Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
File: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft (raw, json)
Hash identifier: hYm6xBTqWnC23FjhxkxBzSOd5R1y+zIgki/bze8HR/o=
Subject key identifier: 41:7F:55:85:03:2F:67:2E:6C:7A:3C:80:08:BC:CF:C6:14:C8:EA:60
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 0194BC04D8198EAE2010D343D4AF0BCDB0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa (hash: XRXIYDE3PMP8HGRW9qlh0nIOPSOFPTF1lsWNuSlfpmY=)
2: P9x64-P6Zc5aUoIHika_YUJSpL4.roa (hash: wA4s5vuet/tgGLY4KlSltkNzg/nbmHYvEtESrfXIJ8U=)
3: i9LUKRMFfrn-zZJPck6ZTY7F8F4.roa (hash: vYGYhqvVpW6XCnxzEEe+vdIqrrsrJBwJSKWJ04MFhOg=)
4: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl (hash: WYItuZLZpWOzqlWwBJpX/EeaNtWPdimbR1Nn6YdVGcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:19:8e:ae:20:10:d3:43:d4:af:0b:cd:b0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=417f5585032f672e6c7a3c8008bccfc614c8ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:b5:7a:4d:34:4c:fc:1f:2c:19:31:a2:dd:
e8:a5:5a:7c:2e:b8:ec:40:62:42:51:75:05:10:de:
01:c5:f8:44:ed:27:76:49:cb:be:58:a3:3a:6e:17:
17:d2:d3:a0:dc:7c:51:0f:02:50:f1:94:d8:4e:e5:
46:11:e5:76:cc:d0:03:08:1c:ed:17:ae:01:81:be:
1a:f8:85:76:31:1b:f6:85:4b:d1:9b:53:de:7a:e5:
df:e3:43:8e:c7:ca:a4:3d:0b:42:7d:1d:77:0a:ae:
38:78:d8:ee:ee:aa:5f:23:74:f5:12:83:14:91:33:
3a:98:b3:72:a2:6b:fc:fc:35:d6:62:e3:39:d3:17:
f7:8f:d5:cf:f9:39:a5:87:f2:ef:85:16:58:9a:95:
a2:46:23:a3:cb:ff:6c:d8:9c:e8:b4:2a:ee:d7:0e:
bd:04:8c:82:f8:99:06:88:6f:14:56:11:11:b1:46:
b0:0f:03:4e:60:f1:ef:ef:51:05:6d:42:02:52:c7:
55:40:cf:1a:fd:37:51:01:08:9d:cb:c8:17:22:8f:
bf:2c:47:37:30:96:8f:03:ed:72:18:92:77:1d:94:
7d:2a:4c:11:fc:fb:c5:ca:69:ab:af:89:42:a8:e4:
a4:7d:d1:33:0a:f5:f9:db:2d:19:c9:c2:a4:fd:fe:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7F:55:85:03:2F:67:2E:6C:7A:3C:80:08:BC:CF:C6:14:C8:EA:60
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:56:30:a1:c3:04:15:11:33:ed:9a:d4:36:4d:63:c9:e8:e5:
0d:8f:fe:d9:b6:96:de:4f:92:86:d1:a6:b2:82:be:6a:21:7f:
55:13:e6:b4:6c:99:39:81:23:6b:d6:f4:d6:2a:96:10:a3:d6:
54:f5:75:af:3f:12:85:f3:59:1a:d9:8f:80:d1:cc:c8:23:ab:
1f:81:ca:80:d0:d9:ee:f6:38:f4:56:ea:5a:80:67:7b:1c:94:
b1:e5:e8:ac:0c:46:36:99:6c:83:4b:3b:e3:fb:c1:9a:99:30:
f0:90:4e:99:a0:27:83:0f:de:b5:88:bc:3f:06:a4:d7:c3:9e:
18:be:90:0e:83:53:b3:c7:9e:af:fe:3e:92:b2:e2:a5:18:3a:
36:a1:dc:94:9e:5c:36:62:ca:10:a3:0c:04:5b:b7:7a:a4:45:
8e:00:b2:e4:43:ee:ff:ec:91:76:da:f3:f9:96:34:7b:6c:26:
68:fa:14:cc:19:2c:44:65:55:26:00:be:fa:5e:4a:cc:20:90:
ca:04:a7:2c:3f:22:73:79:38:1c:c2:be:e8:95:52:2c:a8:02:
76:06:f2:67:ce:b5:ad:13:94:d0:36:c7:03:6b:74:e7:48:82:
70:fa:60:b1:20:28:8e:ea:b4:e4:17:72:0e:73:68:b6:3b:c3:
2c:4c:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:43 2025 by rpki-client