Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: 3O1lxjU5GSYxxCa1XjyjNSYh+jcSWiu8eCUOEf928kY=
Subject key identifier: 21:13:D3:10:4B:70:BD:64:97:B7:A7:A1:35:B7:F2:DB:CD:4A:63:B9
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 0194BC3BE42B5F43BDDC639A2EDBBAA5E156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 090C
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: FlOhwM63q5uT7aqavOHtoCPIxiA.roa (hash: CII+st3ErTYXreHn6XwAid/3W1WLBVtyHJl2G4GqMT4=)
2: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: y1xX2IQ70XhzPRtBjBIWUEBExkdOwWL88ulLYLcqnrI=)
3: nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa (hash: Y4OxWT9eJWsPkC/UoZ21OhHIIi+5C+/UxC4w6spkzhk=)
4: oQshIdOiDv_qCu3Qu0L_1blek4U.roa (hash: rA5NHYZiid8aQEyiH3PeuTM4SKfbRAu+sIpmolcdW+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:2b:5f:43:bd:dc:63:9a:2e:db:ba:a5:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=2113d3104b70bd6497b7a7a135b7f2dbcd4a63b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:01:bd:aa:8a:7f:f2:5b:73:6e:af:6c:26:
26:bd:e0:c3:37:95:03:25:09:08:5b:ae:31:3d:16:
76:af:8a:67:60:08:8f:73:fa:c3:cb:ea:fe:c6:d5:
19:98:48:8e:82:4e:1e:a4:be:db:e1:0c:bb:5b:83:
87:92:cc:e3:ee:22:40:ca:4e:03:04:6f:32:67:84:
0a:6a:10:33:e6:fa:72:36:f3:40:04:4e:38:d4:70:
5b:24:d3:5d:54:cc:6f:2b:93:0c:0c:af:42:9d:48:
86:51:c7:ca:eb:f4:f9:3d:26:82:47:66:1f:c6:24:
03:4e:51:7b:e2:53:fc:bd:94:8f:39:ed:69:a3:ae:
6e:66:d2:c7:8f:53:24:fe:d1:23:5d:f0:48:98:41:
f2:34:07:26:b6:6b:27:2a:93:77:56:99:d1:4e:43:
82:d2:9c:f2:ba:c3:19:1b:42:b5:1b:e0:0f:88:36:
43:dc:af:f9:83:a0:02:20:46:04:18:bd:0b:4c:9c:
98:b2:9e:4a:77:f3:55:a1:7a:6f:fa:e8:80:81:54:
97:9b:a5:16:d5:31:36:57:3a:fc:76:91:9c:ee:05:
74:04:4d:c1:93:3b:05:d0:8d:9d:c2:c8:5f:c6:d1:
31:07:69:ab:5e:f0:bd:54:db:a7:73:dc:44:c2:03:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:D3:10:4B:70:BD:64:97:B7:A7:A1:35:B7:F2:DB:CD:4A:63:B9
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:47:d5:47:a0:cf:ed:13:b2:1f:ce:65:cd:d1:49:7c:bf:4c:
ec:c7:13:6d:df:33:f8:f7:58:54:a5:3c:99:8e:64:be:c1:f4:
1c:2c:e5:3d:91:31:fe:63:07:43:3f:80:52:42:c0:64:72:77:
c0:5f:ee:eb:b6:ee:67:3b:b4:80:96:90:db:56:f6:c8:50:b9:
ba:3a:33:ca:84:33:bb:55:09:04:6c:51:02:e4:53:71:d7:af:
c7:7a:5d:be:bf:b4:d6:00:2d:51:5d:c1:d1:00:84:1c:92:b3:
36:2e:cb:59:fa:01:e6:59:d8:20:3a:0e:1e:74:4d:c3:ef:fc:
3d:4c:2b:8a:83:0d:75:a4:fb:98:6e:53:3c:08:5f:91:45:50:
6f:8b:03:65:32:a2:76:8c:33:c6:5b:2a:1f:21:bd:cc:c5:96:
66:58:76:26:b3:0c:cd:69:a6:69:e8:b7:a2:b2:95:ab:28:24:
26:79:ba:88:b7:c2:8d:6a:68:26:20:44:74:60:02:de:b8:43:
b5:bd:cc:32:99:7b:c6:f7:cf:97:e5:78:4b:f4:c9:d9:63:5e:
0f:02:13:b8:0d:0f:91:1e:02:81:a7:6e:97:c1:47:0a:1d:0f:
47:23:6b:88:a7:6f:06:e6:32:21:33:fb:8e:8d:b4:f7:92:93:
2f:1a:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:59 2025 by rpki-client