Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: o7/qtge1k5hb501AnNE4q2g2+OKMGWmZfGoO81v1C+g=
Subject key identifier: 5F:9F:A4:E2:C4:39:BF:4C:7C:D9:47:8A:C2:A2:FB:6D:BC:01:AF:57
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 0194BCA9E94E41E5A131557A51AEB2B90F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 0677
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: W6lamAcqEGFpfl4M0IbERayXjOwF9R7hOQ+uTHSrP5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e9:4e:41:e5:a1:31:55:7a:51:ae:b2:b9:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=5f9fa4e2c439bf4c7cd9478ac2a2fb6dbc01af57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:3f:1e:1b:6d:66:05:a0:8e:4a:37:2c:7a:
2b:e7:ca:3f:ba:72:12:89:8e:ff:17:5c:ff:40:8f:
4c:1b:2c:bb:fa:ab:d2:45:5a:7c:6d:63:aa:d6:ad:
56:a0:f6:7a:31:ed:83:b4:ce:77:01:5e:c0:49:32:
08:c5:93:57:e8:7a:62:31:cd:bc:bd:6e:97:af:84:
3e:44:d1:a4:09:85:ef:e1:4b:41:d7:4d:2d:db:b4:
c9:87:d0:88:0a:97:46:aa:cc:ee:b3:d9:d6:e4:3b:
be:91:42:e5:4d:74:f4:1d:e0:53:8d:69:3e:d5:d4:
5f:e7:c4:8b:83:d7:9c:b8:d6:3d:99:fd:c0:b2:75:
c3:33:e5:d6:00:e4:72:24:9d:c1:19:a2:e9:0a:9b:
b0:35:73:fb:e4:03:dd:b5:8f:f3:14:33:e1:0c:ab:
60:e5:4d:92:82:1d:72:d2:28:f4:a4:e1:5a:c1:fd:
dc:0c:a8:2d:71:f2:cb:b3:a0:ca:96:d3:2e:fc:70:
2d:81:15:84:a7:00:38:95:eb:b1:a4:d8:5e:0b:37:
7b:95:18:5c:d1:42:5c:8d:3d:18:b2:3d:33:02:3f:
30:92:27:be:7b:f8:c4:74:18:be:8d:26:fd:c8:42:
d9:fb:f3:ce:c1:c4:6c:77:a4:ed:05:fc:91:73:a9:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9F:A4:E2:C4:39:BF:4C:7C:D9:47:8A:C2:A2:FB:6D:BC:01:AF:57
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:29:61:ca:d6:83:74:fa:e8:79:b4:4e:13:ef:62:9e:64:5d:
95:c3:59:5c:54:32:5c:02:5f:4a:d4:d3:c0:cc:94:78:82:db:
11:c9:e6:4e:20:cf:aa:9e:c3:d8:2f:ab:2a:4f:11:c9:da:bc:
79:59:a4:ca:d5:06:9b:73:1b:ee:be:71:7b:8c:27:ea:42:e3:
d1:e4:09:22:b2:d9:03:ab:ec:4e:50:7b:0d:cd:21:35:be:94:
4e:b9:3d:94:a9:92:b7:60:eb:e8:05:90:a2:d0:81:ff:a1:30:
8a:99:b0:fc:66:a0:b0:7f:b3:ba:75:0d:c2:9a:0b:cd:8c:5d:
6f:64:31:f8:fb:d0:91:2d:c1:97:60:97:97:4c:23:b4:da:b9:
0e:a6:fe:39:a6:d6:c8:83:f6:72:cb:dc:5c:cc:d3:2a:2a:01:
cb:e2:12:1b:6a:9b:be:ed:01:c7:7e:1c:f6:3a:8b:11:ff:46:
24:f3:70:7d:31:d4:2b:be:6d:b5:25:65:82:a1:12:5e:b4:64:
e7:04:ac:69:a3:c1:44:d5:e5:46:e8:05:5d:0c:ed:8a:f1:b6:
69:bf:e2:09:89:9f:a9:25:2a:80:f7:81:f2:42:8b:9b:ff:0f:
e5:12:7e:a5:5a:cc:27:e0:be:35:cd:b3:8d:f3:0b:63:d1:69:
3a:e1:ce:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:43 2025 by rpki-client