Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File: LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier: dS4/WrRfXPP1ipRT9P60dCk22aEiIASnAFL4V7vcLrk=
Subject key identifier: 3A:26:2B:F8:BA:2E:F7:D2:0E:0C:D8:FF:2C:8E:36:73:78:30:31:AF
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 0194BC3C31E597AAD2F807B99B0BD313DE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 4y-HwXvA0OxK3vVdPd5A33rGg9Q.roa (hash: gzORbcgXYU+qNBe8rAH5Phv3POsitSIbAnxxOJbLq5U=)
2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: TbxcVulE+7v4rbD6A5bSOpbaTiQD9cO/Gs6JPmEJUJA=)
3: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (hash: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=)
4: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (hash: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=)
5: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (hash: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:e5:97:aa:d2:f8:07:b9:9b:0b:d3:13:de:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=3a262bf8ba2ef7d20e0cd8ff2c8e3673783031af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:a5:91:36:53:95:82:7e:db:98:4c:dd:17:
54:71:f9:83:b0:06:90:9c:eb:78:b9:e4:a7:a7:9a:
cc:10:d4:dc:8b:f7:f8:d3:fb:ec:98:aa:a5:94:7d:
8d:71:62:85:02:1e:26:39:ee:bf:55:5c:61:58:8e:
2e:8c:b0:81:ad:0e:b3:b7:d4:8d:e2:94:2d:ca:a8:
ae:2b:f6:b4:bd:27:11:24:d1:58:ce:fd:66:7f:c1:
f6:63:54:8b:7f:0c:ea:b4:77:57:15:19:d7:81:20:
a9:a0:ba:71:40:11:9b:da:8f:2e:c8:b2:70:44:0f:
41:4f:e6:88:ea:6a:0b:9a:de:cb:4a:35:b6:9b:f6:
a2:3c:49:38:f1:f3:28:19:0d:38:dc:ba:39:d0:1c:
0b:0d:c4:32:6d:63:29:e5:f6:ae:22:be:d4:55:48:
bd:46:fa:11:35:13:a0:e4:e5:94:fc:a2:5c:2a:45:
7f:cb:03:e4:eb:12:bf:2c:f3:03:9d:20:a0:3d:13:
b8:0d:b9:7b:81:06:65:ec:64:82:e5:d9:e4:6b:0f:
c0:10:fa:f8:5e:ce:73:c9:b0:14:b9:c5:64:a1:c8:
27:90:7d:ff:54:36:d5:cc:27:af:6f:74:15:8b:17:
16:6e:b5:ea:15:4d:10:d8:fa:5a:d5:4c:0e:ce:af:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:2B:F8:BA:2E:F7:D2:0E:0C:D8:FF:2C:8E:36:73:78:30:31:AF
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:05:32:93:80:c6:bc:64:f6:25:11:cf:50:e8:44:d0:7d:eb:
be:6f:5c:0e:47:93:0b:af:39:59:2a:3a:13:b1:6b:29:9b:e1:
31:b1:2c:d2:00:a3:cf:19:5a:75:19:f7:e2:95:bc:b9:b4:ef:
f3:11:76:73:b0:49:88:5b:59:fb:34:5e:99:38:75:79:f7:81:
e4:d1:48:30:90:95:aa:7a:78:d0:96:7e:02:b0:e3:f6:00:9f:
06:86:e0:64:c5:f3:5d:b1:22:f7:34:3d:93:7b:27:ff:74:3d:
7a:de:82:76:87:fb:d6:5b:bc:b7:7f:d7:f0:33:09:49:8f:8a:
b3:6a:72:9f:d1:ef:37:f1:25:4b:21:52:80:e7:b6:ce:85:a7:
34:c1:e6:dd:25:06:80:21:a8:ad:8b:cb:5b:2c:fb:22:5a:d6:
93:88:21:0f:bb:ea:35:13:9a:a1:e5:0e:a4:93:88:b2:b6:ed:
2c:cb:d7:fa:8a:18:4a:8c:22:8f:b7:09:ff:7a:88:7c:8f:2b:
d5:ed:ec:8c:87:42:aa:d1:bc:87:ad:f1:2c:95:13:b7:17:a9:
0a:22:a3:8a:3b:9c:91:60:c5:bd:2c:00:7c:10:c2:6b:25:de:
2c:26:3a:0e:2a:b1:8e:fd:b9:bd:48:18:7a:88:19:92:58:66:
3a:4c:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:19 2025 by rpki-client