Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier: msKdKte/nnDGowP2yhDEviEUkp7UZLn2t6gB2femKqQ=
Subject key identifier: FA:8A:E9:7E:F9:60:60:EF:A8:91:4C:0A:7E:5F:B7:F3:F1:AB:61:29
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773
Certificate serial: 0194BD4E51531616BA3C50FC74119B16F114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number: 0271
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: h0vy9KP5l8xr8yJ-2ncCcO3rvZU.roa (hash: WW+DmP6TLxBJVPgyfFOFc50eb4JwhFwUi3K7+OUSV3A=)
2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: YD9tIMUQ0RG5Q6N4oTWZ0DM6aSV39Q1R3isYsESlldE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:51:53:16:16:ba:3c:50:fc:74:11:9b:16:f1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514d5a840049d442df377445394df719201a773
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=fa8ae97ef96060efa8914c0a7e5fb7f3f1ab6129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:90:87:c9:84:25:3f:02:a3:03:62:f1:fe:
a5:eb:dd:09:d0:3a:22:68:4a:b1:b2:60:28:79:d9:
a7:e9:6f:5a:12:26:a4:8e:76:24:2f:1f:ae:a2:76:
8d:b1:0d:d8:ad:d6:35:dd:0a:79:34:f7:5c:c6:99:
9a:85:fa:5f:17:78:d5:ad:7d:b2:5d:6d:d9:2e:db:
4e:61:c5:01:3d:cf:0e:ba:d6:3e:24:4b:b5:16:a5:
e8:d2:e5:12:16:52:ac:07:b9:d3:74:08:59:fd:06:
28:e7:5f:5c:3e:19:3b:65:5b:5d:b5:aa:57:6a:e4:
87:96:93:32:8a:98:83:35:31:c0:cf:26:a6:a8:fa:
99:bb:4d:47:73:1a:79:50:a5:9f:cf:ec:04:85:e6:
f5:97:6d:19:e7:4f:ab:d1:b5:15:b7:78:55:d7:a4:
2b:5a:34:f6:e3:d2:c6:66:87:93:a2:04:3b:1c:fc:
67:34:a0:f1:7b:41:e9:39:c6:bb:e7:73:7d:78:69:
ce:7c:21:e1:76:84:35:a0:21:ab:f3:78:51:ab:82:
9a:e1:c3:1e:5e:96:6a:af:c6:64:91:75:90:32:ed:
c6:10:b6:ea:4c:d6:f1:9c:dd:a1:6a:51:99:e5:70:
0a:46:0e:2b:88:a2:a9:31:82:d0:24:82:ad:a8:a2:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:E9:7E:F9:60:60:EF:A8:91:4C:0A:7E:5F:B7:F3:F1:AB:61:29
X509v3 Authority Key Identifier:
keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d2:15:e6:ff:9d:0f:d6:cc:af:46:a5:5e:21:b2:67:c7:95:
61:0d:89:cf:b1:87:57:1e:18:99:26:4d:1b:e5:f3:fb:f1:5b:
f5:e8:87:8e:b6:23:ae:5e:47:bf:96:a7:7a:3c:10:6a:0f:0c:
39:d7:00:b1:72:1f:1b:44:f3:d1:fc:84:02:fd:d1:6d:e6:1a:
e1:a5:63:00:80:4c:bc:1d:82:8a:03:48:9e:86:2c:46:27:fa:
50:1b:d8:2b:44:cd:39:e7:e9:98:49:2f:64:38:cd:a0:06:b7:
ec:fd:97:c2:54:77:a4:2c:51:f2:99:9c:23:a5:16:1f:e5:dc:
9c:68:d6:64:28:72:c9:68:0e:ff:51:2f:33:01:88:f6:7c:97:
31:f0:8b:68:ce:10:9b:bd:d5:58:33:93:0c:41:4b:17:99:a9:
e6:58:4c:e6:6b:f9:63:f9:b5:0c:0a:8c:5d:4b:04:de:a9:c9:
48:be:0c:39:a5:18:9e:dd:a5:52:a5:a2:55:06:07:3c:79:11:
70:1c:60:36:38:32:c7:36:9f:54:21:5d:46:32:24:a4:57:05:
ff:22:33:9c:3e:a0:4c:6e:2a:ca:0c:6d:65:73:3b:a6:3f:7a:
57:19:83:55:93:d5:38:62:b2:61:f7:85:8e:b6:38:fd:4b:b8:
3c:ea:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:50 2025 by rpki-client