Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: pZFqaos2IAbyexXKCFt/bWr0/b8mALMqE2NxB/RT40M=
Subject key identifier: AA:D0:B2:81:25:05:73:21:74:45:93:9C:32:34:A7:75:B1:31:C4:5F
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0194BCA9BCDBEC4DBDC7DE9B580240CE0357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0CE0
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: 6XQNQ0OU/2aikCyTubPmeCUH+y+9dth/mJ2eR4ldTpU=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bc:db:ec:4d:bd:c7:de:9b:58:02:40:ce:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=aad0b281250573217445939c3234a775b131c45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:2a:f3:b6:32:6a:11:fa:b8:49:d5:58:d0:
3a:b3:76:d9:36:a6:74:fc:84:df:d3:50:bb:21:42:
34:18:dd:7a:ac:44:b0:7c:23:c8:00:65:89:56:5d:
be:bf:cb:47:46:10:7c:7c:e2:09:c7:93:9f:5c:ef:
dc:3e:2e:7a:2e:c2:a3:83:c2:ee:1a:19:32:44:a2:
b4:25:9e:ad:f4:db:d8:e1:d2:eb:c5:3f:bf:32:64:
54:11:c6:59:fe:c1:dc:17:94:60:10:f4:45:1b:cc:
c4:3e:89:52:e3:cc:3a:9a:00:56:1d:ff:26:30:5a:
08:8f:25:aa:04:f5:a2:e0:96:55:8c:23:10:c5:bc:
a8:fe:4d:f5:65:f6:31:95:4d:e7:d1:5d:72:ee:7c:
71:5f:0c:ce:6b:2e:d0:c5:1a:91:3d:c6:eb:c2:08:
fe:e3:4a:00:59:b4:37:bb:89:ca:81:f7:90:41:48:
46:d4:f9:c1:cc:6a:83:58:58:6e:1c:c5:c8:bd:ba:
45:eb:f9:41:47:32:50:72:20:33:9e:59:e8:d5:a7:
d2:59:82:8d:3f:85:84:42:47:b4:d6:72:e9:81:84:
d3:8a:05:e9:ec:68:fc:bc:57:8a:63:24:16:ce:b0:
13:a8:a1:09:7b:67:e4:6b:74:a6:22:93:cf:1c:20:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:B2:81:25:05:73:21:74:45:93:9C:32:34:A7:75:B1:31:C4:5F
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:37:dd:32:a9:41:d9:df:02:70:11:cb:9e:82:70:a3:5e:
c9:8c:2e:03:1c:2b:cb:5e:21:00:07:36:4e:bf:5c:b6:8a:d8:
51:d1:c2:a8:a7:cc:c4:a3:12:6c:87:17:83:11:6b:67:65:d2:
df:45:26:bc:65:98:c5:ee:f9:e6:00:1c:84:8a:b9:71:0e:19:
80:b6:c6:a8:d7:af:6c:46:db:94:0f:ac:cb:0c:c1:56:29:80:
8b:be:8d:70:4e:44:8b:5b:74:f3:1d:7b:36:0d:b1:9c:bb:16:
12:68:fe:b5:5e:a6:0d:02:0b:7b:5c:0f:46:a5:3a:70:10:34:
89:34:2f:31:f8:2f:9f:91:f1:2c:69:06:c2:81:7c:87:9a:ba:
18:ce:16:5a:73:c0:1d:ce:99:5b:e3:21:34:11:78:4e:dd:4c:
b3:b4:58:64:3a:c6:b3:14:15:7e:6b:e2:d4:fb:f1:de:50:fd:
66:5f:f2:0f:1a:08:57:bc:f5:2b:24:f4:11:fc:a7:23:40:dd:
c9:fe:4a:8c:95:f2:77:2a:fa:48:d4:ae:99:11:3b:e2:6e:b1:
19:19:4d:b3:09:3a:4f:ae:19:4e:f0:3d:6e:ff:08:fa:52:cc:
5e:aa:ca:b6:a9:68:58:ec:88:3a:32:1a:04:55:e3:23:74:02:
1f:9c:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:54 2025 by rpki-client