Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: O09MhNGMg6EM/obOi1eMNtS1qtn1eIw9G64NnbyaVy4=
Subject key identifier: 70:D7:CE:84:81:03:2B:BD:BA:35:BF:AB:A7:24:0D:D8:E2:F5:F7:98
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 0194BD17A5E6E5BA70384FAA0DE037597C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0B7D
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: zp/jOj+8OayxcCAqYii9N4/dmqAjc6Tb+L5Xan2zqak=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a5:e6:e5:ba:70:38:4f:aa:0d:e0:37:59:7c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=70d7ce8481032bbdba35bfaba7240dd8e2f5f798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:18:83:0c:ef:3f:c9:83:c1:9a:b9:c3:4e:
24:80:64:dd:70:d2:38:4e:56:d9:6a:1b:cc:c0:8b:
f6:48:30:e9:6b:89:52:6b:e3:47:c9:0a:4c:4c:0c:
c5:05:f4:72:f6:ff:b3:df:7c:68:a3:4f:46:34:f4:
e9:53:86:2f:d5:20:20:6c:5d:6a:c8:90:39:d4:db:
9d:d7:74:0f:d3:69:bd:ab:4b:0f:05:ca:f1:1f:9d:
c5:79:eb:9b:bb:1a:af:43:7e:e9:94:09:59:f2:c8:
d2:80:a3:67:38:75:f2:db:33:e5:70:20:56:07:56:
db:6e:70:7c:94:2d:5d:54:18:0e:66:6b:f2:07:a0:
d6:7c:fb:af:24:1b:ee:37:b7:b6:7c:55:9f:f7:5a:
26:ab:20:c3:91:41:e8:00:e3:72:63:74:34:15:d6:
22:42:e5:52:a3:68:5e:53:96:73:5d:0f:f4:c8:63:
a2:0a:1b:d7:c2:9e:42:95:cb:4b:3d:fb:a0:97:c7:
90:38:85:4a:2f:e3:80:63:a7:16:50:15:63:17:56:
5c:25:f2:cb:39:e2:7b:17:2b:c8:86:ff:d1:c5:97:
d2:83:a8:21:2a:eb:87:07:1b:ad:2b:b4:a6:57:ad:
c6:06:d4:dd:e4:61:13:b0:34:3a:eb:80:f2:8a:c1:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D7:CE:84:81:03:2B:BD:BA:35:BF:AB:A7:24:0D:D8:E2:F5:F7:98
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:8d:c9:b9:23:e2:54:1a:8a:bf:e1:ed:cb:f2:76:89:67:
09:18:34:51:72:52:16:ea:06:81:79:f4:9a:b3:56:5c:15:6b:
4c:7f:37:14:5f:71:86:41:f9:f0:2c:3f:4e:10:a8:57:62:1b:
c0:3f:49:fb:11:b3:64:c1:62:de:09:08:b1:85:fa:ab:e6:6d:
31:b8:a9:49:2d:93:c5:4b:eb:f6:48:3c:34:c1:69:ef:eb:49:
4b:50:01:b7:9c:3b:73:23:a6:ea:a6:13:30:78:45:8c:4e:21:
58:7b:47:6a:34:7c:05:0f:16:f4:e1:80:ea:74:d2:de:11:2b:
59:d1:99:b4:c6:6d:89:dc:dd:97:04:d1:df:18:db:3a:13:b1:
e7:f9:07:69:e1:74:5d:d1:63:52:7b:f0:54:ca:c6:20:1b:d2:
3d:17:62:52:b6:dd:67:e7:9c:8d:cd:a2:1a:4b:52:a7:40:21:
77:8b:b4:e4:b3:39:20:2a:04:29:5c:12:1e:c2:0b:ed:e6:06:
c3:04:bc:96:b8:b4:60:3c:fa:45:6c:bb:c4:27:c7:48:0e:72:
25:59:f9:1c:40:b5:9e:c8:22:ec:1e:97:20:f2:40:91:bb:b6:
40:93:5d:1e:65:c7:6b:a0:5b:25:18:97:11:fe:19:71:ac:d4:
5c:06:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:27 2025 by rpki-client