Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: mHrccRzn5WFK3uccA6lzdDc9IGPmVFOu++iHd+trXc4=
Subject key identifier: F8:BB:98:DF:EC:D1:FA:FD:3D:24:85:D5:DD:91:8E:B5:E0:ED:00:27
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 0194BC3BCFEE4864A7B2A8A2B2B97B2C251E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 1272
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=)
2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: LdibPWVjBxAirX1ua8okzvwciuDw+IeuDoD2bzpkcRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:ee:48:64:a7:b2:a8:a2:b2:b9:7b:2c:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=f8bb98dfecd1fafd3d2485d5dd918eb5e0ed0027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:0d:51:d9:87:7d:0d:82:7a:b8:e4:81:ad:
05:a6:20:eb:37:7a:51:96:fc:5f:61:74:2b:c3:d0:
a9:09:d2:ce:0d:15:85:e4:a1:84:23:e3:95:0b:d6:
ed:7c:2a:ef:ca:57:f2:8d:c4:79:16:ac:a2:18:db:
31:b6:58:bf:be:d5:e7:2d:32:8c:24:a5:ea:d3:5e:
49:54:8e:27:5c:00:9b:1d:4f:74:5b:5f:10:97:31:
9d:91:61:4d:0a:b8:54:55:37:6c:34:17:fa:7b:3b:
03:87:4e:dc:af:57:f4:0e:97:be:0a:cd:24:0a:33:
7f:49:0b:83:59:c2:72:26:bd:ee:fc:28:57:b9:2f:
68:ad:85:2a:0d:13:95:90:ab:f0:db:44:3d:bd:f8:
a7:f5:8d:8c:9a:2c:89:e0:61:d4:66:c3:20:1f:87:
0d:3f:a0:7c:6e:b5:a2:65:34:a9:4a:da:95:e9:39:
78:9d:3c:7f:0a:f6:fb:f8:49:aa:4e:3a:73:05:56:
a4:79:e0:4d:fd:50:a4:4b:b2:1b:9a:00:9d:73:37:
f5:f8:be:c4:15:2d:f3:7a:e9:f3:d7:f3:01:e0:2e:
7c:56:56:2b:17:db:55:fc:0f:48:05:77:11:2c:a8:
ad:92:96:70:d4:d8:05:38:4f:9d:9b:f4:f7:e6:cd:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:98:DF:EC:D1:FA:FD:3D:24:85:D5:DD:91:8E:B5:E0:ED:00:27
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:81:b3:b1:03:fa:29:52:60:fe:78:0c:9e:74:49:fb:22:6a:
87:6f:6a:a4:4a:3d:c0:64:34:a3:31:9f:e6:c0:f4:b1:d1:84:
21:df:12:34:4e:5a:34:a4:7f:11:32:91:f1:7f:45:11:6b:1c:
4d:e3:9d:87:05:a6:9e:dd:b3:62:dd:6e:bb:38:74:65:c9:79:
ef:cf:8b:9e:6f:b0:62:27:8a:75:48:58:84:21:7b:e1:7c:2e:
2b:e9:ec:c5:b1:fb:cd:ab:08:4a:d8:15:53:93:fa:ce:75:0c:
9c:23:4d:3b:bf:60:ff:d6:1a:95:7a:f6:0f:6e:2e:67:53:7a:
90:af:7a:b0:d8:08:91:a7:ac:00:7a:0e:d6:58:ac:44:63:55:
ff:f9:bb:62:a1:82:af:3f:cd:3c:f2:ae:94:4f:39:70:06:2e:
b6:cf:71:67:ee:e8:a9:2f:17:53:6f:35:a8:40:13:8d:ed:e6:
8d:21:4f:b9:80:e3:f9:95:7a:d5:7b:40:eb:14:e8:f4:8a:d9:
b9:30:be:72:2d:49:4f:30:86:c1:2e:66:5a:d0:02:63:11:06:
3f:24:93:30:bf:95:e1:1e:1e:81:a5:34:42:c7:60:93:63:4e:
aa:59:10:97:0f:78:8d:c8:74:ce:4f:72:37:e1:02:85:35:bb:
6d:b7:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:03 2025 by rpki-client