Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
File: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json)
Hash identifier: zyZVoRaeHbBBkUJgzVInTjZFWQOpb7QJ1Vsot7dsPgM=
Subject key identifier: DD:77:FE:AC:C8:FA:1F:CE:CB:4E:5A:EC:DA:0C:9E:93:CE:86:4C:3D
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 0194BBCEA913F956549642A3F5CCBBE6D419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
Manifest number: 10C4
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: GkmNRez_B8q96uaVOleqThEPoEs.roa (hash: aNQGHPeLClAe2Gmzc0jqm+MRXJ2xuLHjsljQiK1K4qw=)
2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: zq2a1/QJ1LIO3I3xX3yb4XvFWWXx57Pl3mut+600mDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a9:13:f9:56:54:96:42:a3:f5:cc:bb:e6:d4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=dd77feacc8fa1fcecb4e5aecda0c9e93ce864c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:bd:f0:7c:e1:ad:27:07:47:7e:81:fb:bc:
85:4c:c6:bc:c7:13:e2:39:8b:c8:ad:78:cc:4d:cc:
f0:6a:a4:d5:65:7f:2c:97:64:c2:96:ed:d7:29:33:
e0:b7:2f:35:8e:c2:e3:53:b4:28:e2:06:a6:68:26:
d4:f9:9f:0c:bb:c0:0f:dd:7f:e5:05:68:a8:75:ce:
a9:3d:d6:e7:8f:59:2c:11:92:57:08:01:96:46:9e:
ea:28:86:10:14:e4:ef:22:f1:a7:9f:f2:35:6d:17:
0b:c7:91:73:c1:45:31:30:10:20:17:09:7b:ac:92:
c5:12:c5:ff:6b:ab:71:a0:9e:a5:8f:87:f8:68:3b:
0a:51:76:7f:7b:91:d4:6a:f8:12:69:72:6f:e1:ff:
b7:95:bb:04:c5:de:24:35:41:3b:82:8c:92:83:33:
a6:ca:1d:18:ee:73:75:2e:4f:0f:00:74:a5:61:d7:
06:54:f2:a5:b4:91:64:c7:b1:e7:d0:46:57:8c:d8:
61:fa:0a:f4:08:d3:dc:a5:de:ec:1c:22:69:86:ae:
8f:bc:1b:3c:71:3d:ed:c6:d7:2f:48:35:11:e4:54:
37:4c:95:c1:51:20:92:46:d9:ac:68:c4:95:b1:b6:
fc:35:3f:92:0a:ee:83:59:9b:95:29:83:80:e5:de:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:FE:AC:C8:FA:1F:CE:CB:4E:5A:EC:DA:0C:9E:93:CE:86:4C:3D
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:be:a7:38:73:8b:cf:60:4b:2b:79:21:65:d8:eb:5c:77:f4:
33:31:22:30:4e:ab:54:4d:db:e6:8e:e8:32:8d:cc:64:a6:59:
8f:5b:93:3f:05:c5:09:00:bb:9b:78:43:80:a5:ef:4f:21:b4:
4e:cf:3a:34:25:2e:46:19:12:fc:a3:44:c8:34:a9:0f:34:b8:
65:58:02:08:59:8b:92:7b:9d:81:42:1e:d3:d9:76:7f:38:e1:
ae:06:1e:11:71:37:fd:a9:c3:e9:db:31:bf:49:85:a0:ef:76:
5c:38:45:52:cd:27:c3:22:2f:d9:cc:44:63:0a:ff:03:fb:7c:
22:4a:86:ec:4e:e5:0b:f4:62:f5:8e:7e:39:10:d7:c2:d3:cf:
4d:24:9a:29:41:8f:12:cf:3b:cc:9e:5d:6d:e0:dc:bd:77:b2:
ee:91:75:ea:d0:de:79:7c:86:06:d5:8d:19:bf:c0:df:90:82:
f8:83:6d:b5:76:7c:e2:e0:7d:a2:f9:42:a7:02:bc:de:9d:32:
bc:f3:93:3a:6c:21:3a:07:62:27:64:32:1b:5a:8c:6f:03:e5:
0c:54:1a:6f:cd:43:06:86:55:69:63:5f:46:c4:58:47:28:1a:
98:d6:74:d1:35:bd:a6:76:23:72:3e:9e:ea:af:18:ad:83:22:
e6:1e:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:38 2025 by rpki-client