Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
File: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft (raw, json)
Hash identifier: rog4L/WbZj4s6R10K9erz+5fNyp3VGdYxLo1TA6fX7Q=
Subject key identifier: 9D:5D:8C:6E:94:37:ED:1B:11:0A:87:69:15:F1:D5:4B:4B:AE:BF:71
Authority key identifier: 94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
Certificate issuer: /CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Certificate serial: 0194BD85247E10963A326699256CD0FD30E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: BsjKxlyhr1xJt-_B7RFdha2dw34.roa (hash: DZrrLtviTY8IeT2xTa11fcFFAO4I1PCCgwnVwmVsFaU=)
2: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl (hash: Lwag4yYRuj+jLZgIs9iuYAoz6qfdAQzjW3TQxXR3dN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:7e:10:96:3a:32:66:99:25:6c:d0:fd:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=9d5d8c6e9437ed1b110a876915f1d54b4baebf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:ac:59:e8:8b:2f:39:d1:40:4d:28:2a:8c:
19:f6:02:15:83:0f:12:31:ce:a2:b2:81:cb:69:88:
d6:01:65:40:3b:e8:e3:a2:c1:cb:eb:fa:19:3e:8c:
48:f3:c7:5f:ff:54:6c:7b:65:74:8b:3c:d5:9d:dc:
bb:73:3e:31:47:04:b3:f4:61:65:47:6b:e0:bb:db:
bd:07:5f:47:05:7f:9c:98:fa:d0:d7:5d:29:77:e6:
4d:63:af:cc:a4:40:c9:2d:f6:d3:72:42:e3:c7:07:
9f:f4:e8:2f:37:0c:49:22:52:31:2e:62:36:6c:f3:
ad:a7:21:fd:90:be:da:00:a4:ea:f5:c5:99:45:d6:
d1:e4:11:f4:4a:a4:96:51:0e:a2:4a:48:d8:1f:0a:
09:a9:21:56:78:3a:b0:4d:eb:7e:9a:86:6e:9f:2f:
29:8f:23:fc:6d:f8:99:24:63:0a:01:e8:49:58:ce:
ec:b0:5a:9f:05:51:f5:a6:04:71:f5:d0:2a:c5:f5:
7a:e6:14:c1:49:84:1c:41:24:5c:26:c9:6a:b0:95:
e0:6a:7b:0f:e0:85:f4:4e:d9:ac:44:f2:90:b2:ad:
90:52:69:e7:fe:b3:fa:2d:aa:79:16:6a:58:52:cd:
e0:69:95:ae:21:f2:5b:27:a2:02:40:16:67:7a:31:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:8C:6E:94:37:ED:1B:11:0A:87:69:15:F1:D5:4B:4B:AE:BF:71
X509v3 Authority Key Identifier:
keyid:94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4d:a7:6b:77:f3:e5:4b:9c:12:00:fa:f3:0c:e1:c5:99:7d:
49:fd:f7:81:92:71:31:9c:e9:a1:4f:80:b1:30:de:10:01:ec:
e3:2a:22:85:3f:bf:da:28:03:6f:5f:09:31:40:61:ae:de:a4:
3a:82:65:f0:0b:7e:f4:e6:41:8a:b8:43:e1:19:84:ce:d3:a7:
91:ef:ac:e3:b8:c2:0b:92:3f:a1:e7:da:d1:2a:a2:48:ac:c5:
92:03:8b:22:42:9d:96:a1:bd:6f:77:14:16:39:39:6c:a9:4d:
fd:19:24:cd:ef:67:52:c6:fd:6b:59:47:f4:1f:73:7b:72:6e:
34:89:fc:03:78:eb:2d:e7:6e:bd:1a:3f:7c:7b:2a:fa:71:23:
27:74:94:19:5e:1e:2e:67:d2:e9:db:05:73:cc:91:5d:c6:42:
e6:87:42:f7:ae:b1:70:e5:85:de:0b:2d:c6:10:50:3e:a0:74:
39:cb:7c:51:12:7b:d6:c3:be:d8:74:2a:97:6e:d4:2a:7a:d4:
d6:a0:36:b7:cd:5f:db:5e:57:ab:c8:dd:87:69:5f:db:b2:fb:
8e:91:9b:4f:9c:2c:9a:c2:2e:46:e4:e4:42:7f:87:dc:67:c5:
df:9c:44:c2:b0:0e:6a:ae:76:ee:f1:05:d8:c8:ed:d1:35:8a:
74:74:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:28 2025 by rpki-client