Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: HM1mCOIe/FHbOhlxpR7eNU2BuaX/pXmrsQWzTNxbb4o=
Subject key identifier: 77:56:69:97:52:6F:3F:A1:9C:88:96:15:9D:E9:C6:D1:FF:85:2A:3A
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 0194BD4E95FCD0E65FCA850146882902E9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: dN1vRCcHRSnbvQADNvtYm9Gw-TM.roa (hash: D+OiPGlBYkixwnt9NBRJj4rRA3Pw0fqCQSZtwrK+kFU=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: PWtHA78OTygKP04Xw1K49apYZ6NOcq8MC8D1yCwIQ9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:95:fc:d0:e6:5f:ca:85:01:46:88:29:02:e9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=77566997526f3fa19c8896159de9c6d1ff852a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:80:41:fd:67:b1:42:15:b1:c5:a2:e8:f6:
47:2b:d4:7a:d0:73:43:ed:f1:ad:0e:ca:78:87:b6:
a5:95:66:35:c3:4a:41:c5:dc:e5:b5:ce:37:4a:c2:
af:16:69:53:a4:07:3e:e3:33:81:12:4d:9b:9b:57:
35:ff:e1:71:88:0f:f4:7b:f9:3d:d7:87:43:87:a3:
b6:d8:56:f4:22:b9:d5:d1:7b:b0:17:c5:84:6b:d0:
f1:fd:8b:5f:a1:60:c3:c2:13:96:e3:26:bf:ed:1d:
68:b1:f8:52:8d:65:75:b4:c5:1a:be:9c:ea:97:52:
aa:67:5a:93:9e:c7:38:8d:bf:f0:cf:ee:53:76:5d:
56:09:3e:33:03:6f:9a:40:7f:55:af:6c:2e:9d:03:
7a:5d:0b:da:40:fa:be:8a:c6:f3:73:77:47:82:fc:
d1:7f:d3:03:31:2a:e6:4e:a6:80:62:32:7e:29:c1:
61:15:27:dc:ec:55:c4:5c:bb:d5:34:ce:24:6e:77:
5a:a0:3c:d6:0e:2f:b6:70:de:11:20:df:53:7c:82:
da:75:d7:43:e3:a5:9f:41:db:fb:0f:3e:2a:38:c1:
1d:e3:ad:68:b5:fb:1d:23:b6:48:dd:e3:b4:8a:c9:
4a:45:22:ec:a5:7f:63:bc:d1:3f:dc:7d:13:60:a5:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:69:97:52:6F:3F:A1:9C:88:96:15:9D:E9:C6:D1:FF:85:2A:3A
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:89:94:41:fa:b2:43:7a:a9:94:03:c7:9c:0c:63:10:fa:bc:
42:56:e1:56:33:f2:bd:fc:ca:99:68:e6:d8:72:4a:25:b3:24:
80:d4:a5:20:e1:a8:6c:08:ff:de:a0:42:00:63:0d:4b:f0:a3:
8b:b9:9d:c6:de:67:97:61:c5:04:7d:f0:0c:c0:b8:e6:3e:c4:
71:8e:b0:c0:0e:51:f7:b3:6e:0f:32:30:f2:0a:41:0c:2c:3b:
1e:d9:15:6d:86:0f:61:fa:76:6a:a9:1f:7d:c5:2d:64:58:b2:
8b:3b:5c:17:da:6a:ef:9f:39:f3:4e:c7:b8:56:f8:ce:19:24:
a6:ab:9e:89:aa:08:be:ae:5e:04:ae:44:2c:08:15:54:9a:4e:
6b:47:6e:8e:69:60:a3:c9:21:46:88:34:f6:e0:52:6d:cc:22:
f2:d9:f9:74:5e:b1:a2:7a:bc:e0:91:74:a3:d9:e6:01:5e:3f:
fc:a1:e7:b4:71:f3:ba:7b:d4:a9:b9:50:7d:ee:a0:2e:0a:38:
16:4d:24:4d:54:b2:e8:89:a3:32:c2:4e:a9:fb:8c:3b:f3:d6:
ec:74:bb:98:25:92:46:7b:fb:53:e1:16:0d:cb:d8:b8:77:89:
7d:23:58:d2:c9:46:c5:9d:ed:22:d5:6d:1f:4e:49:c5:81:96:
7e:16:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:33 2025 by rpki-client