Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: An04/+kzYCd6otGZSUdhRWn8fFqlmpq4erzqksUBO6k=
Subject key identifier: 5F:E5:70:3A:1A:3B:33:F1:5F:44:36:98:FE:7D:85:5E:97:EA:6D:F6
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 0194BD175413048AA967C8B33964CC7FDCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 1221
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: WZAJrxJeeqbPVt6ewHTbWbIG1G2kxgF21vXcsy7bzbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:54:13:04:8a:a9:67:c8:b3:39:64:cc:7f:dc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=5fe5703a1a3b33f15f443698fe7d855e97ea6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:5e:c3:dc:e8:5d:f8:e2:5d:68:f9:89:5f:
0f:3a:ef:de:e1:64:84:3e:30:c9:7d:95:cb:9d:8b:
07:b3:c7:97:04:b2:6a:03:23:e7:23:ce:6c:b0:e3:
dd:8a:29:78:e7:34:9a:09:9d:44:18:cb:20:c6:99:
64:6d:4b:d7:10:55:12:f2:c4:cf:6e:92:2d:44:69:
55:6a:a6:6b:04:32:72:fb:92:1b:94:71:81:ed:5a:
0a:08:b0:ed:f0:25:70:b7:91:f9:1a:a8:00:6a:34:
9d:11:b0:57:28:f9:ba:8e:8f:94:6b:e1:31:37:a2:
33:24:1c:63:c7:ed:6e:08:21:ad:79:de:6e:2b:35:
70:83:90:71:fc:1f:47:3c:1c:47:f6:89:c8:42:d9:
95:c8:a0:c6:69:83:d7:c8:c9:36:e8:f6:d9:d8:0f:
d6:de:09:42:09:49:04:36:18:b6:39:f0:7f:cc:cd:
29:c6:a0:8f:8d:07:da:1d:4d:00:88:4e:4c:e8:ae:
38:24:93:74:d2:a9:ad:a4:03:06:a7:3a:21:b2:f3:
db:0e:98:2b:fa:60:29:1d:7c:30:b2:35:0c:fa:fc:
75:c6:ee:cb:ac:ba:f2:9f:a4:55:b9:12:49:6a:c5:
6e:3a:7a:20:1e:f3:4e:5c:7a:70:11:d9:92:ea:78:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:70:3A:1A:3B:33:F1:5F:44:36:98:FE:7D:85:5E:97:EA:6D:F6
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:c0:1b:00:f0:fa:30:0d:b9:2b:b8:22:a6:15:e4:53:66:
f8:ca:fa:28:27:0c:af:27:ee:0d:c2:93:04:0a:2c:bd:e5:1d:
6f:76:d7:1d:81:81:ee:67:8d:47:e6:1b:f7:4f:1a:d4:a2:d0:
cd:4e:f4:e4:42:20:c7:e9:31:4c:65:4b:db:61:c8:c9:76:fa:
6a:84:5f:60:ec:88:80:2b:b7:e4:8b:e0:d6:eb:90:b9:fe:87:
28:88:6f:17:8e:bc:a8:44:c5:58:f1:e5:ec:87:5a:30:67:04:
5f:83:07:e1:31:a2:b7:17:9a:9f:e8:3b:f7:c6:61:36:8e:82:
1a:6b:5c:c8:ef:57:bd:b2:cd:bd:83:25:74:72:65:f7:e4:83:
14:04:78:2b:e2:a2:8c:b4:e5:65:fc:c1:76:3b:73:75:7c:3b:
0c:44:30:3f:ce:7c:24:e5:43:5b:3b:fc:b9:75:93:8c:a7:e6:
30:18:00:ba:c5:36:40:a0:86:24:1f:f3:08:08:eb:d2:f3:36:
4c:b7:51:e7:83:d2:a6:b8:af:4f:87:10:40:59:56:82:17:d7:
1a:5d:8a:09:47:53:c2:37:70:55:88:a7:ad:1f:9b:a0:2b:f0:
21:ff:4d:7d:bd:bc:72:ef:27:5c:92:9f:a9:a8:91:fd:07:42:
bc:33:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:23 2025 by rpki-client