Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: OY3lXO4PXGl5tZ/gJcDcG4ij8Twr6afza6efNfycDjQ=
Subject key identifier: D2:33:3D:80:B1:C1:C4:AC:BA:FA:A1:E5:9E:36:3C:30:CA:92:22:CB
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 0194BC3C587B1F7CF4145DF45724A04E12F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 0D91
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: tzAdhKD7oGkIDphpElZhGX5zjJ5U3yJ0gN+dUwl5VFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:58:7b:1f:7c:f4:14:5d:f4:57:24:a0:4e:12:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=d2333d80b1c1c4acbafaa1e59e363c30ca9222cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:e0:63:81:5f:4a:0e:ce:ad:63:27:ce:e7:
5d:75:a0:90:05:30:2e:f5:52:f4:64:aa:a3:a5:99:
5a:48:c1:39:19:e2:91:06:dd:c1:71:86:bb:37:3f:
58:d0:fa:09:f7:bd:ee:d8:43:bb:7f:4a:db:16:5e:
cd:cf:01:7e:29:8c:aa:36:81:e6:46:6b:54:02:08:
b4:19:e2:3e:2e:27:62:ac:6e:06:37:dc:aa:01:f3:
e0:ee:85:3b:5d:ce:9c:73:c5:5c:c6:df:ac:6e:82:
0c:62:a2:94:66:a5:d3:fb:39:76:67:f8:d9:fa:c7:
6d:33:b6:33:38:63:71:58:e8:f9:26:3a:15:64:20:
73:33:a4:06:f7:d2:d1:54:97:05:13:b8:c7:cb:30:
93:e1:9d:ff:4d:6e:6f:af:0b:d4:df:44:98:7c:41:
0f:be:00:70:50:ac:65:5d:09:74:87:51:1c:04:70:
4c:40:0c:d2:80:67:a6:e7:b9:6f:95:32:fa:9c:91:
ab:50:ff:d2:b4:6b:00:6f:7d:ef:68:ba:2a:fa:2b:
ec:28:d2:19:16:12:ec:15:5d:9a:fd:b5:90:81:95:
26:04:a8:95:c7:0a:cc:b3:3b:81:0e:d4:4b:f8:bb:
4e:7e:dc:e0:f9:71:13:7f:ae:f6:f0:a4:e3:5e:c0:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:3D:80:B1:C1:C4:AC:BA:FA:A1:E5:9E:36:3C:30:CA:92:22:CB
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ad:3c:10:23:b6:ff:9d:d3:fa:c8:48:53:ff:39:20:16:eb:
ee:5b:1e:2a:05:51:b6:31:3b:ab:67:73:1c:e3:a1:71:a1:0d:
3b:1f:b0:b5:23:6b:8a:c3:bd:bb:1b:8a:df:30:cd:82:9a:80:
91:33:f3:78:da:aa:44:dd:9c:b8:ec:ba:33:04:5e:78:a8:3f:
8c:46:7e:25:4a:a1:ad:27:02:c5:16:9b:11:17:09:84:45:a8:
08:50:c4:e5:2b:fe:b7:c2:aa:1c:b2:4b:b5:76:84:75:ca:44:
bc:40:57:47:71:5d:a3:78:98:21:db:14:ef:5b:7d:0c:92:c2:
f0:0b:b4:5d:56:bb:0e:06:20:1d:26:50:5e:ef:28:a8:0b:82:
df:a8:65:77:c2:2a:4f:75:d7:f1:b6:e0:0e:3e:47:07:3f:5b:
89:5f:71:59:23:4a:ca:ce:a0:0e:da:1b:30:3a:8e:50:66:41:
a0:b9:47:a9:e5:60:58:e3:d2:c9:a8:42:b5:5e:2c:b9:bd:aa:
3f:c1:14:60:31:89:b2:7e:20:f1:25:a3:0f:63:4a:49:68:10:
77:b5:5e:10:a1:66:89:ee:97:18:60:17:8a:da:fb:84:e5:2e:
a7:0c:c3:1c:1a:f3:40:20:31:57:07:8b:26:ac:4e:86:ef:4c:
32:e9:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client