Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: D1y1oRkZaE1jCetagvjbgEYYJIy5IhMddhNhpC9RE04=
Subject key identifier: 71:45:FC:36:EF:93:B5:36:AF:EF:8A:A5:39:45:40:11:30:35:2C:A8
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 0194BC3C9282D63122E69A1C84B427356D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 13AB
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: ud59WHRpYPGbb2DhSgsiXqJl6P4pR0bxWaERlnoMJpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:82:d6:31:22:e6:9a:1c:84:b4:27:35:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=7145fc36ef93b536afef8aa53945401130352ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:10:07:2a:74:8f:d5:58:8e:a4:36:fc:a2:
6b:97:4c:f0:99:d8:d7:ce:5e:36:43:f5:b3:46:7a:
0c:8c:9e:18:94:14:d4:ff:f2:3f:18:42:41:af:98:
8f:1f:5b:c5:10:24:fd:63:51:6e:47:69:88:97:26:
40:b5:29:9a:2f:58:f2:c5:ce:6b:d2:8b:60:09:38:
ed:d0:1e:8a:ec:ef:a8:64:f9:ce:51:70:18:92:81:
e4:78:92:9a:0e:fd:63:65:52:d2:5d:e4:60:23:d6:
c3:d8:30:90:f6:65:1f:25:6d:7c:f2:ba:70:04:77:
fb:d1:b3:c1:bf:50:45:e4:9a:3f:ac:dc:80:cb:b0:
b9:bf:e7:8d:a6:67:1d:21:f6:85:72:85:02:27:28:
3b:36:3b:b8:74:1b:55:bc:aa:46:72:80:a5:0a:90:
5f:04:74:19:3e:47:98:43:e5:63:d2:21:e7:6d:9e:
07:03:0b:0f:9f:6c:6d:c4:18:42:e3:51:f0:13:ef:
2f:29:75:48:f2:7b:b3:50:b5:30:70:a4:db:52:2b:
92:e5:a5:dd:f5:ab:58:8b:72:86:7e:24:03:ec:4f:
5e:7f:47:f2:e0:e9:57:f8:90:df:12:f1:ef:b2:e1:
7f:bc:62:96:89:dd:cd:41:61:17:48:eb:11:9b:d1:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:FC:36:EF:93:B5:36:AF:EF:8A:A5:39:45:40:11:30:35:2C:A8
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c3:5f:5f:37:e8:a4:6b:eb:68:4a:f4:80:e2:dd:e1:4f:4d:
c7:f6:42:c4:47:bc:e7:26:b2:0e:48:e1:ae:02:fc:22:17:f4:
16:0c:52:be:a9:f1:03:a2:26:6f:68:e4:91:c2:f0:7f:3f:c3:
bc:14:f4:4d:bb:a7:25:46:54:50:3f:58:59:9d:39:30:92:d0:
62:86:58:36:81:39:e6:58:fc:90:03:e8:46:48:05:48:f3:d4:
a6:c7:5d:58:77:2c:c5:ef:df:3e:6a:18:98:9f:85:26:0d:ab:
bc:e8:3c:69:64:27:aa:f0:44:0e:68:13:30:46:30:f4:af:1e:
a0:b3:c3:c2:38:04:df:64:e9:95:cc:13:89:46:eb:5f:69:33:
19:fe:70:51:07:37:31:ce:b1:f8:9a:62:38:62:da:8d:d1:0c:
84:09:d9:f2:dd:69:7d:83:a9:24:c1:58:d3:aa:96:21:e7:25:
bd:c2:2b:49:5e:13:f9:49:30:27:ef:1f:01:a2:fa:1d:f1:06:
c6:bd:49:29:27:a7:d0:70:bf:79:55:82:44:12:ad:18:56:b6:
f3:37:5a:42:0d:34:6b:c7:9d:4c:f6:6b:28:6d:02:a9:fa:d1:
77:57:33:f4:1f:c4:18:fa:2d:a5:71:1b:dd:36:2b:37:68:bb:
da:af:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:35 2025 by rpki-client