Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: Xggp/8pKew5kDycrFhXR8EQ11ro08uddBhP9DUqSamU=
Subject key identifier: E2:90:40:01:27:A0:45:95:73:2C:AC:49:C9:EC:04:E4:EA:73:32:42
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 0194BC3BDBBD6518802AB43EEA85F515E74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 11CB
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: i/mXl60TlEjS6FPAegEF8j0+KWbVVN+lCZiKwPdmZSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:bd:65:18:80:2a:b4:3e:ea:85:f5:15:e7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=e290400127a04595732cac49c9ec04e4ea733242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:4b:ce:0d:28:57:95:a4:68:7e:fb:24:2d:
88:7b:f6:d1:22:17:aa:5d:07:85:8d:b0:90:e3:f4:
b0:6a:a3:e7:ac:64:46:4a:e5:df:bf:03:05:7f:1b:
e7:3c:80:73:6e:1f:7c:76:57:42:b5:9e:bd:de:03:
58:d5:95:d4:00:ec:6d:b7:ef:b1:5d:d6:77:24:33:
e9:b7:a6:2f:7c:0e:0d:52:65:23:81:a7:2b:d0:bd:
64:4a:99:e4:30:6a:bb:1e:3f:7e:8c:c9:9d:66:df:
a5:0d:6f:8e:03:53:75:47:82:76:7e:be:7c:92:f4:
13:a3:99:71:1a:71:9d:75:e7:10:5e:b3:9d:3e:9b:
f9:11:14:f3:15:2a:86:92:ac:3e:6b:f8:ea:f0:39:
43:80:6e:cd:29:4f:54:07:83:15:f1:7e:ca:28:bb:
ad:26:1f:73:21:69:e7:f6:4f:7e:a6:39:cc:10:a9:
b7:c5:58:18:c7:7f:82:9f:bb:aa:10:76:e8:83:4d:
d2:6d:03:76:51:a5:b3:34:50:7b:5b:f8:e1:46:de:
d7:ff:40:d7:0b:05:dc:50:0b:c1:2c:16:47:f8:68:
cd:2f:b1:9b:f5:a7:0e:29:1f:bd:56:0b:f5:d8:36:
ac:f0:1b:2c:2d:49:22:42:39:87:5f:36:52:60:77:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:40:01:27:A0:45:95:73:2C:AC:49:C9:EC:04:E4:EA:73:32:42
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8d:dd:11:94:fa:d6:a7:93:fc:1b:ce:fc:e3:0a:13:6e:93:
4c:fa:be:6b:e9:c7:f2:71:92:ac:cf:70:76:0c:0f:33:ae:49:
84:11:52:30:a3:4f:88:0f:0b:84:d8:fe:c0:b1:44:7a:7d:0e:
0e:da:d1:29:f7:7a:37:ce:d2:44:f8:45:23:2a:6f:24:9b:14:
c4:b6:70:38:be:9d:7a:b5:95:2a:4b:f0:74:a9:f9:19:66:bf:
2e:6a:af:2f:78:77:f1:b7:66:72:93:8b:71:d3:0a:1c:89:90:
3a:df:11:9b:0e:2b:1d:c4:b5:02:39:9d:ae:80:b3:9a:5e:e6:
9f:d3:df:a8:b5:e0:47:4c:7e:ed:38:5a:aa:0b:ab:d1:33:8f:
43:70:84:46:ea:f1:18:4a:f9:e1:a5:26:08:55:1f:ca:fc:03:
84:ac:c8:a9:78:52:f1:8b:03:8e:f7:d1:a2:cc:95:e2:8e:3b:
2f:06:a0:bc:b5:55:81:fb:3c:54:62:f1:98:1e:70:2c:00:fd:
95:39:b9:fc:ed:4d:1a:41:dc:2d:57:f1:bf:b9:cb:eb:cc:0d:
b3:27:c7:15:7d:0e:7b:8f:cd:64:bf:22:3c:1d:7e:40:19:be:
97:52:72:71:d5:2b:2b:e5:53:1e:88:f3:fa:ea:fa:f2:b3:b9:
e1:a9:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:03 2025 by rpki-client