Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: KH9I+IrxmCeS/1L1ZhgonSp1/TYAg45A6wC8t8mp5nU=
Subject key identifier: 9D:BB:52:5A:59:50:8E:13:62:4A:F1:7F:F1:38:77:D9:85:78:E5:27
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 0194BC7319796C3AC50775AAC085559E4E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: VfE8o3lXQm0bm6tqS2KdWZz9Jr2vIbjVt4PGRD48P6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:79:6c:3a:c5:07:75:aa:c0:85:55:9e:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=9dbb525a59508e13624af17ff13877d98578e527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:b9:49:11:1f:42:53:b3:b2:09:b8:dc:ed:
55:a3:0e:dd:22:9f:5c:d8:6d:8f:cd:97:06:87:3e:
96:10:2a:81:75:ff:43:f0:c7:52:80:56:72:9c:bd:
52:8a:a1:ff:3d:9e:e6:73:13:47:5f:e6:12:8b:bf:
fd:03:81:84:46:72:0d:81:9b:93:19:e2:f7:cf:49:
9e:83:52:7a:af:42:10:27:a7:d0:cb:4f:f6:7d:4c:
ea:92:6b:93:7a:ea:17:12:9f:c9:41:2a:92:d1:b8:
86:9e:dd:22:af:a8:ed:bc:5e:38:b4:68:2c:84:80:
8d:5c:e8:95:dd:8d:5a:b5:a2:e9:ff:7d:21:67:d9:
89:9b:03:8b:b0:0d:47:2f:9c:89:4a:16:d5:77:48:
84:7e:e0:47:34:ea:cf:44:97:7a:4d:1b:3f:93:25:
59:e8:e9:c0:17:fd:7e:3e:99:d1:58:b3:f0:35:31:
ae:a3:66:d2:25:cc:d3:ec:e0:c0:4a:eb:7d:eb:1b:
39:bb:52:6f:ea:10:e0:5d:ee:78:c0:7e:d3:0e:30:
6d:8b:1d:ef:12:84:b9:b2:80:44:9a:2d:5c:77:af:
ac:3e:a7:14:2d:dc:a7:f2:a8:52:b5:db:a6:8d:a8:
03:23:b6:76:8b:f2:0d:36:15:9f:9e:ff:0d:03:13:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:52:5A:59:50:8E:13:62:4A:F1:7F:F1:38:77:D9:85:78:E5:27
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7a:6c:63:a8:55:16:ca:fc:af:bd:aa:2c:0b:b5:39:b0:85:
02:ed:c8:7f:4a:59:18:59:62:6b:44:15:07:46:5d:27:86:62:
55:88:f1:68:d5:1d:f4:cb:64:bb:66:5b:2f:fe:ed:99:b0:47:
f9:c8:89:ef:c5:b4:98:db:cc:24:9d:b6:ca:09:66:71:07:9d:
8c:a9:bc:4c:21:0e:45:f7:fd:a4:57:17:9d:1e:f7:f3:61:66:
72:74:eb:2f:5f:27:b4:11:97:bd:90:33:6b:87:b2:4b:61:af:
96:ad:49:06:ce:2c:e1:e8:7f:d0:58:fd:c7:c6:5c:12:c4:25:
d7:1f:21:c4:6b:db:4a:8a:7b:4e:15:94:45:75:dc:ad:1c:9b:
2f:4c:70:75:42:47:05:d5:fb:3b:b8:de:e5:bb:6e:b1:31:3f:
59:72:3e:f9:fd:dc:6b:8f:ad:3c:39:a6:9c:35:b3:47:cd:a0:
de:82:50:2b:af:96:fa:9f:70:2f:95:46:91:fe:95:cc:a4:12:
86:38:3c:59:9b:2c:57:64:da:bb:e4:07:ce:50:0d:be:c6:d3:
a3:89:ba:db:5a:fb:c6:37:42:c4:9c:a7:b4:dd:25:ab:cc:4b:
24:ba:a4:9a:ae:e3:9f:ee:45:47:6f:97:3b:62:9c:d6:58:59:
2c:7e:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:20 2025 by rpki-client