Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: rU4Uzc1CJJOjkmANXz/EA2kLUgbhUs8ltCeCT3MDQ38=
Subject key identifier: 47:AD:5F:BF:C1:A1:F2:62:4D:72:FD:BD:9A:08:CB:0D:5A:FD:D9:01
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 0194BD174E25475FD04F8D4283623A272F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: 5/XujFSEkBIhHMI5UIyj8dSOqMmxr/O/bXACiJnxAow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4e:25:47:5f:d0:4f:8d:42:83:62:3a:27:2f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=47ad5fbfc1a1f2624d72fdbd9a08cb0d5afdd901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:29:0d:bf:f5:22:79:ce:0f:99:e7:5d:31:
e3:37:ae:85:f5:a0:2e:c0:25:99:e8:8a:cd:41:e5:
39:23:3a:5b:5d:c7:13:5f:e5:b6:95:aa:a8:fd:60:
af:84:53:d8:76:3a:ae:83:f6:6d:62:b1:c8:e6:4a:
9c:cc:f2:49:a6:b9:c0:83:59:7c:bd:2d:56:08:5f:
28:e2:f0:f4:37:18:5f:a8:1d:f1:2a:91:c8:42:de:
06:78:4a:fb:49:7d:02:a8:c2:dc:b2:9a:f8:da:a0:
fc:b9:a8:c9:db:4e:b8:7c:7e:96:c0:4e:18:a6:d2:
6b:8f:23:ea:c5:6f:55:4c:6f:b3:5b:97:36:aa:0e:
5f:ab:dc:e5:64:33:2a:7d:7b:9b:91:33:27:a8:a6:
b9:83:58:f1:55:e6:4f:a4:04:58:eb:63:68:79:ce:
94:86:8c:99:6c:28:6c:75:4e:ef:71:2f:27:75:f7:
9d:35:d5:8b:2a:2e:fb:6a:0c:a7:6c:37:0a:c6:71:
8e:2e:b2:a5:ed:fb:0d:35:c8:35:bf:29:8d:a0:09:
1d:83:ca:65:8b:5f:d7:cb:6c:6f:46:35:62:58:64:
32:87:cc:97:4f:19:6c:0d:b6:ed:85:63:b5:e2:da:
03:e4:10:14:2b:81:49:a5:1a:8b:bd:d0:35:f3:94:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:5F:BF:C1:A1:F2:62:4D:72:FD:BD:9A:08:CB:0D:5A:FD:D9:01
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:40:4c:04:fe:46:08:7a:01:ca:30:1a:1b:f5:c6:d9:4c:c9:
24:c0:5c:be:c7:db:83:b8:78:e7:bb:e3:3f:65:47:ed:dc:c8:
99:77:6e:5b:1b:af:58:59:a6:1c:35:c9:24:64:cc:a7:5c:b9:
75:58:05:5d:d0:a7:74:f5:0c:37:51:96:9d:44:f3:54:dd:ff:
82:2d:43:b1:7b:50:7e:b9:43:ea:db:fc:87:ca:5f:51:2a:f5:
4c:1c:b6:bb:df:72:1b:ed:fb:47:e8:7a:60:cd:0e:1d:3a:2f:
37:40:6f:9e:ea:34:83:81:65:0c:e8:1d:1d:4c:6a:ca:ba:a2:
0c:16:b0:d8:a7:50:87:1c:fa:9b:e6:b7:08:87:41:fe:3a:d9:
63:f9:01:73:df:56:80:d2:d7:8e:05:29:6b:ba:b6:92:59:df:
fb:4b:e2:3e:8c:26:e7:b6:20:de:66:ae:05:ab:86:68:15:31:
25:84:bf:74:f5:e6:b5:a9:ce:44:c5:02:a4:dc:84:97:9a:4d:
04:9d:c0:5a:13:08:2e:c2:f6:2b:bc:27:37:c4:86:d0:f4:c7:
cd:56:52:1f:e3:b0:ef:14:b7:ec:11:9b:26:f8:f8:47:5a:c9:
5f:1e:64:79:4b:bd:a1:36:f3:21:8b:9f:eb:18:48:d8:83:c7:
c1:be:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:39 2025 by rpki-client