Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: jT2Jq/qXMlbBllkEenBlwXfwpNg1RByQCOamSZEryxc=
Subject key identifier: 9E:EA:1B:C8:A7:04:26:B5:49:16:0C:D5:1D:19:96:75:0D:B7:B7:B5
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 0194BD178B39185AE3C254597A8806FF5F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: NlBAIXAE+xN0zMbQBOW7mM+atLttrlQDfaFWGN46tcs=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:39:18:5a:e3:c2:54:59:7a:88:06:ff:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=9eea1bc8a70426b549160cd51d1996750db7b7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:79:ea:b9:89:01:39:b4:7a:ab:65:46:53:
04:f5:e0:37:5a:c8:93:7a:9f:8b:af:83:78:6f:79:
23:01:7d:b1:e3:87:f9:1a:b8:1c:29:ea:4e:cf:b9:
ab:5d:a5:43:c4:b7:23:2e:55:1b:d0:a4:b4:d0:3b:
72:e1:42:9d:ac:3a:33:5a:16:74:48:4b:3a:ca:51:
70:c9:5e:14:69:94:5b:e8:3b:13:89:d8:2e:ac:b0:
3f:37:4e:c4:be:90:80:9b:9d:b9:3d:14:7e:a2:86:
36:26:1b:9f:d5:37:0f:e0:8e:16:87:67:f5:7d:63:
86:7e:df:16:d9:f1:9e:dd:07:50:b4:f9:f0:a0:45:
0c:43:ec:20:ea:4b:21:85:a9:26:c6:29:b5:af:06:
96:f7:c4:a8:74:ec:05:79:56:f0:82:07:14:a6:5e:
27:90:35:c7:09:8f:9c:8d:0f:59:00:e1:d3:86:58:
3a:67:a6:2a:39:3b:00:db:0b:81:f8:db:1c:4e:e4:
73:32:b0:34:40:40:8e:50:27:0f:75:5a:c9:6f:61:
36:4b:45:d5:2a:ae:fe:52:cd:2c:b9:fd:32:c9:3e:
af:ef:a2:8d:ab:55:32:f0:63:30:e0:2b:f6:40:df:
fe:ac:40:49:97:b8:84:5c:94:e5:87:45:df:29:4d:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EA:1B:C8:A7:04:26:B5:49:16:0C:D5:1D:19:96:75:0D:B7:B7:B5
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2d:90:1a:e7:2d:4d:52:9e:df:f6:75:6c:ec:f2:df:1d:d4:
1c:b3:77:0c:86:76:09:e7:4d:8a:31:43:ce:43:d6:74:22:fb:
d0:e4:58:dc:23:23:ad:3e:5b:ec:31:65:ed:bb:96:00:b1:86:
fb:fb:28:5f:da:e6:28:6e:c9:90:25:78:02:64:14:d7:dc:70:
31:29:ab:99:e4:1c:69:d6:e7:4a:f6:83:35:58:00:fd:35:ba:
66:7a:d3:ec:bd:7f:2c:1c:aa:fc:d4:b8:32:3f:1f:3f:80:aa:
97:d0:45:c3:c9:6e:2f:18:a0:21:82:a8:92:cb:ca:32:bb:f5:
65:eb:9a:f0:30:1f:8d:18:b2:a8:d8:95:b1:14:31:23:c8:47:
94:75:5d:4a:6f:67:d9:ca:31:69:d0:48:e2:4a:22:64:ad:cd:
3a:4a:84:ee:bc:56:cc:04:38:49:60:ff:aa:17:ac:3e:a8:3b:
75:96:bf:93:a3:62:f9:a8:dd:f5:4e:82:f6:e6:36:f6:cf:43:
cd:5a:4e:10:32:de:83:6d:13:af:c4:d6:06:90:1f:3b:47:d8:
ee:4f:dd:ff:ed:a7:57:68:3a:4c:3a:3d:e3:39:28:8e:b7:a0:
00:be:22:84:76:71:3f:d4:58:4e:8a:5d:9e:a9:9d:2a:6e:f3:
f9:28:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:00 2025 by rpki-client