Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: /yCO7htpFi1ZgOgOB/uIdmnpiwUFilOOSu7FUczfvjY=
Subject key identifier: 79:A5:54:E7:1F:C1:C5:6A:89:AA:77:F7:2A:C1:3F:6D:F0:9D:6B:75
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 0194BC04CFA032B66E118FE157EC1B68EE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0B44
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: jc6yZDw0AdAKtdGEIOo3hTWb2ppipt8fYHy4sCSdTDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:a0:32:b6:6e:11:8f:e1:57:ec:1b:68:ee:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=79a554e71fc1c56a89aa77f72ac13f6df09d6b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:08:14:c8:59:bb:b3:49:bf:74:d0:54:7f:
12:18:3f:93:35:eb:e5:62:25:db:ef:36:ee:65:ca:
d3:00:4d:fb:b0:6c:16:b5:32:74:29:73:51:99:1b:
68:ee:00:76:c9:2c:cd:02:ab:dc:d1:8d:a7:21:b2:
f9:fc:b9:44:84:26:4b:56:52:ea:2e:0a:5b:11:d7:
72:ea:72:5a:57:ff:f3:dc:d3:57:b7:53:c9:37:58:
20:6a:05:34:d4:80:1b:1a:dc:a1:f1:76:f8:e6:85:
20:2d:f0:28:30:c8:fa:d1:24:56:58:32:fc:d6:bb:
c6:5d:ea:fa:e0:52:39:87:e0:9e:6e:b5:19:2c:85:
39:35:3c:90:e0:6e:ca:4c:d8:29:76:d9:d0:87:c7:
ca:7f:c2:1f:f1:2e:30:c4:95:85:b7:05:ab:88:16:
af:2b:79:85:0e:25:53:5a:82:0b:1e:2c:65:64:dc:
f9:7c:44:16:71:05:88:9c:50:0a:51:cb:87:43:fb:
d6:c0:95:3b:6b:50:59:83:51:7f:99:c6:a6:12:37:
1b:1f:ee:e3:b1:28:d0:3d:b7:da:18:a3:60:74:fc:
54:3b:b2:87:52:e4:61:c0:66:aa:dc:8c:3b:fd:f2:
e2:ad:20:58:fe:09:19:3b:20:e5:ce:8f:6d:de:8e:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:54:E7:1F:C1:C5:6A:89:AA:77:F7:2A:C1:3F:6D:F0:9D:6B:75
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4d:0d:1a:b1:e8:a8:b3:0f:d3:16:d9:26:21:c3:63:d2:fb:
52:a7:39:07:24:ec:0a:cb:04:78:39:2e:6a:d3:78:f9:cd:76:
6f:0c:db:89:fa:57:b0:15:d5:4d:4e:47:35:59:5a:3d:ac:a3:
07:1b:4e:45:e4:10:7c:44:72:42:93:4a:d7:a2:e3:aa:c8:95:
42:d1:6e:8c:9c:41:d0:3f:e8:40:00:46:da:f9:9e:39:a4:df:
f6:15:c8:1a:be:d7:e5:25:24:20:23:cd:58:e1:c7:28:45:40:
c3:b9:83:a3:f5:17:52:62:80:f3:19:de:2a:e2:13:90:70:13:
d4:02:04:b9:27:22:42:d3:eb:5f:fa:d6:6d:bb:50:f1:a1:71:
7f:0e:1a:b6:5e:b7:c4:2b:57:ee:fb:a4:59:57:69:78:39:ed:
2a:50:f6:71:81:e5:97:61:bc:f3:43:11:92:6a:22:51:47:66:
94:e6:19:dc:d3:e4:34:55:c1:cb:33:2a:fc:9b:77:68:cc:5a:
c7:b6:3c:a7:fa:63:b5:5e:be:a9:9b:a1:30:5e:24:78:95:a3:
c4:ce:51:b5:75:c1:e5:ed:3e:36:d9:36:19:8b:09:e5:27:95:
62:9b:5a:d6:db:a0:ba:be:bd:f1:65:7a:59:0d:73:13:9d:07:
07:cb:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:14 2025 by rpki-client