Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: zC6hfOXHJYlEQ+h2qGmiaLnsAFRt/j4NQe+WCxcd1+4=
Subject key identifier: A5:2C:D1:A0:E8:7A:41:40:34:FF:5F:29:80:6F:ED:BD:88:3C:68:56
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 0194BD178F117F6A603ACA7FDE7986C42696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: dshxw2SYHDJLIXSk2A32evmYsmN5jpk6jZn4FqDRILY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:11:7f:6a:60:3a:ca:7f:de:79:86:c4:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=a52cd1a0e87a414034ff5f29806fedbd883c6856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:bf:04:dd:4b:dd:52:d1:55:de:92:9e:4e:
8a:1f:dc:e6:f8:8a:52:d4:63:7f:05:7a:80:3a:4d:
85:20:f1:35:ba:f5:c4:42:0d:36:11:e7:55:05:0b:
4b:56:c7:30:c5:36:79:b1:29:5e:43:92:03:c0:05:
be:39:34:d5:08:5e:e6:e8:4c:68:ba:db:a5:03:50:
c7:0a:f9:03:d5:ba:02:26:38:b7:0b:4c:00:3e:48:
0a:1d:09:87:79:bf:3b:7f:8c:82:87:04:45:c3:ff:
1c:c6:0a:b4:e5:d4:1b:34:3e:d1:e9:be:ba:aa:82:
19:8c:46:99:fd:de:26:f6:0d:3c:a2:c4:d7:21:c4:
63:01:17:2b:9c:c4:61:8a:2d:c9:aa:8e:0a:7d:2b:
06:64:42:9c:f1:43:ab:0c:c9:09:f1:c3:56:ad:2c:
0a:9c:01:01:63:b8:59:57:57:ad:eb:36:28:7c:31:
83:61:a5:03:8e:77:3c:df:23:1c:83:1b:f2:2e:48:
f3:61:11:c5:15:74:6c:13:d4:39:1a:03:cd:56:28:
a9:8d:96:1f:29:ca:48:40:a2:e1:c6:f6:91:99:47:
74:65:68:ab:91:98:8d:0f:f6:7a:db:8c:89:78:ad:
c5:08:96:cb:7e:73:1d:97:1d:d5:d4:ca:b0:81:1b:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:D1:A0:E8:7A:41:40:34:FF:5F:29:80:6F:ED:BD:88:3C:68:56
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:38:0e:8f:2b:d4:03:a0:d1:90:c3:78:c2:ec:2f:84:7d:
3a:fe:f8:d9:4a:9a:6b:a8:22:95:63:09:c1:c0:46:33:52:5a:
cf:27:07:1f:ca:c7:b0:4f:94:6e:3a:c2:4b:99:9a:38:c9:15:
49:98:d5:68:a1:af:a0:4c:99:34:db:b8:50:d9:c8:bd:6b:06:
3f:36:5e:32:d9:69:6a:a9:9b:a6:e5:08:47:37:94:b3:c1:4d:
85:78:92:6e:9c:d6:37:eb:98:05:de:75:e2:12:16:7e:d7:f0:
5b:9c:25:88:82:5d:20:ef:48:72:e1:bf:36:d0:b0:88:0a:72:
d8:66:f3:88:ff:c1:7a:e4:2e:74:2f:f8:f8:00:10:59:8d:e9:
6a:ce:a0:b2:5f:7c:c7:3c:ed:d7:66:37:f3:48:bc:67:02:f8:
4b:3c:48:57:85:98:4f:e5:a8:36:51:3d:1c:51:6a:57:b1:ee:
4c:89:3e:aa:23:c3:60:3f:68:f5:14:7c:17:02:7a:e6:4b:6d:
38:d9:cf:b7:0c:bc:ed:71:5e:ef:ae:12:be:d0:16:64:43:b2:
0a:3b:62:14:51:a9:a9:ec:67:b1:03:78:be:00:34:f2:6f:bf:
2d:d8:19:0b:ee:10:4f:22:60:e2:5e:e3:76:a3:ba:19:0d:9b:
f4:c4:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:51 2025 by rpki-client