Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: dVdE5hpOeeiCMau1IanUwS2FtmQh40qPS1numgrPyiU=
Subject key identifier: ED:6C:D8:FB:DE:FD:FE:B4:FF:80:E4:AA:20:38:2C:43:B8:E4:55:D0
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 0194BC3C6CA89D7AA87A3A261A10F802BDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 0F6E
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: Vd6WYGPhcpwNYCdHrVkT7ydDzHd89OXMOMKG/2R86SA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6c:a8:9d:7a:a8:7a:3a:26:1a:10:f8:02:bd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=ed6cd8fbdefdfeb4ff80e4aa20382c43b8e455d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:fc:47:71:0a:22:5b:93:88:7c:ba:dc:35:
7a:6d:03:f0:e4:8d:a2:9a:4c:00:2e:89:e8:fa:80:
39:dd:a7:75:b2:63:62:dc:14:76:8f:00:f4:cb:0e:
79:59:19:4d:a4:77:bc:8c:cf:6e:15:ac:f3:ff:3e:
ed:aa:8c:8b:68:58:d5:ce:0a:1f:f0:0b:38:d8:51:
14:6d:c1:ff:8b:8e:ec:36:e1:3d:53:fb:cc:b2:56:
ff:d6:b1:14:96:b3:16:19:98:00:12:18:e6:2f:3e:
d0:7d:fe:e7:3b:d4:ee:ae:ab:19:a3:52:84:65:23:
d4:49:da:8f:c0:37:a2:54:be:53:07:36:92:72:42:
1c:28:84:55:7f:3b:07:d9:6f:2c:aa:87:7f:5a:6f:
51:7c:4c:e8:05:79:e0:ad:38:69:b2:ec:16:af:b2:
b7:1b:54:c6:da:c0:e5:c8:0c:1e:37:db:54:56:05:
3e:c6:e4:0a:ff:ef:7e:39:57:65:7c:0c:52:52:6b:
e1:32:9a:0f:60:40:59:fc:6b:cd:50:50:26:e9:0e:
9f:20:3f:c1:e7:b2:e8:f0:c5:da:bb:4e:f1:4c:1b:
6c:22:a9:64:b5:32:d2:9a:f4:36:82:74:17:69:0c:
45:1a:38:e6:d8:c2:3d:22:74:32:fe:4b:20:7c:5a:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6C:D8:FB:DE:FD:FE:B4:FF:80:E4:AA:20:38:2C:43:B8:E4:55:D0
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:6a:d2:07:92:07:1b:ed:e4:55:1b:90:1a:46:b8:5e:cf:
1e:07:03:1c:69:ee:d8:35:59:70:20:cc:c4:f5:d0:f8:cf:3f:
be:3a:a7:46:fa:04:00:17:40:0e:e6:ff:54:e9:0e:03:dc:c3:
5c:6a:d2:e0:41:df:08:eb:00:72:ee:4e:70:53:c9:da:d4:c6:
7b:80:56:b7:73:31:9b:20:c3:ff:76:a8:a4:40:a3:eb:c3:9b:
90:62:b1:0c:7c:eb:8e:67:3b:b3:aa:8d:97:5b:7e:a5:45:4f:
5b:6e:9f:53:1d:46:85:03:60:69:0a:23:0a:56:f5:b7:29:f4:
35:ea:79:cd:3a:83:ef:8b:9c:16:de:46:25:86:70:cb:6b:b3:
dc:5a:77:3a:d7:25:01:12:f1:1d:63:d1:1c:1d:12:67:bc:df:
b3:b3:e9:d5:55:8b:18:3d:b0:58:c9:4f:65:5d:5e:72:9f:6f:
23:dd:ba:3f:a8:84:60:71:17:44:da:d8:54:60:f3:14:3a:c9:
31:b0:df:e3:10:8c:5b:a7:fb:e6:51:73:85:92:a7:5e:6f:37:
ba:c1:76:54:c6:53:02:99:6f:c6:60:5b:79:5c:61:e2:51:67:
ae:e9:61:89:86:fb:c3:ec:aa:0d:b6:16:7c:0d:83:f3:52:59:
95:8b:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:18 2025 by rpki-client