Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: i4U9PPupptpknk08PAVLH4eS7BIsxElqIvpcEowqR9o=
Subject key identifier: 36:F1:BD:2F:0D:12:74:3A:DF:56:B7:A2:79:8B:3D:6D:AD:27:51:4A
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 0194BD854B02D0C85D362D2432A39564F881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: BopAV29ttZYn7zFyiqnkFZexSgCn4Vh4HUlP2lHI1vw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:02:d0:c8:5d:36:2d:24:32:a3:95:64:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=36f1bd2f0d12743adf56b7a2798b3d6dad27514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:2d:8c:cc:35:e9:0c:60:d2:ad:b0:1c:33:
9a:a6:80:8f:45:89:91:78:74:a4:60:a8:08:05:56:
a0:48:9b:44:05:4d:92:34:9b:f5:1f:bf:69:72:5d:
10:f5:8d:42:0d:07:c3:2c:5d:60:63:e2:7f:ce:33:
24:2a:15:07:79:97:45:57:66:7c:63:dc:e0:a1:37:
c3:99:a6:16:ae:3a:be:eb:b1:87:06:90:1f:a7:9e:
44:c9:f0:da:65:bd:96:e4:5b:e1:32:0c:cf:da:2f:
d1:62:b5:7e:70:1b:f3:5c:18:0c:a7:20:9e:69:50:
e1:f9:de:65:3f:f2:ce:e9:5e:0d:80:99:31:d7:a7:
49:48:a4:f9:69:d4:83:a8:2f:c3:e6:de:32:3e:08:
ec:ed:a2:bf:94:67:e7:e6:66:d0:ea:8e:d2:29:06:
7a:19:a8:51:88:11:01:b3:94:52:49:f9:4b:f5:dc:
b6:08:b9:ce:ed:f4:d5:47:2a:2c:ef:34:d9:ce:0f:
1f:81:24:94:40:2b:e9:37:c4:2d:0b:c4:b9:7a:cf:
fa:e3:02:7d:08:f2:18:e2:49:4a:33:27:17:02:72:
38:07:00:8c:3f:79:40:e6:03:fe:78:0c:38:54:38:
24:60:6e:1b:bc:3c:d0:64:81:8e:50:d9:ef:e2:f9:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:BD:2F:0D:12:74:3A:DF:56:B7:A2:79:8B:3D:6D:AD:27:51:4A
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:0c:3b:88:74:11:14:a2:52:37:d6:a4:16:ad:59:d2:e1:
59:12:53:6d:8b:98:58:93:f0:c8:b4:92:ae:7a:e4:a8:ff:d5:
74:f5:fb:7a:33:76:ae:56:5c:03:18:0b:7f:b0:c9:45:b7:93:
dc:b0:bd:2a:95:da:f3:6a:bf:fd:3b:df:6e:85:e9:75:00:29:
5a:08:a7:f2:81:c1:9b:e7:4d:a5:f3:5a:0f:7a:08:9d:21:9d:
fe:ca:02:dc:f0:db:b3:dc:b3:46:87:2b:4d:d9:06:6f:5b:8c:
e1:e4:ad:6a:0c:92:67:47:36:97:2e:8b:3a:e8:8e:e2:2d:9e:
d1:74:4e:6d:25:98:86:57:93:64:2e:60:08:c5:5b:9e:ff:3d:
c0:47:26:e3:17:c5:02:40:bb:77:45:db:18:a2:3d:17:9b:dd:
8a:73:ef:28:ff:c1:92:85:5b:e8:4b:96:03:69:4f:38:fa:f0:
f4:5a:74:0c:33:d8:97:e7:3a:a2:3a:ac:eb:92:e9:cf:57:66:
6c:ea:c2:3f:61:54:d0:f1:61:50:fa:f7:57:2f:85:61:c6:6a:
23:43:3a:d9:6a:59:2a:4f:e9:86:c0:51:ef:c0:b1:e0:31:0b:
ee:63:d2:9c:d5:fb:79:2d:91:8f:f3:5e:a0:7c:25:a6:2c:d6:
4a:cc:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:27 2025 by rpki-client