Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: gbYROmlJD4nHzFF0HodOmJ7qioUGGkqB/zJbh5QIh48=
Subject key identifier: 31:8C:B1:4E:05:61:DF:D5:45:0F:BD:A9:7F:93:0B:6B:69:C6:1C:B9
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 0194BD4E6CB67F4F05D5EDB5850813FCB8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: KvErQkIa-7bptS15YPSXyRA9CSc.roa (hash: oCFio8e2SnoXuYWAJDUSo/+OUQCG41H/KpmIERPwk3M=)
2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: 89zYB2SQzh9ThC1M8+SwOGPku9jmjGio1YjhiUjZE9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:b6:7f:4f:05:d5:ed:b5:85:08:13:fc:b8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=318cb14e0561dfd5450fbda97f930b6b69c61cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:59:d7:67:e3:e9:43:38:c6:ee:90:37:27:
85:0c:a8:77:be:8d:ee:60:6d:b4:ac:25:99:50:f3:
8c:75:80:40:82:37:2f:62:7f:88:92:3d:85:75:6d:
00:1f:b4:77:6c:4a:2f:7c:18:1c:ec:9b:d9:1c:ee:
23:6e:8b:31:46:90:85:ef:a0:b6:24:38:ee:6b:21:
31:68:15:54:30:58:26:93:64:4e:96:94:33:81:28:
2e:08:e2:68:2e:f3:71:98:07:d7:81:11:89:5d:b2:
9b:cc:50:21:c4:43:c4:bd:1e:22:ae:7b:7d:ec:f1:
cb:6d:d9:9d:c0:28:5b:c8:4f:43:b5:f4:24:93:64:
2c:3d:3c:15:b9:f2:47:53:ff:e0:7b:aa:80:a9:a1:
08:ee:f5:9e:7f:56:fa:35:6d:b5:f9:dd:4a:e5:f4:
8f:dd:24:26:81:1e:20:5c:c8:29:b8:a3:a0:04:88:
23:13:1d:56:6d:be:e2:f1:a7:16:47:72:55:4d:4c:
c3:46:2b:2a:97:b1:16:e9:54:96:88:fc:9c:12:22:
69:cd:7d:92:09:43:1c:ca:ae:84:2e:8e:04:84:a3:
ce:1a:65:28:0d:e7:ff:bc:b7:f4:58:fe:df:fb:88:
22:b7:c2:78:d2:f2:70:36:5e:b2:54:71:d7:cc:f5:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:B1:4E:05:61:DF:D5:45:0F:BD:A9:7F:93:0B:6B:69:C6:1C:B9
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a2:9f:c5:a7:86:4e:07:f8:2e:48:88:91:31:7b:1b:86:de:
9a:fe:6f:cc:d9:da:ce:c8:b3:36:33:32:e8:7a:5a:da:a6:0f:
ab:75:c9:9d:74:02:40:e9:48:d9:04:9b:65:25:65:65:cb:99:
b7:17:ec:1c:a1:d0:12:19:74:f2:74:45:5e:93:49:ff:7d:fd:
55:55:8c:1b:22:2a:3b:8f:06:8e:99:19:f8:9c:97:f7:e1:33:
81:b4:98:61:ac:81:03:e6:11:4b:92:52:2d:0f:e2:91:91:c2:
d7:ff:c9:38:1f:c0:39:eb:ff:c6:73:a3:21:ad:07:f4:6c:00:
e0:b0:65:e4:b1:cf:dc:dd:17:b6:14:eb:89:f9:cc:a6:d2:84:
d3:58:b8:5d:5f:77:63:20:2c:00:6f:a5:94:6f:5f:b4:f1:b1:
6a:d2:c0:a7:25:3f:2e:a3:f6:35:8e:b3:e9:35:a3:19:23:91:
2b:85:3a:11:f3:f7:6a:6d:ef:33:3d:b1:88:47:db:a7:cb:1f:
80:45:ca:cb:af:f8:2f:71:ac:44:65:60:16:31:6a:5c:3b:5c:
6b:20:27:a8:25:9e:e1:61:03:62:41:19:a9:8e:14:2f:1b:eb:
ba:85:b9:69:92:64:85:a2:9f:b2:9d:9a:dd:ee:02:3d:de:3b:
59:fc:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client