Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
File: lJQumzXZGQbREkXXO9WM3Y7KSdE.mft (raw, json)
Hash identifier: AG5v4qUHWJzNSgx4TVwRk7c2vGc1ZLAMMQbBBcTzL1k=
Subject key identifier: 56:5E:F6:68:7B:B3:3D:75:F8:AA:A7:87:27:62:66:14:24:E8:BA:85
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial: 0194BBCEB58CD135679E26E274CAF3ED3701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
Manifest number: 1381
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: V6dzQYTukirsU-gqtCUSWtxmwyw.roa (hash: TAhPxTUSZwI4JsrpdkkvjRG18+wELOBapOWsonm/zpw=)
2: lJQumzXZGQbREkXXO9WM3Y7KSdE.crl (hash: GUOdJr18fmvsxwwEnzlxRm3lX0cAAR7FPzWQp0KE8U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b5:8c:d1:35:67:9e:26:e2:74:ca:f3:ed:37:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=565ef6687bb33d75f8aaa7872762661424e8ba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:e4:7d:95:af:fc:c1:d6:da:33:bc:64:25:
af:d2:2b:19:2a:08:be:93:53:b1:f0:51:38:55:6f:
32:ff:17:75:77:41:51:a3:40:b1:6e:e3:11:f8:9b:
1c:4d:48:c3:06:18:bd:97:99:2f:38:49:34:8a:b5:
e6:6f:54:0c:77:f7:56:a7:4b:0c:dc:93:16:85:5d:
2e:28:bf:b0:af:fc:1c:ac:76:c4:93:e9:0b:6f:c8:
ca:cb:f3:f6:fe:d2:5b:44:27:e7:7e:52:57:2b:2b:
9a:d2:ff:7b:12:ac:34:4d:4f:a4:15:52:80:d3:cf:
0a:09:45:89:54:00:c7:d6:6f:6b:e7:ea:04:28:9b:
9c:dc:79:62:ab:e8:4e:4c:b1:b5:a1:08:4e:e5:f5:
30:6f:66:76:71:e8:62:c0:5d:e5:b8:05:a8:d4:31:
27:b6:ec:05:de:4e:f9:ed:d5:dd:d6:d9:bf:89:67:
fa:c0:9c:2a:6c:07:38:8c:f9:c8:4f:c6:a7:4f:96:
cf:3c:0d:1f:7d:19:de:ed:b1:fd:19:1c:03:3e:c0:
6a:7e:d5:75:c5:9c:b2:a1:cc:a9:8c:70:85:54:c5:
4a:91:8b:3a:03:8b:1f:18:d4:9f:08:e4:b6:31:84:
02:8b:27:c7:e9:ef:6a:c5:b3:f5:47:a4:2a:17:90:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:F6:68:7B:B3:3D:75:F8:AA:A7:87:27:62:66:14:24:E8:BA:85
X509v3 Authority Key Identifier:
keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:61:2b:0e:7a:16:6a:fa:00:bd:12:68:bf:0d:97:ab:a0:95:
c7:c7:a2:af:db:15:db:ce:9c:64:19:31:b2:09:72:f1:b2:87:
2f:f1:0e:19:87:9b:f8:d8:9e:4a:d4:6e:13:d7:6d:93:b9:a6:
1b:1e:3d:5a:d1:ae:da:e8:50:80:f8:fb:66:03:35:1a:dc:e4:
fc:38:78:e7:f2:d7:2b:48:32:e3:5f:f8:ae:95:5d:f0:7a:73:
5f:f1:dc:b5:0f:3e:dc:d0:0a:98:2f:be:e0:e7:d7:41:d6:d3:
77:bc:20:41:03:7a:f3:2a:9b:bd:2a:74:22:33:b8:13:31:43:
1f:64:97:d9:26:f1:06:07:70:f2:e2:81:e5:9f:ba:9d:a5:16:
7a:05:b1:d7:2b:40:c5:04:75:27:a6:08:31:46:22:18:54:80:
c0:4f:bf:cb:96:ba:c1:c9:cf:eb:9f:6f:82:81:a9:ac:d2:6d:
b1:9f:87:c5:d6:ca:9c:42:62:47:ed:ee:69:9b:ea:21:28:6d:
8d:59:27:71:98:26:82:eb:23:88:5b:e1:c5:7e:04:24:a7:c0:
5d:88:f4:d6:12:99:55:4f:58:75:7b:d5:2f:f6:41:65:0b:51:
71:00:3a:15:8b:7c:56:34:3b:39:24:16:ab:bd:81:54:eb:57:
b5:e3:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:39 2025 by rpki-client