Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: o3aLl9qcWyUOubFzyoP6dFGLclKgXwW4nVje9uVVVKY=
Subject key identifier: 2B:86:B6:E0:49:D7:FE:E8:9B:EB:72:AC:E3:F3:6D:25:34:73:3E:65
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 0194BC3C6ECCFF1B0DF07B287A6AEF8BD35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: zSs7ZKv7+ht8HAgV324fk0mKodFzZJKs8PUltag2RYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:cc:ff:1b:0d:f0:7b:28:7a:6a:ef:8b:d3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=2b86b6e049d7fee89beb72ace3f36d2534733e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:20:ec:ad:4b:75:49:0c:64:b9:6d:13:76:
4d:2c:f5:6a:05:31:ed:f9:25:49:b4:bc:e1:d6:68:
80:8a:9f:7e:62:fc:3c:4e:e8:79:73:52:c7:ba:3e:
ec:ea:84:c3:f7:d4:eb:22:ab:73:78:33:6e:a9:3d:
f2:a9:90:92:f5:41:39:1d:eb:8a:5a:de:b3:7c:31:
48:df:63:1f:11:7b:73:81:f2:4d:0d:25:54:45:73:
e9:ab:55:ca:aa:68:26:36:1d:c3:da:57:5a:ef:91:
5a:28:46:78:45:25:09:5b:ca:57:b5:15:b3:07:03:
2f:e3:b1:f0:43:d3:dd:ba:14:2d:14:3e:04:b9:b6:
dd:f0:c6:ed:cd:a5:eb:fb:54:d3:f6:ff:19:44:4f:
f7:f5:64:1a:06:7b:eb:6a:4c:42:50:33:38:06:fc:
9a:fb:7b:6b:3f:09:fd:da:4c:41:69:8f:3d:fd:c9:
4a:c2:6a:31:65:35:f8:f3:27:a8:5a:85:f3:b2:39:
67:e3:ec:69:be:9c:33:eb:67:71:45:3d:d0:99:d4:
f4:26:17:3c:ee:ec:03:80:25:0b:25:ab:81:6e:97:
4b:0c:bc:9d:0a:d8:60:8c:48:bd:25:aa:1f:68:31:
06:c1:12:d3:77:1b:25:c1:ad:36:d2:9f:9d:4c:2f:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:B6:E0:49:D7:FE:E8:9B:EB:72:AC:E3:F3:6D:25:34:73:3E:65
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:27:a7:a2:a9:20:17:d8:ff:65:49:89:00:63:ae:7a:55:34:
c4:71:e3:7d:ec:41:0c:2d:09:98:34:40:38:6d:5a:25:da:be:
ad:b4:20:5c:ee:19:68:91:fb:58:13:7b:de:8b:be:83:7c:7d:
6a:33:31:cc:32:73:1d:ad:ff:71:20:b7:49:66:e4:6c:94:8f:
09:cb:3a:29:d3:59:ea:51:50:2e:cc:50:b4:37:de:f7:14:9b:
8d:be:ec:5b:46:ae:05:35:80:35:65:aa:17:62:ca:8e:55:d2:
86:7a:19:e0:ee:e7:9d:9a:13:ba:90:9c:1e:eb:57:ae:05:f9:
b6:57:b2:ab:df:a9:85:ba:72:01:6a:af:e6:0b:2a:8a:24:17:
41:e6:3c:01:79:a4:40:ed:d2:ff:06:32:f9:bc:ab:42:e5:4e:
92:d5:67:19:f3:14:ac:a9:00:cf:6b:16:63:e2:7a:65:02:e5:
4c:16:42:e3:7e:8b:50:ee:7c:6d:ec:29:53:0a:f8:f4:f3:13:
20:a8:23:51:68:95:7c:49:e7:d4:39:11:63:4e:2d:23:63:cd:
62:48:00:3d:b5:02:5d:fa:aa:77:7a:c7:21:c8:64:f1:2e:e4:
d0:3a:56:76:d1:a3:91:14:08:bb:72:5b:e8:f9:7c:bf:1b:e2:
b7:05:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:41:50 2025 by rpki-client