Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: Gaovl6TFay9lAUEXIyvUBgL6IKHgT1cxIl/l1WOu464=
Subject key identifier: EF:94:ED:11:60:09:54:4E:D9:29:1E:95:94:39:4C:D6:28:2F:04:86
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 0194BD4E4BD6F9D4E4507873A2B50A7BEF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0CF2
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: MMBYsQ7gfPUtQvEgfHlTP7A6fcI9aImGOi4eXGh0bAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:d6:f9:d4:e4:50:78:73:a2:b5:0a:7b:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=ef94ed116009544ed9291e9594394cd6282f0486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:3f:96:5f:e1:f1:df:34:06:96:d4:cc:15:
8e:1d:a9:ae:10:16:33:2a:a8:29:39:c0:92:47:6f:
72:ca:da:7e:cf:60:18:1c:c7:97:c8:a3:26:f5:2f:
5e:ad:43:b0:d7:ff:ec:51:d3:33:ed:42:5a:3b:5d:
58:97:dc:3b:01:ff:25:22:be:b7:7a:ef:79:5f:0c:
35:7a:61:33:ea:f6:33:21:47:e4:6a:46:dc:82:e8:
52:65:08:f2:bc:72:46:d2:bb:fb:18:55:5f:9b:22:
cf:38:36:b0:dd:0f:e2:b9:b0:da:29:e2:04:18:ba:
4d:05:b6:1a:b0:8a:54:bb:36:ef:38:fe:a3:59:98:
92:c1:fe:20:f8:4d:0a:86:12:8e:dc:17:46:bb:b5:
ac:4c:5d:9b:2e:03:c6:eb:e4:c0:b6:1c:cd:15:46:
e4:6a:92:7f:f1:57:3a:10:d0:37:a9:68:57:9d:0e:
52:9d:0c:2d:c0:54:32:ec:db:f7:5e:b3:9c:40:08:
41:0a:e4:a3:d0:34:4b:18:a5:da:47:44:ca:dd:66:
3a:9b:c0:dd:cc:43:d7:5b:b4:f7:f6:82:b7:85:27:
f0:ad:48:81:3f:8c:ae:07:1d:f5:0d:c5:9d:81:b5:
76:54:d5:d3:c4:e3:32:cd:bb:ed:18:be:87:5a:7b:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:94:ED:11:60:09:54:4E:D9:29:1E:95:94:39:4C:D6:28:2F:04:86
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:83:1d:d2:16:c6:22:4e:f6:74:0f:f5:c3:8d:36:a4:b5:53:
80:a3:2d:52:68:23:2b:bf:2c:e0:e7:0e:b5:95:03:2f:e0:5d:
e8:2a:62:83:cb:bf:93:d0:fb:21:4e:74:1f:5b:5e:e6:03:ac:
ae:65:24:48:3f:54:01:79:7d:77:e8:7a:86:11:2f:ea:1d:25:
ba:25:a8:ef:21:bb:d6:8a:0b:02:7e:4b:51:0d:a2:dd:01:2c:
b3:6c:45:5d:ad:f1:73:e7:29:d9:46:5d:2f:99:13:41:7c:2f:
af:1f:5a:84:da:b1:02:76:00:1d:05:16:54:df:e6:4c:7b:44:
51:d5:8a:41:b6:3b:4b:9e:51:1d:b2:95:8b:50:90:79:39:d1:
33:96:a8:e5:20:bb:0e:f0:7a:14:25:be:7f:24:5a:e2:c5:ad:
a9:90:27:5d:0e:b5:76:75:e9:4b:40:c7:db:66:68:d7:d4:8c:
de:69:34:20:81:6d:3f:12:77:91:ef:f9:b1:74:07:e2:a9:88:
56:ef:e7:1d:4a:db:58:89:0e:67:8c:4f:be:6c:fb:7a:ab:28:
49:22:f8:16:a2:63:cd:2e:2a:09:4f:03:60:38:4f:cb:67:12:
8c:58:1d:ac:d5:74:06:fe:71:59:e1:de:41:50:0d:b0:6c:71:
0f:70:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:43 2025 by rpki-client