Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: IGl0y/7YnBw349TiUUh39HjaqDfTyRg2hWHccBkCm+Q=
Subject key identifier: 38:A1:FA:40:EB:83:65:64:A1:6D:3C:25:03:29:E9:CD:54:F2:78:EC
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 0194BC3CB38AE52EFE509DAAB053BF654F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: j9X34CZ6Vufa6BET9t6fg1j8p7LyBnU1tcjBlTkB/z4=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b3:8a:e5:2e:fe:50:9d:aa:b0:53:bf:65:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=38a1fa40eb836564a16d3c250329e9cd54f278ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:70:af:21:32:e5:97:7b:35:07:2e:db:a6:
77:9b:57:07:66:ef:8c:28:05:a2:5d:2d:38:72:08:
58:c7:2a:f0:f9:76:3f:3a:cd:d8:5b:fe:93:38:1b:
c4:ff:e5:16:76:3c:b1:3c:3f:2f:e7:0a:1f:d1:6b:
5f:a9:c4:2d:0b:b3:6e:38:7b:f2:08:67:18:2c:63:
62:ac:8c:b6:2a:ef:a9:81:33:96:0b:9b:c9:82:5c:
ab:94:75:2c:f9:24:c7:3a:cd:42:04:7f:63:08:d7:
08:94:7b:f1:53:85:9a:84:e6:4d:be:16:65:49:f8:
36:d1:25:7e:85:6c:71:1d:c1:41:c0:6a:f4:96:c8:
65:3c:5c:5f:8a:3b:0e:8f:ab:1a:48:47:ee:ae:31:
4f:8b:21:fe:10:50:78:04:6f:08:25:9d:d7:1e:16:
5a:a8:24:fc:53:e7:73:66:49:dc:3e:21:00:67:4e:
0b:a8:57:52:06:f8:61:8a:c8:0d:f9:72:23:36:83:
45:db:c8:04:f1:d3:0f:99:4e:79:4f:fd:6e:42:b2:
b0:ad:95:27:77:32:9d:e9:84:bb:11:22:e6:6e:a7:
06:53:2b:51:1d:f2:34:cf:74:56:6a:50:58:64:b5:
78:8d:e9:c1:45:8f:30:5f:54:aa:03:19:17:03:f2:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:FA:40:EB:83:65:64:A1:6D:3C:25:03:29:E9:CD:54:F2:78:EC
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5d:35:1a:dc:be:ba:94:54:3c:d4:d4:61:53:f8:22:2d:3b:
c7:a8:04:a0:5e:5a:81:2c:43:60:7c:77:39:08:da:1d:ac:fa:
84:d3:27:e2:82:cc:9c:36:46:0e:d9:a9:dc:4e:26:13:6c:2a:
c8:76:51:88:36:8a:98:cd:ec:dd:d3:32:38:41:ad:85:bf:e8:
9e:15:d9:72:5b:45:16:09:73:a0:4d:d0:69:a8:1a:2a:7f:e8:
22:e4:45:e4:07:76:35:93:b5:ab:c4:a4:e5:56:33:2b:a8:c6:
3a:cf:cb:a8:9d:f8:7c:79:88:42:9c:af:fc:3c:c9:3d:ce:58:
f6:24:cf:b2:40:ca:9e:6d:3b:aa:79:d0:3f:c7:ca:84:57:d8:
6c:f2:e5:64:8e:61:03:fe:f3:b8:4e:2f:d7:21:7b:eb:31:ae:
30:94:14:6f:35:52:1e:2a:20:ac:80:71:d9:f1:1b:b0:b1:a9:
a6:b1:82:2c:82:17:20:9e:3f:90:5d:14:44:47:51:bb:dc:19:
fc:0a:02:86:c6:60:4d:a9:61:99:f7:50:cc:96:e8:b7:4f:51:
56:16:c3:05:e2:e3:e6:b7:62:e7:97:99:7e:46:d8:be:1c:51:
eb:0e:d0:36:7c:c8:02:4c:36:31:88:3a:e8:75:bb:0b:b0:de:
6f:12:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:50 2025 by rpki-client