Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: 73O2HSiPFgYf1am90jNK7R0mdKwP60P0XZ94HZ9dvSk=
Subject key identifier: 62:ED:7E:29:8A:90:C4:F3:00:F5:B5:6B:77:BB:88:7D:43:CA:CF:AF
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 0194BC72B34E128354B0661F30AA4C9D6E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: jZiWffjFVhqTBHTxO+3v0glDf7ehhhdzB8+ySIr2gQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:4e:12:83:54:b0:66:1f:30:aa:4c:9d:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=62ed7e298a90c4f300f5b56b77bb887d43cacfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:d2:a4:c3:05:07:cb:89:f0:94:2e:53:65:
31:bd:d9:1a:82:9b:59:f6:e4:46:97:ba:96:3a:ed:
6a:90:8f:ed:aa:64:7d:29:1b:ad:89:c1:4e:0c:10:
30:43:8f:ac:fd:77:46:42:98:8b:e6:6c:52:14:26:
84:e6:e6:bd:7c:5e:f7:d8:14:30:8d:37:09:f0:7e:
4c:49:3f:70:b9:ae:98:37:8c:2c:93:9d:b0:e9:ca:
02:8b:6e:c1:32:01:b3:ba:df:13:0c:f2:65:ae:4d:
2b:fd:bd:d7:5b:57:16:37:26:90:ea:50:e4:c1:e8:
40:b2:5b:e2:b5:93:7b:76:07:86:a2:19:de:ca:77:
25:f2:31:66:76:04:f4:c1:54:dc:aa:75:42:cf:b1:
11:23:65:27:f2:b3:5e:fa:8c:fd:dd:08:01:ca:ee:
74:01:e7:45:c6:0a:d0:e6:db:73:a5:bc:8b:a5:af:
a2:19:1f:ef:2a:0b:05:08:5e:75:d6:b7:77:c1:ec:
1a:4b:a3:54:1c:b2:d5:f9:b9:87:ba:5c:ea:1f:9d:
64:39:0e:01:db:91:6a:92:4d:a8:70:ef:16:39:75:
2c:33:1f:a9:ae:50:de:46:24:0d:49:2f:8e:93:2b:
e0:7d:1c:5f:db:e5:60:49:35:df:fc:c7:95:73:9f:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:7E:29:8A:90:C4:F3:00:F5:B5:6B:77:BB:88:7D:43:CA:CF:AF
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:47:3d:49:b8:c7:89:57:ce:6b:bc:c2:d1:c1:ea:c8:6a:
90:f3:4d:ff:89:50:1b:55:db:0d:37:25:c0:d3:cf:96:8e:10:
30:bd:62:ee:60:0f:43:de:4f:5b:00:77:1d:42:2b:19:a3:06:
ea:30:40:c0:bb:02:eb:05:07:d3:b4:df:73:3c:cf:23:22:3a:
de:2f:f1:c5:33:cd:f8:aa:02:e0:0b:3c:10:93:ad:36:2c:a4:
90:36:49:97:34:2d:44:ef:17:49:3b:53:52:a7:26:28:4e:93:
e6:52:d9:8a:49:ac:2d:e9:0a:eb:c2:b9:e7:80:ab:f3:57:4d:
f6:9c:ff:27:88:4e:20:a5:94:cd:27:49:3d:c2:e1:27:35:9a:
c1:07:48:cf:92:c2:9a:78:1e:4e:ec:0b:da:44:28:a6:59:b5:
26:88:c2:dd:0e:04:fc:63:b7:f0:11:27:13:2f:2f:d0:56:9a:
28:2f:6f:bc:21:ef:06:42:95:cc:d2:9e:5b:33:e1:80:58:4e:
40:f1:50:bf:df:d2:c0:5f:90:d9:eb:f0:f4:db:51:1b:34:a2:
8c:e8:ff:8d:c5:2a:30:f5:6d:ea:f0:bb:ff:57:e3:a5:40:fe:
8e:15:b5:56:54:56:e4:ef:d9:56:b9:9f:ec:2d:2a:55:b2:47:
72:11:ba:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:36 2025 by rpki-client