:ec:71:33:33:17:72:84:4a:55:5b:cc:35:b4:b9:ca:
c7:6d:17:90:40:80:1b:98:95:ca:66:ce:92:78:78:7a:9f:7a:
ff:0f:96:9c:92:42:2f:d3:37:00:78:b9:fe:fa:57:73:20:55:
d4:27:68:4b:c5:86:b0:eb:4e:3d:5c:ec:01:93:67:62:51:29:
32:95:1a:fc:3f:04:a3:4e:93:35:a0:12:8b:c4:e6:df:8f:4f:
67:c0:f9:9b:af:3d:40:96:ba:6f:46:a6:be:88:38:b1:3c:1d:
2a:a5:c6:8e:95:63:24:2b:36:55:f5:b7:e0:b9:0e:22:3e:c3:
00:15:c4:cb:e3:bb:e5:4f:07:7f:2d:ba:7e:bf:51:b9:80:3a:
33:f9:e4:50:f7:16:e0:b8:d4:45:4b:0a:19:b1:d4:ba:96:63:
36:d7:3e:d6:76:cc:64:4c:ea:3b:ee:66:09:d4:43:3d:91:c1:
1b:7a:ea:5c:f3:66:81:19:73:60:ef:33:06:7a:15:fa:4d:66:
48:7e:db:7b:df:72:80:32:3b:42:06:cc:e9:cc:bf:69:ae:27:
e1:5c:b8:91:bb:1f:b1:0a:7d:03:81:18:fe:79:f9:70:21:53:
e0:25:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:19 2025 by rpki-client