Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: 1GMO1I2jwTyFfivXw1MJAyl79iTtni+77+zPrvza844=
Subject key identifier: 31:C2:EE:72:4A:64:E0:2D:5B:20:75:58:10:4D:F3:4C:90:FB:13:F1
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 0194BC04A7DA33394D847E5D348AF7909925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 11EA
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: KHZFQWINVQypFbUQWFXFlyW2KwnMM1usuHVUvSa4/10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a7:da:33:39:4d:84:7e:5d:34:8a:f7:90:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=31c2ee724a64e02d5b207558104df34c90fb13f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:26:29:46:2f:7a:22:d2:7b:d8:27:66:cd:
a2:67:31:9d:11:a7:58:c4:18:82:97:bc:93:62:f3:
54:49:ab:ed:6f:9e:bd:5f:6c:af:7f:24:5a:91:3f:
c7:b0:1e:c7:12:f3:df:2b:c6:a9:57:2e:9f:6f:b6:
22:82:64:60:f2:8f:92:c3:e2:d1:51:e1:f4:98:0e:
60:7d:7c:d3:18:0a:07:d6:43:7a:7b:d6:51:43:3b:
09:5f:3d:b3:fd:1e:e8:4d:b5:cb:a7:6e:35:3a:0f:
fd:fc:2e:7e:9e:16:a5:5a:e0:c3:9b:ac:1c:fa:a7:
ad:ee:cb:e9:8c:89:66:8b:7a:cf:69:50:62:99:3c:
a3:88:ba:f3:e7:67:7e:ed:31:48:63:6f:1c:ee:cd:
1a:a5:64:22:49:cd:d1:37:5c:78:3f:45:b2:c9:fc:
c8:fa:10:38:67:b4:97:19:94:c8:da:9d:f7:b0:e5:
10:c6:62:b4:bf:f5:b6:a8:7b:4d:5c:62:bf:de:b1:
7a:16:75:7b:43:aa:a6:0a:54:24:92:82:b2:fc:d0:
19:e7:87:e9:84:76:12:e0:37:cb:ee:57:6f:38:4d:
36:fd:ea:3c:7c:ee:4f:99:6f:ec:97:df:76:92:cc:
6b:dc:6a:6a:12:f6:c5:ac:3b:be:bf:31:fd:d1:f9:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C2:EE:72:4A:64:E0:2D:5B:20:75:58:10:4D:F3:4C:90:FB:13:F1
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:5c:a5:c2:bf:5a:b3:a6:42:7e:9d:5d:a8:40:a2:8b:ef:
39:26:6f:6d:0e:68:ab:a9:c3:34:5f:bd:b0:b5:fb:95:87:ea:
59:e3:c8:8c:77:19:2e:57:2c:9c:aa:71:61:ed:66:40:33:8b:
e0:ca:ea:e2:79:a4:34:eb:30:2b:55:41:a9:57:e7:5c:2b:8b:
5e:33:04:1c:66:e5:86:ee:91:09:5d:1c:b6:d1:ed:7f:cb:11:
ad:f4:ce:8e:22:ff:27:01:11:cd:9b:c9:f0:9e:3b:4e:80:a2:
df:7a:0c:59:ee:b5:21:52:49:79:9f:32:68:02:2b:38:b5:87:
13:dc:b1:5b:cb:62:fd:65:f5:df:27:0e:fb:16:79:f1:22:60:
e4:2d:00:16:e2:a9:5a:bb:7d:e1:58:be:4a:60:8c:20:79:ed:
b9:a2:bd:ac:c1:fd:12:28:8f:01:78:29:f5:15:a0:39:54:9e:
22:70:ca:b5:2f:96:d3:df:6e:62:11:a4:39:20:29:df:68:b9:
e7:16:2f:7f:0d:41:9a:73:29:21:bd:c3:f9:eb:99:36:b3:97:
e6:c5:a6:7e:d8:a7:cb:6e:41:04:9c:bb:e4:6f:aa:ac:03:8c:
ee:fd:2a:c1:d4:c3:0c:f5:3c:3d:8b:36:65:56:70:cf:70:11:
75:b9:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:02 2025 by rpki-client