
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: FFXE1YZ3haQPIBDc7vMyKtvEigNt0asS2buhfvUJ+Ls=
Subject key identifier: 6A:FA:54:16:A2:D4:D4:B7:79:52:1D:B8:0C:17:4A:C5:D6:21:84:8F
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 0194BBCE7F5D6707001498A5B7F10B0F38D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0984
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=)
2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=)
3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: xRa9pRpS/W+gqsZgtKJj6wdqWLfjzHzwaRXIJzkq6Nw=)
4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7f:5d:67:07:00:14:98:a5:b7:f1:0b:0f:38:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=6afa5416a2d4d4b779521db80c174ac5d621848f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:0b:19:6c:0d:c2:3f:05:ab:56:78:38:2c:
93:1e:da:6b:b5:ed:d3:b7:b8:2b:7e:11:b7:50:68:
46:4e:c1:fa:36:65:66:0e:55:d6:07:ec:a9:f8:84:
d0:c7:a0:ff:6c:c7:52:97:6e:5b:f7:82:39:12:0f:
aa:f7:8f:9a:55:76:d4:86:fa:7d:e9:61:a5:c8:85:
e8:b1:88:1a:f0:71:e4:67:52:6f:93:0d:5a:4d:7c:
46:ae:23:8c:7e:be:91:c9:b5:48:a1:27:23:1f:14:
37:e5:c4:a0:37:24:27:a5:23:a4:9e:be:8e:79:22:
20:91:3b:c7:ac:08:a8:d3:20:22:2d:cc:5e:fc:20:
ed:6e:41:44:af:e3:2e:b5:b8:0d:da:10:d3:c1:84:
a3:fa:34:85:48:5b:3a:6f:ae:4c:91:65:7a:91:7d:
36:67:8c:cc:2e:00:30:64:11:14:32:75:f3:11:ec:
8e:bd:81:dd:d2:47:c0:ca:a3:f4:2e:1a:8d:ee:af:
bd:6c:a5:a5:9d:12:51:15:a0:d8:c7:43:83:96:d6:
62:33:c7:d8:7a:71:63:f9:d8:10:d1:50:44:94:4a:
c7:7a:e4:c2:f4:31:4e:44:ec:53:49:67:d6:ed:1d:
cf:14:2a:c1:77:15:07:0a:be:af:a3:d6:20:d4:b0:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:54:16:A2:D4:D4:B7:79:52:1D:B8:0C:17:4A:C5:D6:21:84:8F
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b1:01:31:b3:fa:15:37:e3:36:4c:a8:7b:3a:1d:89:e9:df:
e2:c8:41:a4:fd:a0:d2:ef:d1:fc:59:a0:1b:63:48:fe:e5:b0:
cb:07:2e:fa:34:4d:d3:71:f1:0b:25:90:24:89:f5:c3:57:2a:
f8:c5:a2:d8:2b:e9:1b:ff:8c:c0:1f:3a:ee:8a:37:0a:c2:fa:
94:96:7f:b4:1e:30:3d:5f:88:23:d0:41:ae:a0:f2:b7:c1:4d:
83:2e:54:59:17:f6:c3:97:3d:ce:3d:45:63:ae:92:d4:36:63:
37:3c:0b:05:ba:fa:65:57:97:a0:4c:d6:79:70:b7:7c:bd:5f:
ca:53:7f:e1:b2:e9:b1:88:8e:d8:b3:2a:7a:bc:8a:58:6c:81:
88:bd:0d:84:1e:40:d2:26:c1:44:e7:dc:ec:c1:6d:33:25:c6:
58:ff:20:b8:0d:36:c3:d9:41:3a:0a:55:41:fe:00:13:e6:a3:
8c:cd:76:14:e5:00:b2:5f:42:b1:27:bd:3b:10:68:f5:3e:5a:
86:71:33:4f:97:61:5f:5c:5c:c2:6f:2e:ff:30:d8:55:81:dc:
5e:76:9c:d5:26:32:f6:a0:23:17:14:bb:40:e0:24:5a:20:65:
10:5c:4e:a1:a9:05:09:b2:7b:4a:a1:4a:1f:a8:9f:f0:60:f0:
23:31:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:58 2025 by rpki-client