Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: VGLLL7DsnZAQmDMuLMKqqYmQrtN+S1tKDjD1WnDhBVM=
Subject key identifier: 03:02:3E:42:97:4A:BE:56:13:FA:27:B7:B6:1C:87:DD:02:63:E7:B1
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 0194BBCEB96EBD39226E5B748A206DF86061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 09FB
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: z8U5UcQthLg4c38EK2nuzSlF8DQWmU3f1q5rgy97K5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:6e:bd:39:22:6e:5b:74:8a:20:6d:f8:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=03023e42974abe5613fa27b7b61c87dd0263e7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:cc:fc:2c:fd:96:a0:47:60:52:f4:ac:22:
c8:10:e4:1e:98:21:f4:fb:39:33:94:ab:4e:86:9d:
e5:2c:41:ef:4d:4e:5a:05:18:e8:a6:8f:72:cc:63:
03:2f:15:89:1b:d8:e9:ed:b1:9a:96:a3:b2:ac:43:
a8:ab:d9:47:9a:6e:3d:b6:96:84:d2:98:db:6e:b7:
81:79:ec:d1:c0:f8:b2:83:91:1d:41:36:50:9c:c7:
a1:75:b9:b2:b6:a7:c2:f5:4e:1b:25:56:5f:30:9c:
6a:2d:41:e5:18:1b:af:3a:83:72:7b:25:51:8f:1f:
57:49:ea:39:20:f5:53:61:75:0d:8c:6e:dc:3e:96:
4a:ce:ea:32:90:bd:ba:6b:36:5c:ae:61:9c:62:61:
4a:44:39:68:0c:a7:a4:94:66:f5:fe:bb:c9:b7:8f:
76:76:91:0b:bc:9a:ea:fb:07:8d:4c:30:3a:6a:dc:
03:ab:56:ce:99:04:89:af:98:29:55:1d:e8:46:53:
8c:6b:e2:34:93:59:b8:cf:82:85:08:72:ce:ad:e0:
13:77:eb:ed:26:24:bb:9b:35:bd:b6:11:70:88:de:
76:5c:25:c8:23:ec:90:44:1f:cc:4c:8b:b8:99:d4:
3d:ec:9a:8a:63:a7:81:83:db:c2:d7:c6:6b:37:0e:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:3E:42:97:4A:BE:56:13:FA:27:B7:B6:1C:87:DD:02:63:E7:B1
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:ba:b4:9f:2b:c2:b0:2e:28:61:35:ad:bb:1c:1c:5f:ff:
5d:8a:48:71:93:3d:2e:5a:49:25:27:df:f1:0a:49:46:a2:b7:
b0:95:74:84:3a:33:ad:4c:c7:99:9d:96:1e:42:a9:e4:9f:17:
e7:00:1c:6b:4a:61:98:32:35:b2:9e:76:f8:12:a3:d9:86:4c:
40:5e:67:ad:23:fe:cb:27:52:1c:e5:3b:98:81:6b:ca:86:47:
c9:5f:0d:9e:d8:ea:0c:73:e7:34:0a:ff:97:a9:d0:99:43:a2:
34:6e:e3:a6:90:6d:57:db:ba:fc:a5:ed:31:50:b3:d0:30:1d:
e7:5a:c7:ae:9e:8a:d3:7b:ac:18:7a:81:5b:4e:97:60:8b:db:
87:27:0d:d0:7f:ca:97:bc:14:d0:77:8c:97:c3:33:b0:0d:98:
4f:06:6d:6f:89:ae:44:6d:6a:05:2b:c2:4c:df:b3:bd:d6:82:
08:df:4c:60:80:c7:b7:78:ba:58:d0:f9:6b:f4:6c:7d:ea:40:
9c:8a:ff:29:c3:b3:1a:e7:43:09:15:a6:ee:49:a7:47:04:ff:
3c:6d:d0:7c:b1:9c:a1:02:05:55:16:44:ba:61:f9:84:0f:4e:
a1:63:98:e0:10:6b:ca:75:f5:ca:cd:ad:d7:ad:e8:4a:d2:0d:
dc:89:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:00 2025 by rpki-client