
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier: zbZa97uAqwOj0GkEXnYtuZFtB4nLhcaRsWQOGK4StVw=
Subject key identifier: 0B:BF:E6:74:58:CB:99:C1:CD:85:FD:8E:50:7F:C8:44:2C:F2:99:C2
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 0194BD4E9F8D26E6C4CF7A970568B04FBC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa (hash: ldPOE/oD2Qugz9ughj/HvF9vyb/+1i8BwkvXApLfgvQ=)
2: Z0bxD_dypTvELJHwQ8sfKKr3Yl0.roa (hash: OilYGhipbpMsApciEZvD2e2HegS2pxvaEYjH93aVvgg=)
3: jmbXitTxYDhXxX8Sm7GQvdd6SyE.roa (hash: zVpGoN0B3V4SBK16rXtn4P+ZIoIETx7c6+rwVBVyUtc=)
4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: OHxydVQ1jO7aRF/QKw7Dtv/rzCBEtq13iexqtu2w1OE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:8d:26:e6:c4:cf:7a:97:05:68:b0:4f:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=0bbfe67458cb99c1cd85fd8e507fc8442cf299c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:9d:2c:c4:61:a5:d3:cd:f7:ae:af:72:3c:
02:ab:99:88:10:05:88:19:a5:1f:d4:ec:81:7a:ff:
4c:f2:94:05:c1:6c:e4:65:80:f6:30:ad:7d:40:3a:
de:45:9d:a1:bf:31:92:b9:70:87:b4:46:06:df:6a:
8a:3f:16:cc:e1:e4:74:18:ee:eb:2e:72:b4:ad:45:
a3:ee:5f:5d:79:a7:d5:16:f8:b8:11:3b:c5:0b:de:
5d:63:77:07:50:4d:f2:81:d6:11:d8:77:0d:76:fa:
5b:62:44:c4:59:e0:7d:39:07:8b:f4:7d:c2:62:70:
cd:79:8b:2b:d8:b3:1e:01:ec:44:f3:83:80:5c:c9:
e1:1d:59:c1:23:de:0e:a5:89:01:fc:f4:83:a9:cc:
10:8c:ac:7b:b1:93:ab:42:da:3c:a0:db:99:a5:63:
2d:73:92:1f:3e:bc:70:40:78:c1:22:6e:e8:07:32:
7e:2b:e0:20:44:ce:9a:8c:fc:33:8c:a7:2c:67:fe:
90:c7:48:8d:2e:e7:5d:4c:9f:27:ac:67:f4:75:06:
24:b9:4c:9b:4d:a4:a5:3b:fd:4c:a1:6a:1a:2a:7c:
7c:32:ad:56:5a:2d:94:ea:10:06:f8:b7:28:80:b3:
38:0c:75:73:bd:0f:55:f9:21:0f:8a:0b:3e:0a:fe:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:E6:74:58:CB:99:C1:CD:85:FD:8E:50:7F:C8:44:2C:F2:99:C2
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f7:08:57:59:b7:78:f0:f6:82:ec:07:97:42:a6:db:76:b1:
a8:c2:4c:56:75:39:7f:9b:91:9e:af:46:b2:ea:03:0b:4d:97:
b5:f5:5b:b6:d4:3e:91:79:13:69:06:da:11:43:2d:fe:14:20:
f6:4a:d4:dd:2f:5f:02:46:13:23:86:a0:79:c2:7d:50:17:6f:
91:ac:74:8c:4e:73:36:64:a0:9f:6a:bd:83:c1:a0:6d:a6:2b:
e8:82:77:45:e5:20:ab:51:27:72:fa:c2:cf:25:18:5c:90:9f:
eb:13:1f:74:49:13:0e:e0:c6:9a:b4:1c:d7:cd:bd:b2:09:e1:
6b:97:25:58:aa:ac:43:92:26:24:34:91:7c:06:49:55:b1:d9:
c8:44:63:9b:3b:da:57:de:35:25:b8:d5:fe:9b:32:e4:91:97:
f5:d9:9d:fc:52:0e:15:8a:a3:d4:a5:a7:54:b2:42:90:14:23:
39:43:d3:44:30:3c:c7:08:73:24:b9:56:d1:66:d3:55:f5:10:
a3:08:c8:97:a7:3d:55:b2:a8:12:e9:d2:68:7c:c4:95:b8:85:
cd:39:ca:ff:1b:2d:d4:c7:09:43:30:a9:d1:4a:0d:14:aa:08:
6a:a0:ab:f8:f6:7c:4d:00:32:9d:ca:e6:25:67:2a:3e:af:f4:
2d:a0:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:33 2025 by rpki-client