Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: yr14EfpWd0TCryV3+T22uMDXsqIpD+dxRkVbKgz087w=
Subject key identifier: 6D:CD:3A:BB:62:83:BE:AB:FC:2A:1A:6A:7D:59:58:4B:AA:62:09:E3
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 0194BCAA4FE8AF9EFDD028C202C2AE267DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:01:05 +0000
Manifest this update: Fri 31 Jan 2025 14:01:05 +0000
Manifest next update: Sat 01 Feb 2025 14:01:05 +0000
Files and hashes: 1: BugMD0rfZTTzRv9e3Yc9s1C5qM8.roa (hash: jE01pMhWyEqiVohSbXJF+yf78b2Sf6VXp+Appd2gHuI=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: hAz5zbKqdl9Z4Qyz44wTY8PeJcD+ch7hBbTSvCdoZPk=)
3: _1rHHFIhvvb4H2GGBv9RDV7OFzo.roa (hash: ODNNLSo5C2C5zLz79VjHYIX9sjOveSMDElEuw+M5H2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:4f:e8:af:9e:fd:d0:28:c2:02:c2:ae:26:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jan 31 14:01:05 2025 GMT
Not After : Feb 1 14:01:05 2025 GMT
Subject: CN=6dcd3abb6283beabfc2a1a6a7d59584baa6209e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:71:47:af:3e:9e:dd:fc:60:b0:94:79:64:
3f:37:48:7d:ae:77:4e:ca:7d:fe:d8:97:d0:92:49:
2c:db:1f:c3:9f:07:e5:08:03:6d:ba:bd:59:27:2c:
b3:7b:02:0d:79:68:bd:0a:62:81:9d:f3:37:9e:5c:
1f:95:bf:97:81:62:87:b7:6a:41:72:5f:a2:e1:67:
2d:a4:8c:b1:ca:47:43:3f:7a:c8:3c:c3:08:97:82:
c8:0f:27:f0:01:19:2f:16:e3:76:21:d3:a8:4c:32:
f6:38:e6:0a:58:04:7f:fd:f9:20:ab:10:1e:ed:ac:
8a:12:b2:00:d5:7f:d5:2d:53:f5:99:77:07:f5:f4:
1e:11:25:d8:30:62:20:9e:8d:65:cc:c1:6a:03:81:
cb:3f:16:38:4c:d4:a8:f7:13:0c:85:59:6e:40:b5:
76:31:0f:4e:c8:d6:df:a4:49:35:e2:4b:c7:94:03:
05:16:05:5e:26:8b:07:f3:a1:0c:6c:6e:21:7e:47:
d4:10:46:d6:c8:60:f6:51:31:3a:b1:a5:6d:32:e2:
72:1d:27:69:cd:8f:5a:7a:54:73:d0:a5:6f:48:c3:
e4:e3:79:fe:19:b7:12:2c:9b:49:6d:80:0a:3c:85:
e0:47:c8:38:69:a0:53:e3:4a:22:18:e1:6a:ab:60:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:3A:BB:62:83:BE:AB:FC:2A:1A:6A:7D:59:58:4B:AA:62:09:E3
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:b6:5c:0f:9f:73:79:ba:62:a5:3d:43:f3:02:37:58:68:
8b:be:e5:2d:62:79:be:5a:85:d9:e0:35:7b:c4:6a:81:45:8f:
43:0e:4f:eb:6f:41:22:e4:6f:d3:17:20:b9:67:1d:4c:bb:dd:
49:15:f8:dc:a5:7f:a6:49:0a:d0:7d:37:46:5c:0f:c4:9e:7c:
65:b5:43:bb:b5:ee:b3:b6:2e:03:e4:f1:bb:d6:97:36:1e:62:
de:8c:4e:46:2c:0b:40:37:4c:bb:40:7a:6d:c9:e5:ef:dc:90:
40:54:f8:38:a5:5d:d5:32:70:b3:84:82:c5:5b:12:c9:bc:b5:
25:24:c2:ac:61:d5:2d:e1:a7:f6:1d:cf:95:84:cd:62:37:57:
7b:67:da:d6:f6:cb:f7:08:2c:e9:cc:cd:75:f8:ea:33:12:9f:
0f:b6:98:f7:30:b5:55:2f:a6:92:a4:33:70:c4:1b:4f:97:3a:
64:c3:9f:44:97:9e:c0:99:b7:8b:d6:b9:7a:98:39:13:01:ae:
02:14:3b:a8:16:89:d6:5e:bd:79:5d:d4:9c:cd:99:af:33:73:
38:fa:85:43:fe:1c:f8:33:f2:0c:3e:4b:32:20:da:72:0a:65:
b7:58:72:9b:da:11:ff:87:0e:48:90:a1:c9:eb:24:17:7d:91:
4d:20:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:25 2025 by rpki-client