Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier: 9hRlYT7SVw4VwXKje7r3fUy6uY8KJnoT4OeFtk1T69Y=
Subject key identifier: BF:18:82:45:64:01:3F:2A:5B:05:DB:E7:5D:3B:20:60:69:E1:17:C4
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 0194BC051F36AF36093855A7B60AF6B1565A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number: 112A
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=)
2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: Ggb4+hMuv4zBHy4vBSz3BaXlUeWx54P3gg4fglvDGXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1f:36:af:36:09:38:55:a7:b6:0a:f6:b1:56:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=bf18824564013f2a5b05dbe75d3b206069e117c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:69:a0:4f:d7:c1:e1:49:8c:6a:f0:04:74:
06:34:e3:79:75:3c:61:e8:74:8a:88:ce:95:14:28:
f0:33:4b:6f:24:11:66:23:74:19:bb:bd:cd:6e:20:
35:25:0a:02:5a:34:28:67:32:b9:69:4b:97:03:2c:
18:62:f2:f6:54:51:cd:2c:c2:1e:f1:33:22:e0:3b:
95:32:31:d9:d5:19:bb:87:64:8a:fe:f9:ff:ee:2a:
3f:96:5f:06:e8:09:8c:48:9b:74:91:8a:e7:5d:6d:
a0:de:d5:76:22:7e:c4:e1:31:61:52:b7:b5:e6:82:
2c:5a:09:7d:3e:5c:f5:b4:c4:e9:06:63:9f:94:09:
2d:85:72:94:1c:d2:d7:78:a6:4e:1c:43:e0:1b:b1:
67:a4:2d:e8:19:c0:ec:7d:ba:81:d4:ae:80:1b:66:
56:7f:b2:ff:8d:ce:63:f5:54:6f:02:da:19:b1:ed:
86:09:ed:19:22:ed:d5:97:6c:17:b3:c5:ca:37:66:
58:a3:b3:2f:e0:03:2f:2f:98:e2:a4:a1:b9:77:ca:
4d:39:94:0a:8c:d9:e2:a8:61:42:fd:45:68:78:9d:
56:f7:b9:78:67:58:d6:c2:34:2f:74:7c:76:9b:bf:
45:5f:4a:14:92:05:aa:bf:29:5d:b1:7f:e5:dd:42:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:18:82:45:64:01:3F:2A:5B:05:DB:E7:5D:3B:20:60:69:E1:17:C4
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8c:0e:0e:3a:66:7a:21:65:bc:a9:56:e6:de:2f:a1:69:5a:
25:c0:ea:b8:4a:61:65:08:39:59:40:10:9b:fc:36:f0:c4:7f:
de:dc:f8:58:b4:c5:1c:ae:86:03:27:c2:09:a1:d3:ec:31:33:
d1:c7:a9:3d:07:d8:aa:ba:c0:4e:e1:78:f4:d0:96:ae:a2:f0:
16:48:86:67:84:82:e8:37:a5:8f:d4:cc:aa:e9:fa:f6:1f:ff:
b7:2e:a4:e0:90:a5:52:8b:e7:91:b9:51:08:ec:64:c4:57:2c:
90:b4:ac:da:87:c0:cc:fd:8d:53:06:36:25:3d:42:5b:a7:b6:
5a:45:95:ca:bf:41:09:73:13:20:09:a9:e4:ea:a2:0d:4c:cf:
77:11:ad:10:77:f8:e8:eb:20:36:8f:c7:82:0d:a8:08:fc:b3:
34:3a:50:5d:18:c6:d3:65:55:df:bf:f8:14:4f:37:8f:c7:37:
06:20:e9:8b:5c:f0:5b:59:cf:ae:c5:3f:1c:cb:1c:a9:25:40:
01:fe:e9:cb:0b:a5:58:fb:d7:87:1a:10:6d:d5:1a:95:4a:72:
80:a5:b1:6e:56:58:14:91:76:4b:ad:52:7a:b8:a2:67:6c:02:
ae:5f:ac:c3:f6:8e:44:48:1f:2a:26:93:f2:39:2e:4b:49:48:
f3:4e:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:43 2025 by rpki-client