Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: FJmyPEoTZN8tZtnKVVdt4lxOLNxLWBW30RVPWTNlEyc=
Subject key identifier: 23:31:96:B4:1D:06:E5:08:81:FE:ED:D0:84:08:3E:7C:C8:1C:81:22
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 0194BBCE8F13A23C13FCDB0E966A8723976B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: masRB3pV6MxvnHE1+loiEwFstKRK+qALKdvDtJUoIO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8f:13:a2:3c:13:fc:db:0e:96:6a:87:23:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=233196b41d06e50881feedd084083e7cc81c8122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:84:27:38:70:00:af:76:3f:aa:78:5e:41:
5a:20:51:74:e9:1b:89:4f:e8:db:dc:80:5e:78:d6:
81:c9:eb:58:0b:ce:f5:60:ca:7d:bd:db:88:67:a8:
4e:52:ae:bb:5e:8d:c3:41:51:bf:1e:a4:85:ae:a6:
4a:46:06:b4:53:b8:e6:4d:4f:f8:d1:6d:0e:32:96:
53:ae:2b:d3:b5:e9:f0:89:be:54:23:4e:98:ea:af:
93:36:77:d6:32:de:25:56:e0:9e:73:12:b8:40:a1:
82:7a:2d:68:a3:7f:24:97:44:fa:ae:f3:7b:45:8c:
82:06:cf:4c:af:67:eb:aa:fa:e4:93:4c:3b:96:12:
75:fa:33:87:ee:3b:78:30:9a:b8:6c:1f:b0:3c:52:
71:64:a2:41:b6:da:1b:02:ad:8a:b8:4d:5f:fd:9d:
f0:e1:82:f9:53:d5:74:1e:47:0b:ba:0b:ac:bd:88:
d8:0d:d2:cc:82:62:7c:fc:ba:b9:8b:5d:35:0b:c6:
ec:86:8f:c2:ba:80:31:53:e9:e0:aa:ea:85:62:50:
44:7e:b8:c2:b4:cc:9b:03:3a:8a:48:89:53:b1:06:
ed:3f:b3:67:b7:ef:39:4b:e5:db:c7:ac:ea:df:ab:
02:b8:c7:87:50:c5:b3:58:4e:fd:2a:f9:a7:03:b9:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:31:96:B4:1D:06:E5:08:81:FE:ED:D0:84:08:3E:7C:C8:1C:81:22
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:9e:6b:c8:bc:1e:f1:07:4a:aa:dc:ce:a7:2e:a9:0a:e6:
a2:fc:86:33:7f:e6:ca:14:45:ce:85:40:6d:66:29:1c:41:0b:
6d:a2:38:b8:e6:81:a8:e2:68:3a:32:6c:a9:2c:78:b0:18:6f:
a2:51:ac:eb:f1:bc:68:93:78:f8:ed:c6:df:9e:a2:bc:13:f9:
25:fa:aa:af:20:02:92:b0:3a:54:1c:fe:3e:8f:ff:1a:35:eb:
75:ef:83:3e:ea:fe:7a:05:04:dc:ec:09:47:17:dc:14:a0:7b:
96:29:ce:38:a4:dd:36:1b:3d:49:42:2f:1e:b7:bc:dc:4a:64:
2b:30:b7:b2:2f:89:55:1b:05:55:45:97:1b:20:27:da:6a:06:
1d:ec:7d:32:05:cf:ce:b6:99:63:19:23:42:bc:f0:34:22:a2:
47:36:26:a1:85:78:19:5f:27:99:63:6a:d9:5f:b8:b8:53:c3:
dd:a1:08:e3:c1:41:86:f7:b9:43:0d:af:69:01:1c:1d:2f:e2:
3f:f7:81:c3:4e:12:50:19:de:b5:41:40:90:6c:93:b6:1e:ae:
85:ef:a8:aa:de:3f:6e:5d:2a:b3:1d:ad:d1:a4:7a:60:e2:47:
2e:d3:f1:02:86:0b:3d:93:32:19:a9:c8:6b:13:58:b2:8d:7f:
9e:a1:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:40 2025 by rpki-client