Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
File: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft (raw, json)
Hash identifier: hDxkDON0ZU5AvuvVuL6HqL+0Du4GrlLudG+U6V8xDjY=
Subject key identifier: AB:46:E7:87:8C:27:92:85:D7:56:39:15:7B:C8:33:14:F8:B9:97:5F
Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Certificate issuer: /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Certificate serial: 0194BCE06607D2B1565EA391351232E6F43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 8lcVMAvDHKFVWpkIvW003vZxmno.roa (hash: b9AoL9a4Iwp34m1O6gUmOqwjFvFHDHYDPCqNWBeuTCY=)
2: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl (hash: 4/fSt4whEByzhJ56yvaOXYJJh297G8yhrIK5WXrISZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:07:d2:b1:56:5e:a3:91:35:12:32:e6:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=ab46e7878c279285d75639157bc83314f8b9975f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:df:10:94:3f:7f:b1:13:bf:ed:76:3a:c3:
3a:8b:36:d6:7a:4d:d5:9e:cf:72:10:e8:b8:97:3e:
66:6a:bc:ed:0f:48:8d:64:77:37:af:7a:cd:2e:ac:
59:d5:51:b3:62:c1:9a:5f:5a:0a:8b:42:43:3a:67:
a0:2f:fc:17:3d:30:46:01:b5:2b:75:38:ba:a1:13:
8b:7b:66:c2:59:53:f3:7a:5f:38:ef:03:c1:ef:bc:
b2:0e:c0:0a:e8:63:17:6a:e0:f6:56:d9:7d:e6:dd:
c9:bf:91:7a:4a:d6:d1:48:88:b7:d3:c8:52:ff:6b:
69:14:ff:9d:b8:18:cd:7e:b8:f9:00:eb:6e:f2:01:
c3:7c:c2:0e:c8:73:86:0c:32:4c:89:7f:64:77:29:
42:d0:0b:ee:37:63:e3:84:23:4b:da:af:85:5d:69:
22:ef:a3:a6:42:a3:b5:62:37:d9:3e:d0:1a:ff:95:
aa:3d:6a:02:74:15:d4:dc:e6:f9:87:e2:0f:b6:9d:
de:5f:49:f7:c1:71:4b:6d:f8:3d:72:f6:34:7b:d3:
73:59:66:95:16:c8:ae:4f:f6:09:b7:26:27:6b:3a:
83:3d:67:aa:18:bd:c6:d4:02:7c:a6:59:2f:b5:a6:
ca:e8:00:57:40:f1:96:76:d2:9e:8f:39:2f:5b:09:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:E7:87:8C:27:92:85:D7:56:39:15:7B:C8:33:14:F8:B9:97:5F
X509v3 Authority Key Identifier:
keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:46:0b:dd:78:65:f2:cb:e2:12:e9:63:6a:a6:1e:f0:27:
77:1b:4f:43:ab:9b:31:c4:65:d6:43:f7:36:b0:f3:35:5a:ff:
74:90:c4:3f:5c:7d:8a:e7:f6:a5:93:57:9a:7f:4d:91:55:16:
c5:7a:76:31:37:00:f1:be:1c:7c:10:96:de:0a:8a:97:8d:e7:
d0:41:25:b4:7a:dc:f6:dd:37:6b:27:5b:3a:72:fb:a9:dc:e1:
48:6d:12:09:ae:64:18:e2:7a:5d:43:a0:e4:7b:f7:24:60:ef:
e6:6c:93:de:6d:14:0d:e0:ff:6b:e1:96:6c:55:dc:17:0e:c7:
a4:36:64:76:9f:e6:5f:8a:80:eb:f7:8d:9f:b9:00:e2:69:7c:
3d:64:95:e9:cb:92:c9:2e:52:a8:74:be:ec:19:0a:90:31:b5:
20:87:92:ed:a5:a3:ba:54:ea:39:29:48:7d:d8:43:ba:18:dc:
fd:58:c7:36:6d:ec:f1:6f:cc:2c:e6:6b:f1:4e:53:ee:33:59:
46:90:8b:0d:c1:87:3b:15:a4:29:ed:09:ca:00:95:39:ae:36:
72:91:62:b8:3d:25:20:d2:50:92:4c:bd:ff:94:2e:ed:71:be:
71:20:06:cf:e4:b9:76:27:fb:42:cf:db:3d:c8:06:49:57:67:
f4:3d:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:39 2025 by rpki-client