Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: K8m1bs+cySOU1F6xUQmey4PNM2dTHwHnmEPAmyO++4c=
Subject key identifier: 20:F1:A2:BF:7E:B8:21:FA:51:8C:A8:6F:E9:F2:4C:47:57:C4:9F:1C
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 0194BBCED2641B4768C882FE873B403D8FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: PscyVLzJ4kVABdaSVplya/pAUYChBkW78p6XShkQAiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d2:64:1b:47:68:c8:82:fe:87:3b:40:3d:8f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=20f1a2bf7eb821fa518ca86fe9f24c4757c49f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5a:35:9b:24:51:a2:f0:f0:18:c1:97:48:8b:
48:22:7d:86:b4:b1:7e:95:15:af:da:9e:3b:26:1f:
52:01:cc:9b:8d:0b:d6:7c:62:b4:28:e4:e2:20:e8:
ff:65:bd:77:08:55:25:eb:1e:d5:0d:72:38:6e:90:
7a:82:37:94:0d:f0:9f:08:35:50:22:bc:f2:ad:e0:
6c:f6:86:8a:a3:6c:08:bc:5e:d8:08:d8:a5:aa:24:
28:bc:8f:69:13:3e:2e:a0:34:aa:5a:50:96:83:c9:
3d:f6:b2:1c:51:8b:0f:62:90:8c:a1:10:a9:cd:88:
a7:4a:9f:2f:5e:c2:2b:95:d0:6f:c1:5b:39:10:d6:
48:cf:e1:cc:58:48:fa:b6:4d:8b:66:48:41:e2:a3:
bb:6a:ae:ac:43:16:f4:71:42:17:01:f4:a0:48:04:
6c:53:68:81:5d:91:89:57:cc:78:a9:b8:e2:c4:eb:
a5:74:55:fc:bc:f7:f0:31:6c:e1:63:1f:f4:10:19:
6d:e0:fa:d7:a9:8d:df:7f:fb:8f:d9:6a:14:4d:5e:
55:5c:50:11:0c:87:1d:e5:55:e0:41:e6:13:7c:8d:
d9:bc:f6:f1:c1:9d:e7:5c:af:d2:3a:04:57:fb:c6:
bc:5a:77:9e:e5:13:f2:33:1f:bf:c0:10:de:ca:bd:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:A2:BF:7E:B8:21:FA:51:8C:A8:6F:E9:F2:4C:47:57:C4:9F:1C
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cb:fd:ac:9e:ec:0d:fb:8a:60:16:16:07:91:b2:c4:5f:d0:
bd:d0:0c:8c:56:7b:e5:03:14:92:7f:52:d2:c6:88:48:fc:91:
38:08:1f:17:a2:81:22:ae:32:4f:5d:b5:b3:c5:75:4d:90:46:
8b:7f:0c:bc:35:96:e6:80:97:1d:af:bd:9c:94:01:b3:ab:af:
ee:fd:8d:b4:80:6e:ee:70:6b:ea:ea:2d:be:51:6c:6a:d6:6f:
2d:d0:71:f7:29:e9:5d:01:7c:3d:9b:f9:ea:ca:67:b7:3b:25:
4f:74:1b:87:73:21:cd:bc:b1:43:ba:2b:11:f5:5d:52:7f:b6:
e3:4e:0e:83:42:38:0d:04:72:d6:8d:ac:46:dc:14:14:4f:49:
fc:83:32:59:e4:b7:1d:b7:cf:50:7f:d5:84:e1:f7:5b:0f:d0:
58:a1:89:8d:11:8f:e9:41:07:c8:09:d7:31:be:4b:34:2d:48:
17:23:77:f7:9b:f6:ae:bb:f2:3a:f9:04:cc:0d:87:fa:8e:0d:
b5:fc:e8:f4:9e:bf:09:c5:0d:fc:96:20:38:bf:2a:34:ad:3e:
cb:52:d0:66:2d:c1:c7:ee:3e:26:74:4f:78:5d:46:15:bb:60:
b2:18:0c:4c:2c:73:02:75:d7:7b:55:0b:c9:c0:e1:27:77:36:
49:8f:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client