Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: mA577xrNao7ts7gflyLNtFy4sMqY8PxA1m/ZefB8tfU=
Subject key identifier: 3B:BC:13:2D:28:2C:DE:FF:E5:CC:A3:10:27:E5:13:63:31:E5:6A:6C
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 0194BC3C26E950C64A36D533F46A7890E7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: alfL1bRTQjOY-E2KjHP8N4Ulue0.roa (hash: ybSj2AdhAA+9tbRInXwXzkVBfMf3WHllqssGw6/wFUI=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: THkwY4keaezEY8M7+Cw6J05vkWT+F0TGGxwyr+5dZgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:e9:50:c6:4a:36:d5:33:f4:6a:78:90:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=3bbc132d282cdeffe5cca31027e5136331e56a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:49:d7:9a:b7:07:5b:3f:18:02:be:d9:5e:
56:9f:84:aa:a0:38:d5:fd:4f:24:7c:72:28:6f:15:
b2:98:56:1f:c8:71:7f:37:34:15:65:19:05:b9:54:
c6:8a:a4:bd:63:fb:d6:d6:ca:f4:55:36:20:f2:20:
61:78:0f:b5:51:7e:c0:14:03:ae:83:93:64:e7:b7:
ca:c1:23:39:93:6e:a0:2a:ed:2b:30:ce:3a:02:16:
6e:dd:6c:6c:00:51:bc:c9:5d:83:17:da:fa:63:a8:
9e:6b:65:8f:28:03:16:20:4c:83:91:b3:59:3b:b9:
2a:41:33:d7:47:48:cd:f4:de:2f:f2:93:10:95:2f:
75:14:8b:3c:f8:4a:10:0b:0d:ba:b3:64:0b:b1:de:
b1:bc:cb:1e:61:ab:0c:83:90:48:48:7f:5b:e9:bc:
4f:73:25:32:0b:cf:62:8c:e2:1f:bf:e2:cb:1b:fa:
d9:f1:d4:b7:09:c1:31:44:17:c5:6e:35:00:aa:45:
99:76:61:4f:b2:6b:e0:94:00:99:e6:3c:c3:08:d8:
56:9e:71:75:b3:c5:f2:96:96:08:d5:79:56:c5:a3:
94:b0:e3:e3:9d:ff:68:84:f6:d5:78:0a:c0:dc:2d:
00:ef:89:ab:4d:b6:63:6e:fe:c4:7b:8b:2d:b6:cd:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:13:2D:28:2C:DE:FF:E5:CC:A3:10:27:E5:13:63:31:E5:6A:6C
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:3b:79:f8:0d:a7:c6:25:70:2a:74:6c:98:9d:22:51:d2:
73:f9:63:7d:aa:84:19:cc:77:4a:95:ee:8b:39:38:23:03:32:
0b:0c:04:75:5d:0b:0b:37:ff:39:9c:fd:37:fc:88:27:25:5d:
0e:31:31:13:e0:0f:e7:43:29:4f:6d:22:34:88:3a:bb:f9:52:
19:9f:8f:f6:f3:8f:3a:b5:9c:ab:b4:c5:03:5b:e1:55:c0:c0:
a8:bf:72:50:68:78:7f:ac:df:99:f3:e7:03:13:1a:d5:44:18:
8e:7f:c7:11:92:4e:b5:e7:c1:13:6a:10:1e:2e:c9:e8:0e:63:
b1:4a:26:e0:99:b7:ba:28:83:3a:00:47:4b:84:da:b5:5e:16:
78:b9:d7:48:23:f6:40:ee:85:4f:b9:8f:af:6c:d5:92:ad:df:
c4:40:a3:b0:80:16:15:75:25:2f:cd:4f:ee:6b:9e:47:b9:ea:
71:45:b6:9d:ee:4e:a3:a8:06:e7:6d:9d:5c:8b:df:0d:39:8c:
ec:f6:59:5b:54:b3:43:93:e0:3a:a2:98:06:d4:6d:c6:19:28:
a7:61:73:ed:30:4d:56:37:3f:c9:64:d2:4f:5d:8e:de:76:ab:
69:b0:35:25:90:87:25:8c:58:bb:6e:da:68:bf:76:9f:6f:e9:
19:d1:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:12 2025 by rpki-client