Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: Sw3oCDTtJ9/HDYIMB3ldRyA1z6vsgH10zBYTCdbMwCw=
Subject key identifier: 51:54:BD:08:F0:46:0D:57:DD:A4:30:DA:7A:FB:9E:3A:02:66:E4:0D
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0194BD17AE07C7575F381FB15B56404EACB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: A8
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: zxgQ7dgj5wuP4IFEfeb7+drgY05cJ/fQHLVmHLiMk2I=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:07:c7:57:5f:38:1f:b1:5b:56:40:4e:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=5154bd08f0460d57dda430da7afb9e3a0266e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:1d:62:38:8d:d4:a2:6e:08:b2:a7:13:98:
06:07:8a:85:95:f4:69:6c:a0:66:3f:f7:e6:8f:de:
9b:ce:ec:96:48:00:5d:18:17:9a:0a:7a:7c:4c:e5:
40:38:ca:44:1b:b8:c8:a9:0c:70:14:d7:58:02:ce:
0a:80:f8:97:41:f9:e3:58:ff:7c:f0:b5:38:69:9d:
90:46:91:44:d6:14:5e:3f:49:60:15:13:ef:e9:18:
19:34:5e:7d:25:9d:9b:90:e7:ba:88:91:18:3f:95:
a7:ac:a7:cb:55:03:7f:34:c5:83:a5:6d:ac:71:a8:
54:f4:dd:7f:da:2c:fc:a5:e0:9d:91:36:8d:2d:8f:
23:43:10:12:d9:f3:9d:31:6a:0d:2c:12:fc:be:db:
af:89:ed:09:30:ad:84:8f:8c:d8:e7:a3:28:ec:df:
00:a8:a2:1a:ea:75:0e:8e:b6:92:32:bb:ff:f8:c1:
2b:99:37:09:38:dc:9a:4e:58:ab:15:4f:95:01:10:
85:0c:e9:b4:2d:38:55:0d:ae:cf:70:25:7e:3a:06:
18:6b:b9:c1:53:c5:31:92:1f:f3:40:ac:9b:9f:d7:
d3:4d:5d:48:a1:1c:62:8b:95:54:3b:97:cc:d1:48:
9b:23:2d:97:90:51:1d:af:72:1c:ff:a6:38:9e:eb:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:BD:08:F0:46:0D:57:DD:A4:30:DA:7A:FB:9E:3A:02:66:E4:0D
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:10:4c:64:c9:1b:aa:ee:00:5e:b1:c9:e0:d6:4d:e4:d2:7d:
55:9c:71:5e:e3:da:13:f7:4c:94:d0:16:7a:f0:32:00:b2:ea:
f2:ea:b5:03:83:95:83:91:23:0f:6d:d6:7c:9f:65:74:ef:4e:
8d:6c:2e:14:93:39:f0:f3:86:68:dd:b4:25:a5:6a:38:53:b9:
dd:7f:af:7f:57:c1:cf:8d:ab:fb:b6:57:7e:e5:bd:21:02:85:
93:93:23:39:23:1f:3f:26:7a:d2:ca:81:8c:32:df:3b:17:12:
66:e1:80:a7:67:7b:7d:01:5d:3f:c6:e9:b2:33:3c:e5:a8:ed:
09:5c:22:aa:23:f8:38:b0:b1:8a:68:85:a7:c3:86:37:ee:b1:
86:ca:32:14:a7:bc:a3:4c:ed:92:07:f6:04:74:d3:2e:bb:95:
45:2a:a8:ef:aa:dd:53:a8:f8:46:85:f1:f1:2c:67:e8:04:fe:
1f:90:b0:58:d2:b0:fd:f1:11:0d:23:fa:4d:09:f5:05:53:21:
98:a0:1d:e2:41:f8:d2:0c:6d:fc:af:da:e2:53:aa:4a:d7:32:
9f:b5:10:6e:87:fa:fb:88:46:29:7b:69:2c:2e:be:91:2e:96:
a4:48:9d:8d:0d:4b:2e:b9:d2:83:dd:bf:c2:6d:c1:72:4e:5b:
21:af:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:48 2025 by rpki-client