Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
File: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft (raw, json)
Hash identifier: qDvNlquTWDoy96SIlieTc0Y9IbE4JjY+UENlpFEmPS4=
Subject key identifier: 1E:C0:6E:8E:EE:81:A2:9A:01:65:C6:CF:3B:E6:2F:B5:ED:D3:22:5C
Authority key identifier: 94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Certificate issuer: /CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Certificate serial: 0194BC052BB75234C18470EC14987421D994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 7gS8nFstYvHiaaGc7IpNtagOuCY.roa (hash: 4SiUHytZpEAnR4OzG8jjEPYSBs2q4THE0R+2ggxYfSc=)
2: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl (hash: VUrKN/gvu8+o/WKv4k+bqvHKURH+CzVN3uVM79yzWwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2b:b7:52:34:c1:84:70:ec:14:98:74:21:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=1ec06e8eee81a29a0165c6cf3be62fb5edd3225c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:2d:08:5b:b9:ca:9d:bd:2a:33:30:e2:ba:
6f:02:9d:f6:40:d0:4c:af:da:0a:6c:59:89:58:e8:
fb:92:31:b1:95:39:56:12:6a:a5:45:ea:24:b6:6e:
73:03:a7:c5:0b:04:4b:d1:fb:12:63:61:92:41:07:
13:fc:1c:ae:50:59:de:6b:cb:2f:f3:e3:de:c2:a3:
06:d8:8e:00:7e:54:9e:86:0a:2a:62:df:1a:f5:37:
3f:3a:3c:1d:88:d8:88:df:d6:ef:8b:cf:63:3c:3b:
43:dc:c8:23:ab:31:db:4b:81:c0:a4:d3:3e:e3:a0:
e7:8a:b7:74:17:cb:ea:f8:41:24:74:d2:4a:6f:90:
bf:b5:b2:0f:b7:a8:d8:d2:70:7f:7e:d8:f8:6f:9a:
12:29:1c:5f:01:86:74:03:7b:92:83:22:e3:44:13:
77:2f:ed:3d:fd:b2:b9:f0:5c:5c:2b:48:f0:f4:02:
82:de:a1:50:f8:a9:a6:fc:ec:67:8b:14:6b:99:88:
9e:06:0a:92:93:5e:51:ad:4e:c3:03:0d:77:42:6e:
eb:69:1d:1f:fd:fa:59:b8:db:22:f9:07:b2:7d:5f:
78:b4:eb:46:80:03:fe:19:10:48:3d:47:38:b5:c8:
98:de:d1:cc:62:41:e5:09:30:0e:59:38:92:24:4e:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:6E:8E:EE:81:A2:9A:01:65:C6:CF:3B:E6:2F:B5:ED:D3:22:5C
X509v3 Authority Key Identifier:
keyid:94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:80:96:34:d2:1f:91:28:1e:d3:64:49:ea:b5:c5:12:04:
0a:13:c1:d1:ec:3e:ba:fc:fb:3d:64:5d:16:81:43:f4:df:f1:
01:ef:1d:93:cd:e5:83:63:9a:98:f4:6c:04:5b:35:0c:e8:3f:
dd:5d:09:3a:6a:da:76:2d:bb:4b:72:01:1f:ab:59:55:a0:d8:
26:ef:8d:ab:34:61:46:a2:13:50:a8:e0:97:8f:c9:16:76:cb:
42:fc:f9:18:35:55:fb:7a:10:97:ef:dc:98:e4:f2:d2:fc:21:
08:ca:c0:57:41:5f:c1:fa:ae:58:56:b3:f9:e1:9f:9e:ac:31:
dd:64:83:1e:f9:20:7b:28:9d:00:da:84:ec:17:03:b5:c4:6a:
7a:63:56:37:b6:54:ce:4e:bb:41:07:28:d0:fa:51:8e:17:95:
11:fc:e7:0f:91:a8:f3:98:58:88:3c:9e:f0:7e:6c:ed:0c:2b:
77:2e:5b:a7:2c:19:41:e6:48:3b:78:5e:01:29:bd:b2:7e:23:
d3:b3:36:12:2a:0c:f2:65:7e:eb:6c:fe:dc:ba:0a:25:d5:a5:
18:83:1a:9e:93:20:cf:b9:91:91:47:36:e1:1c:20:cb:af:9f:
63:4f:f3:a0:f4:51:9f:3d:cb:fd:3d:27:d8:ba:8d:f8:c4:8c:
c6:ed:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:16 2025 by rpki-client