Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier: KasPCn1VTSjIokqwHUvpJ5oYycPSssEOEdjiEzirs6g=
Subject key identifier: D6:75:D1:48:FA:65:CC:AD:D8:07:0D:F9:5C:A4:02:56:51:78:3E:72
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 0194BC3BE26A3C0582A762535AA531682413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: 6gic4iFKVsEHDmjaG6T5aHrtB06VmBvPlBj+k3aUIww=)
2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:6a:3c:05:82:a7:62:53:5a:a5:31:68:24:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=d675d148fa65ccadd8070df95ca4025651783e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:dd:59:01:eb:29:67:6d:bf:1f:59:05:4d:36:
0e:8c:dd:e2:e3:b0:e9:1d:8d:7c:e2:dd:aa:03:1d:
0b:5b:81:28:a4:dd:59:5e:53:66:c5:90:3e:07:1e:
5f:a6:09:1a:cc:7c:37:67:a8:c7:d6:f3:a4:3d:1d:
a6:86:22:4f:77:65:b5:46:06:f2:ed:9f:9f:cb:fa:
2e:cf:19:89:a7:db:20:a9:e7:29:4f:dd:0c:16:9f:
bb:37:e7:ed:38:ca:c4:c9:15:a9:b3:4f:2c:e8:d1:
fe:82:b5:be:7b:a8:4e:ee:b9:f5:60:c5:e8:63:41:
25:5c:2a:5b:5f:b6:69:17:0e:50:14:7c:dc:51:8e:
55:ee:ed:d8:4a:16:9f:9c:e0:4c:05:de:21:01:05:
d4:37:4a:33:c0:af:2a:34:90:39:ca:6f:f1:b8:45:
16:66:da:5c:88:24:9e:fe:cb:83:5e:f7:34:0c:b8:
d6:26:68:9a:a0:85:d0:b3:7c:3b:08:08:b1:d1:2f:
c4:0e:21:30:4a:11:70:00:90:d1:49:4e:cb:71:a2:
4c:af:66:55:d4:19:a0:9e:a1:62:9b:84:a3:dd:1b:
b9:81:0f:87:b9:8a:84:c6:1f:7f:f1:b1:df:25:b8:
ee:55:39:48:9c:15:ed:37:ee:52:5b:6a:93:7a:e5:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:75:D1:48:FA:65:CC:AD:D8:07:0D:F9:5C:A4:02:56:51:78:3E:72
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c2:97:06:39:1b:8c:77:a7:7e:46:e0:81:70:da:6b:54:c5:
97:9f:da:7e:ee:53:88:ce:61:56:9d:ff:1b:66:f5:b5:59:25:
b1:2a:03:95:99:97:5b:e2:61:b5:9e:66:48:eb:15:44:1d:03:
4c:ec:a8:d8:19:dc:63:dd:8b:f9:e1:4b:67:05:a3:2c:41:11:
dd:e2:cf:50:c3:f1:77:c3:78:6b:b9:d4:ed:ff:a3:02:a7:e7:
1a:64:90:1c:dd:c6:e1:29:c0:d5:0e:b6:70:8c:76:7e:f2:de:
e6:6a:53:86:65:6c:ac:50:18:2f:46:04:ff:61:d3:8f:02:aa:
43:a2:0b:27:0b:34:f7:c7:ca:f4:37:9a:60:6d:a0:94:94:11:
02:50:04:9d:8d:82:97:24:6d:c2:b6:c9:bf:3f:3a:8d:af:dd:
4d:97:de:79:4e:85:bf:eb:b6:ea:07:6f:fe:a7:18:12:ad:d4:
7b:9b:f4:ab:b2:c6:e7:5f:8c:75:92:0d:cd:ed:ab:50:b6:69:
76:f6:db:b9:43:13:50:6c:d6:f2:a0:c9:7e:ac:88:31:44:4b:
37:c2:84:3b:9f:83:a2:43:a3:bc:c5:09:ce:39:6e:2f:81:2d:
a3:19:a9:e1:26:30:4e:fb:c8:e2:7c:f8:03:e2:89:54:14:8c:
77:a7:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:48 2025 by rpki-client