Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: nuwKzghDKojfZ/Hu3U1typrahprPFL1hEu6OIRw+8BM=
Subject key identifier: AB:F2:44:5A:E5:91:D0:8E:D2:53:E8:D8:2E:69:E2:DE:EE:5A:C5:24
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 0194BCA97EC70293408712B93C0BE7811425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: 9BuNyVCSnldpoIEYO+Z03c6j0M5HPsBbiy01Qhs7acU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7e:c7:02:93:40:87:12:b9:3c:0b:e7:81:14:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=abf2445ae591d08ed253e8d82e69e2deee5ac524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:66:34:3a:4a:5e:98:32:4a:34:e6:9b:ed:
ba:53:70:51:33:5d:d0:93:1f:f8:2b:38:ee:db:45:
0f:3f:28:cd:c9:e8:02:1b:a6:d6:b2:4e:09:3b:0c:
f9:9c:a1:70:53:4b:de:e3:f5:9f:03:f4:da:15:4d:
92:84:ae:9d:78:e8:3f:7c:b6:2d:cb:71:35:48:67:
7b:bc:07:84:d6:5f:15:8f:5c:a8:38:59:ad:40:d9:
b7:33:a6:cc:6e:83:e6:55:fc:81:43:ac:a7:c2:74:
2b:a5:a4:04:81:4f:1e:c6:28:96:3f:40:b1:b6:90:
65:c0:7d:18:50:3c:6b:da:0e:27:b4:cc:04:34:d4:
22:08:37:91:19:40:ac:86:c5:95:65:7b:9f:00:88:
32:e6:34:e7:02:5d:cc:10:e3:52:fe:6b:e3:72:b6:
bb:7b:15:4a:55:66:e7:e1:b9:be:f3:f3:a9:fa:72:
80:ce:f2:cf:c5:8d:5d:30:a3:4b:b3:dc:b5:04:4c:
2e:9d:8d:13:c7:e0:1a:f5:75:d5:90:47:8a:e7:18:
40:69:78:95:97:a1:99:d6:ac:94:1c:3a:22:eb:4d:
c6:ea:29:a0:e6:6d:2c:d0:ce:54:fe:59:87:e3:1b:
0d:81:21:25:ee:a4:43:90:45:b3:71:08:e6:3f:4c:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:44:5A:E5:91:D0:8E:D2:53:E8:D8:2E:69:E2:DE:EE:5A:C5:24
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:00:25:96:06:a8:b1:ee:9c:08:b2:c5:b9:36:11:ce:77:66:
cc:3c:8d:31:7c:d9:47:04:a9:d2:26:14:67:7a:22:d6:fa:2d:
92:db:a2:bb:84:b7:ac:4d:45:e2:3f:e5:d8:6c:bb:70:5b:be:
a4:dd:70:ac:0d:78:c4:7c:ac:1c:d1:ed:00:8f:61:01:13:8b:
22:07:77:5f:3a:c2:67:0e:9d:22:73:35:7b:b0:95:95:58:b2:
f5:61:cf:77:bb:7a:8d:81:e1:9d:b9:fc:db:f8:cc:51:76:7f:
4a:a7:93:5b:4d:f1:6e:5f:7f:c5:bc:02:d5:b3:ea:6e:7b:15:
84:b1:c8:61:45:c5:2d:90:07:c9:2e:d2:c3:c9:bd:4b:39:66:
20:e5:79:6f:00:4a:93:d4:12:83:4d:52:0e:9a:d0:93:4c:5b:
c4:9d:d7:fc:00:3b:59:3a:0c:c1:e4:80:72:22:f3:47:87:f1:
b8:61:b4:7b:07:f8:7f:57:77:0f:a2:fa:57:12:c0:d4:14:df:
1d:4e:2b:08:93:df:3e:7a:b7:a3:a9:16:27:9f:94:06:aa:6f:
3e:07:83:1e:ff:52:a8:2f:93:f8:ae:da:cc:f5:f6:85:85:87:
9e:c9:a6:53:d9:42:1e:d3:60:ba:05:bd:61:b7:f4:24:8f:59:
c8:77:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:11 2025 by rpki-client