Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
File: L6aSUEx3C6T4QLir7sSFttEPpOo.mft (raw, json)
Hash identifier: cuDS0cDpHEMKLfu78Nisr3C340WfkqrIKisgCa+FKno=
Subject key identifier: 9E:07:48:67:33:48:22:FB:FB:6E:85:68:0E:C2:6F:14:37:FF:E5:55
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Certificate issuer: /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial: 0194BCE072FDAABE8D746BCA06DA828C45C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: Fezrzno06jPF9kifbXHX27nmWc8.roa (hash: dGafPOOH6YcUYjyk23t5nAFA7BiY0x8JbwBsczL6J28=)
2: L6aSUEx3C6T4QLir7sSFttEPpOo.crl (hash: IrKIELIo5DvwMM2xApD2ZEAiyTC2ZJIUFNMtnxWJ6sQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:72:fd:aa:be:8d:74:6b:ca:06:da:82:8c:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=9e074867334822fbfb6e85680ec26f1437ffe555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:ba:86:a9:77:80:77:57:cc:89:7f:f5:4e:
6a:b2:e8:5f:2e:ba:d5:f4:73:c0:09:00:be:e4:82:
b6:c6:12:f6:55:0b:db:ce:3d:6c:0d:e1:73:2b:ba:
43:71:d4:aa:fb:d9:0b:c3:b4:55:80:dc:83:25:69:
b4:8a:fb:c1:08:fa:5b:60:6d:0a:21:96:cf:78:5b:
90:07:4c:12:e8:fa:91:4f:81:3b:5e:9e:76:c8:87:
7a:e7:d4:66:2b:ba:f3:04:29:c7:84:dc:86:77:ee:
41:72:53:00:0b:d3:35:7a:37:20:2b:9f:55:2a:6d:
ce:43:c6:5c:83:e1:6c:0d:d7:ce:a0:23:fc:02:f5:
56:0a:bc:d6:4c:dc:b9:27:d5:46:a4:73:ba:2e:70:
5c:8f:9c:03:0f:68:41:eb:25:16:46:99:98:2b:70:
96:8c:6d:73:46:19:34:8d:c9:97:30:80:ae:64:44:
63:0b:f2:33:4a:cc:0f:00:13:a2:93:ee:55:78:f3:
e7:b7:30:b9:c4:f7:5f:b9:f4:2a:6f:5e:c9:fd:29:
a9:66:cd:f0:17:21:c4:02:4c:f8:e8:45:7f:1c:56:
df:a0:56:05:a7:5b:a1:2c:e0:28:87:ad:8a:1f:9b:
5c:c3:98:25:d7:14:6d:b3:01:6c:90:00:95:cf:dd:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:48:67:33:48:22:FB:FB:6E:85:68:0E:C2:6F:14:37:FF:E5:55
X509v3 Authority Key Identifier:
keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d5:86:10:40:6e:93:62:d5:cc:22:d7:e7:f4:b2:34:80:d8:
d6:4c:5c:af:2a:92:28:9e:cd:53:22:92:da:0a:5f:53:48:1c:
82:91:e8:e1:f4:0e:8e:b7:98:34:af:8e:06:ef:55:9f:f0:8c:
bc:0f:05:76:d5:bc:df:64:71:5a:76:d4:8d:d5:01:12:98:45:
47:dd:53:f6:6f:25:f0:0a:7d:ee:c9:c5:8e:97:79:a2:4e:42:
f3:c7:37:e0:c4:d2:47:ad:f0:be:2c:d0:69:3d:40:6d:f2:bb:
1a:b1:21:30:20:c4:23:94:c4:a9:6b:50:d8:65:1e:54:89:cb:
ed:d5:6e:19:1e:d3:ac:f9:51:5f:30:0a:e3:14:11:ec:89:ec:
7a:70:e0:ca:09:ea:a2:ae:c6:6f:e0:b3:44:43:94:5c:41:42:
1c:53:4c:02:c1:a6:25:c7:ec:5b:c3:84:1c:9d:9d:a3:28:26:
c3:9c:67:88:5f:f5:54:55:c4:1a:18:6e:42:e7:53:81:a5:67:
e7:a9:87:c6:e5:db:72:c4:ab:e2:04:01:16:eb:d6:8c:3e:7b:
e0:64:3f:58:9a:b5:0e:58:d6:0c:1b:43:a2:a1:72:28:31:e1:
01:0b:ad:79:24:ae:27:9b:27:8b:c9:eb:06:7f:55:25:69:e5:
13:94:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:56 2025 by rpki-client