Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: YC7DICsJ+sQRKanJtKUUgEnwnNW0X43KBJJt6iza0rU=
Subject key identifier: 64:A8:4F:B3:15:4F:15:47:A7:5C:F7:18:0E:6C:03:95:7B:A1:0B:87
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 0194BC731D314BBD4F42AF194CC017E6590B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0B73
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
3: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: GNDF+r2blYvqHT9ZEzrHBOiZ9Yb5QLbpJILPGEAOkZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1d:31:4b:bd:4f:42:af:19:4c:c0:17:e6:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=64a84fb3154f1547a75cf7180e6c03957ba10b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:1c:79:e8:51:f1:26:5c:41:2c:54:c0:55:
37:a5:47:9b:09:4f:bd:63:93:89:31:c4:a2:10:16:
37:e8:a2:31:83:ee:f5:f0:61:76:f7:ad:a1:54:10:
fa:94:0d:c4:e2:45:04:c6:7e:f6:fd:e4:2f:eb:b0:
85:11:49:d6:8a:65:b4:fb:c5:53:0e:76:d1:88:2b:
ed:89:73:e9:4f:da:95:7c:bd:d1:39:76:b0:63:a1:
bb:c9:38:ca:11:25:82:59:9b:a9:a3:57:55:14:22:
8c:68:f9:51:eb:13:07:81:2c:87:62:7c:32:51:69:
74:20:31:79:c5:a5:c0:08:28:6b:71:e8:6e:89:98:
06:e1:c3:de:f3:63:43:fd:e6:5b:6c:bb:96:dc:bd:
05:9e:3c:00:96:bb:d2:c2:06:f1:67:7f:eb:9c:55:
64:2f:51:e4:bf:5a:ed:bf:d3:06:34:dc:0a:f3:ed:
40:51:f0:43:ac:22:67:f0:40:65:1c:57:57:ba:8a:
f3:96:5e:61:98:24:13:ee:19:d5:5b:af:8f:3f:c7:
12:c4:44:47:61:0b:19:a1:c1:da:b7:46:69:cc:17:
f0:b8:8e:5f:0b:30:09:5e:8f:bf:bb:d3:ae:6d:38:
d9:0c:1a:86:c0:3f:81:d8:ce:48:ff:2a:fd:9c:47:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:4F:B3:15:4F:15:47:A7:5C:F7:18:0E:6C:03:95:7B:A1:0B:87
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:22:f0:1d:7d:33:60:24:7c:1b:b0:8b:b6:d2:e7:e5:20:24:
e4:4c:68:0d:d2:50:62:83:df:44:03:84:e4:a4:05:69:41:42:
8b:8b:ac:7c:d5:1c:95:c0:97:13:88:18:ba:ea:d5:5d:c3:1c:
4d:05:55:f2:92:07:48:69:99:62:19:0b:d5:9c:3b:d0:f3:89:
4d:3f:28:54:7b:ac:d5:b8:35:e0:d7:3a:bc:7f:a1:4e:65:e0:
38:40:9a:89:a3:28:03:c9:f9:c8:e5:22:88:48:33:63:bb:9e:
1d:21:4a:3f:0d:e7:07:58:c8:de:97:08:5b:4b:72:f3:ee:bc:
fe:f6:5a:e8:5b:45:ca:ba:93:0a:c9:d1:f7:b0:90:fe:bf:f0:
91:ca:51:0f:c9:5b:a4:34:89:90:8c:15:c2:06:6f:f9:41:53:
19:3b:24:f9:1c:9b:a1:3b:18:2d:42:33:18:19:ed:f4:07:04:
a2:4a:f2:a7:21:cb:3f:90:29:00:8a:e3:8f:90:26:80:fd:d6:
63:df:8e:af:9b:23:07:75:71:95:57:4b:f2:5d:56:06:e3:0f:
a4:08:78:ef:7e:90:7f:2c:f2:0b:d7:ba:b8:94:80:a9:f5:68:
4e:df:31:e2:bf:fb:e3:1d:58:6a:e6:16:60:b3:0f:51:bb:5b:
fd:36:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:50 2025 by rpki-client