Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: zN8UggVrbRWOhePb3JxJdfn4WgFyQoO0ZgTY78CUVAw=
Subject key identifier: FF:9B:AF:3F:E8:41:58:65:1A:6B:98:FD:D1:1D:1A:CA:3E:C5:7D:8D
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 0194BC04D86A46BDB392C922ADBB3E47D176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: vv3g5K7hp8uQGgkAkNtFiDoODyOEeURUJm3ZtVxkiyU=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:6a:46:bd:b3:92:c9:22:ad:bb:3e:47:d1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=ff9baf3fe84158651a6b98fdd11d1aca3ec57d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:ae:11:1a:7b:ea:27:c2:e5:01:00:3c:04:
d2:04:1f:a0:82:e5:bb:3a:66:b3:b1:4e:78:a1:1b:
4f:b3:07:3b:b6:d5:be:c6:f1:df:07:5d:22:a2:50:
28:d2:ff:a2:8a:7a:05:9d:81:60:6c:0d:c0:f5:e9:
1e:58:db:f7:a2:d3:ac:f9:65:a8:32:52:1d:62:d8:
68:f7:e3:28:72:b1:13:a7:4a:19:18:e9:5e:39:3f:
1b:69:65:0d:85:2e:00:10:fe:cb:10:f0:30:48:0e:
2d:c0:8a:0e:82:f3:74:5c:cb:5b:a4:0c:d8:73:72:
87:98:f1:6f:98:cf:db:7c:0f:c1:a0:6a:62:22:33:
db:46:8b:a8:65:9f:1f:2b:8d:86:49:45:dc:55:22:
dd:3f:a3:45:e9:73:81:93:26:42:42:01:0d:1b:c8:
dc:a8:1e:7f:b6:af:3b:34:26:c8:73:3e:43:6d:47:
8a:91:5e:28:03:f5:3b:42:59:8d:45:be:b6:a8:82:
e8:ef:4c:5c:4a:71:8d:2c:41:67:fa:94:1e:22:4d:
12:d3:ae:9d:6a:04:c8:d4:48:49:3a:66:ef:28:c5:
8f:83:61:89:df:fd:67:d7:de:bc:bd:d0:0d:b6:2a:
da:01:e3:c2:68:76:17:44:41:f4:6c:cc:fd:f5:ca:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:AF:3F:E8:41:58:65:1A:6B:98:FD:D1:1D:1A:CA:3E:C5:7D:8D
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:04:40:5f:b4:b4:fb:01:be:e2:06:21:5d:03:2e:27:de:
4d:8f:9a:6f:0d:16:06:79:66:89:68:17:2c:15:8a:1d:35:5e:
a4:1f:3b:82:f5:6f:08:f3:15:2f:b4:1e:ba:1c:35:8f:be:0f:
81:06:98:65:b2:65:6e:ab:b9:f1:2d:61:9c:3e:09:04:8d:3a:
e7:d0:29:d1:08:cc:25:6c:bb:32:a7:4d:c3:07:f7:8d:00:ee:
d8:43:03:51:35:c2:a8:0f:93:1c:78:33:af:b6:46:98:c6:0a:
e5:e5:51:69:20:bc:c0:8d:f5:cc:ab:88:7a:36:d4:63:fe:7c:
c6:a5:46:26:51:00:9c:4e:c9:63:67:6a:3d:3e:38:27:4c:88:
72:0d:a2:9f:dc:20:41:8e:51:af:14:27:fe:50:60:23:5f:39:
45:36:b2:33:dd:61:69:46:63:b6:1d:99:94:45:71:d8:a9:cb:
7d:ed:70:17:40:8d:f2:63:68:cc:2a:b4:02:cb:11:cb:c5:bd:
d0:3d:60:39:bb:ff:7e:05:30:2e:fe:26:6b:96:3c:25:01:5e:
93:b2:03:cc:e6:81:95:27:50:b3:6f:a9:2c:09:20:c6:d9:7e:
70:be:a5:10:70:0d:0f:1b:89:37:e3:eb:09:27:88:88:21:16:
d4:2d:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:41 2025 by rpki-client