Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
File: L9lxonxvwsZi8GXdi_qLihMsHq4.mft (raw, json)
Hash identifier: 3AMJxjUBJzrw48yHPgeDb++Vww6nlrfXDTtd7rBal1k=
Subject key identifier: 4C:E4:07:27:83:D4:28:7A:56:98:9D:CD:04:C5:9C:B4:00:C9:FB:54
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Certificate issuer: /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial: 0194BBCDF50ACA81A029D5B4E512F6E20783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: 5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa (hash: VZnp6fYvw/+BPHQQcr7mdLl9tbfRb+FY6UHV9H/juh0=)
2: DW0TBajIRaJNjehdF_P6lFN1E-I.roa (hash: mI7ifTl+PSXtmyQehKoi7R5vAkxLOpMKlijli+a8Hsw=)
3: L9lxonxvwsZi8GXdi_qLihMsHq4.crl (hash: bJJAJbdp/YHReQTtVyC0cVeM0/69Lta4SdN5YJJe/Io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:0a:ca:81:a0:29:d5:b4:e5:12:f6:e2:07:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=4ce4072783d4287a56989dcd04c59cb400c9fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:f3:39:04:68:bb:c8:35:a0:89:2b:5c:95:
c7:aa:5b:b9:33:88:af:27:2d:4a:1b:ae:9d:42:28:
8c:31:c3:79:7f:c8:cd:11:cb:bd:2f:a8:39:45:c5:
d6:b2:56:57:d0:ff:93:37:7e:51:18:4a:06:b5:42:
a8:2d:62:03:91:59:f3:07:ae:0b:8c:fd:c6:f2:b8:
d3:a3:f1:40:b4:5c:0c:01:b2:d4:95:f1:f3:43:df:
ca:34:01:ef:2d:13:e9:3c:c9:18:4b:12:11:8f:e6:
41:9b:32:28:69:e1:db:d3:d1:f9:73:10:73:f5:39:
6b:2d:2a:14:25:a0:be:b8:ad:5d:a9:12:1a:8d:76:
20:1f:b9:20:00:56:38:f3:9e:5d:3c:f7:d5:cb:d6:
f4:b4:7b:38:6d:f7:33:35:3e:49:72:4c:09:20:89:
d1:85:83:c2:8b:5f:2c:61:36:0d:72:8d:64:b4:df:
8e:fb:a4:71:a2:16:5d:d8:1b:1e:82:f5:2b:35:92:
d5:8e:26:fc:91:bd:e5:5e:a8:e1:44:19:9f:2d:8e:
3a:aa:39:81:f0:d8:cb:8a:d0:f8:6d:a0:0d:a9:87:
25:81:98:9e:75:84:7b:55:6e:e5:a9:cf:43:42:1f:
25:14:67:7e:bb:32:0d:f6:94:91:d9:6b:7d:03:e0:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:07:27:83:D4:28:7A:56:98:9D:CD:04:C5:9C:B4:00:C9:FB:54
X509v3 Authority Key Identifier:
keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b3:01:be:bb:07:74:2b:d3:31:d2:42:f7:97:14:7f:6e:e4:
4c:c3:e5:89:74:e1:57:9a:f8:51:1a:f1:58:0d:f2:c6:75:60:
c3:c7:da:11:48:5f:fd:e6:30:5b:bb:a8:b7:58:a8:6a:0a:bf:
d5:4e:eb:28:a8:36:44:eb:1a:60:45:80:b4:7f:a2:6a:3f:23:
9a:e6:74:01:19:18:3f:4d:79:38:3d:94:ee:8a:15:72:58:42:
f1:5b:e3:9a:e6:f6:1c:7c:08:3c:11:e1:dc:a5:09:3c:8a:4d:
8f:d5:25:6e:25:1f:7c:bb:84:b7:9e:37:15:de:cb:f7:26:f0:
fc:5d:d2:2d:36:9c:23:14:86:59:9d:97:5d:bf:28:9d:cd:33:
1a:54:bf:32:60:eb:98:01:ea:19:59:2d:9b:c6:d8:63:ff:fe:
28:c9:40:de:03:28:00:ce:9a:7d:25:36:33:be:0d:66:df:7c:
dd:32:51:a9:42:19:3d:76:ad:75:82:a1:a6:71:98:49:02:59:
ee:03:aa:75:5d:a6:3b:ac:da:69:bb:d0:5e:76:74:5b:c3:cc:
da:17:4a:99:28:d9:6a:f8:8f:60:f9:13:4a:ff:fd:38:d5:b8:
5f:0e:15:9b:92:2d:83:da:43:0b:03:9b:0e:dc:7d:d8:97:97:
1b:b9:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:02 2025 by rpki-client