Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: v3izmJS0LYgFe+1f0mMru20THQUdESIs3QNpxXrwHz4=
Subject key identifier: B9:C5:22:81:02:35:63:C4:5F:8F:FF:DC:3C:EA:49:B7:9F:0D:6D:63
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 0194BC3C929AF94ED925B3DD5C8B3B37789F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 0293
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: BGQkg1a8SaqtTne/z3aKV0sQsYxSUq7hsENLWWrxGpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:9a:f9:4e:d9:25:b3:dd:5c:8b:3b:37:78:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=b9c52281023563c45f8fffdc3cea49b79f0d6d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:c9:17:04:7f:34:3e:a1:29:a6:4e:37:11:
0d:54:20:4a:b9:ae:2b:43:d0:f0:7a:0d:c2:b9:1b:
67:4f:af:55:cc:4f:b9:1e:ee:19:ea:2d:b4:dc:b8:
03:8c:96:c8:22:59:0f:42:93:87:fb:47:1a:d9:48:
36:27:88:ab:ad:43:74:37:0f:72:bf:a3:34:9a:9f:
5f:af:a4:29:4f:75:74:49:94:4d:8b:d0:45:33:14:
34:49:33:04:5f:94:13:a1:e2:ee:76:1f:e0:78:e3:
f0:e6:55:7f:32:0b:ff:99:ca:5b:4f:fa:53:c1:b0:
e3:a6:46:54:c5:c8:51:cc:1a:6d:ba:d8:f3:b6:79:
a7:bb:e7:d2:f2:10:4e:8c:4b:96:90:b2:1b:b1:02:
ba:db:f3:4e:a5:cf:1b:48:02:10:f5:c9:60:df:79:
ad:bd:6a:ff:d2:e9:b2:11:21:9d:bf:39:aa:87:b4:
44:58:41:6b:bf:05:ab:40:0c:8e:10:43:79:a7:37:
2c:c1:0f:a4:40:7f:4e:94:de:6b:45:0f:ce:04:27:
d9:b5:b1:00:21:37:27:a2:81:f7:a8:c9:4e:c9:b3:
b8:34:6c:09:17:93:ca:ef:7e:d3:ac:97:79:0b:fa:
8e:bf:e2:f6:75:9b:91:1a:4e:7d:33:61:ef:9d:b0:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:22:81:02:35:63:C4:5F:8F:FF:DC:3C:EA:49:B7:9F:0D:6D:63
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f7:05:28:a7:e3:9a:c2:39:f8:c1:81:c0:d9:75:68:e3:43:
70:0f:20:08:69:21:cf:f7:d5:5a:a3:e5:a3:db:f7:c1:cd:d4:
e1:3a:3f:d4:90:f9:23:e4:9e:ec:80:40:68:8c:4b:77:3f:8d:
1f:c8:25:8c:eb:85:40:db:b7:4a:a7:a1:93:43:c0:f0:7c:5e:
37:bb:be:8b:20:4c:23:13:31:83:c3:6b:f1:d3:cd:11:80:c8:
75:0c:43:8d:b9:52:56:84:d5:76:c9:37:e6:92:29:55:42:1f:
3d:ce:f6:90:38:9d:bb:35:52:84:83:67:b7:7d:02:58:ac:cf:
6e:1a:c3:07:db:bc:d5:b0:23:0b:a9:03:19:fe:94:80:d9:c2:
aa:e3:fa:aa:b8:7c:55:31:94:7a:ab:72:96:d3:cb:94:4b:6f:
5b:e1:b5:de:29:ab:0c:c4:74:47:ea:a0:36:86:84:6e:3d:ab:
0c:78:40:ed:c3:b9:7f:81:77:d4:b8:f1:1c:38:f4:b9:c2:eb:
a8:c6:c8:97:fe:d4:a3:d0:c9:50:14:f1:3c:3f:5a:25:7c:b6:
4d:c3:a6:4a:94:0f:6f:1e:03:a9:4a:d5:cb:0a:20:5b:77:14:
53:79:4d:84:8f:34:ed:cd:ee:52:fc:d1:f2:98:d8:f9:20:5e:
62:cc:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:20:31 2025 by rpki-client