Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
File: ll4IgLPHvQuQpkwkTi-hzw030HI.mft (raw, json)
Hash identifier: WznbKDiozYhEGcAclfNoCgR5FbLuMNph1Uh4W1Rh5uA=
Subject key identifier: 2A:C2:99:6A:E9:FE:E0:BB:6E:AE:BA:66:88:3B:1C:82:7B:92:D8:9C
Authority key identifier: 96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
Certificate issuer: /CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Certificate serial: 0194BCE0ACC8C5C9B33DFA4FE58D4304C5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
Manifest number: 0181
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: JksTwBqMu6mir3iXItYAcZTkiBg.roa (hash: RpdxCkhqaoSpmsMLdu6NPf18xyekalTabGY7q5mIpGE=)
2: XR5EtNSJMICq3YbRtKFluRtEWv4.roa (hash: zdpy5fa6FzFGRXkI56ldRGEVpTT7+e5p/QUx0x6zPj4=)
3: ll4IgLPHvQuQpkwkTi-hzw030HI.crl (hash: MI9phmSQ0XsgGE2KVL9T743ti8jgRxE5OyZBGR9ghOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ac:c8:c5:c9:b3:3d:fa:4f:e5:8d:43:04:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=2ac2996ae9fee0bb6eaeba66883b1c827b92d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:d2:b7:90:58:fd:14:44:15:fc:7a:28:61:
27:33:bb:88:c9:ad:2d:1f:2b:83:3f:8b:47:da:cc:
ac:5c:d7:31:c6:2c:1d:36:2b:e4:32:31:8c:aa:da:
fd:14:d7:af:af:ca:3d:e2:6a:1d:3f:31:fd:0d:9b:
ee:52:b0:a1:14:ec:13:d4:f3:26:d2:ad:35:7d:03:
12:f1:4e:05:9a:37:93:bb:e1:c6:58:01:8d:87:c4:
f0:31:20:fe:20:c5:28:05:17:e2:aa:58:81:52:d0:
6c:f4:ed:aa:8e:23:ea:74:b1:ce:32:0f:02:63:a6:
64:5c:9a:08:5c:d1:a0:bd:a0:86:eb:91:90:5b:16:
6b:81:9f:56:9f:b0:18:57:92:82:88:a3:93:c6:32:
71:dd:e9:19:1d:fa:f1:23:05:eb:b6:4c:3a:0e:88:
8c:72:ef:d8:f5:13:fa:88:a6:2d:9d:49:43:a6:1d:
4c:f8:3d:51:88:9f:5c:b9:6f:7f:87:f0:3c:37:fe:
b2:5c:c3:4a:8c:06:8a:88:f4:9a:4c:e5:1d:a4:7b:
cc:0f:56:4f:3c:19:15:cd:b1:9a:c9:4b:41:82:a3:
21:74:d6:50:c5:fb:2c:1c:57:0f:20:fb:24:a8:af:
14:b0:b7:63:60:f6:8e:6e:b2:c3:ed:1d:3e:fc:eb:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C2:99:6A:E9:FE:E0:BB:6E:AE:BA:66:88:3B:1C:82:7B:92:D8:9C
X509v3 Authority Key Identifier:
keyid:96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f1:21:d5:27:41:45:cb:f9:18:df:ce:8c:c1:2b:02:4b:31:
95:5a:f6:02:f1:2c:f0:2a:fc:b6:a3:81:64:54:bd:e7:ca:9f:
46:84:2a:a9:de:8d:bc:ed:a0:77:76:1d:d6:5e:16:74:cb:64:
cd:9d:c2:86:85:eb:dc:b5:d1:3a:f2:3c:7a:6f:57:66:a9:ff:
5a:7d:22:e4:ad:3f:bd:87:64:b8:0a:70:be:dd:85:64:01:64:
cf:52:2c:9b:13:f0:e6:d2:9f:9e:03:7c:54:e6:df:fb:02:18:
18:21:4b:f6:2d:01:a1:67:ee:8a:8f:ce:67:7f:ae:82:c7:4f:
cf:fe:87:b5:aa:a2:ff:e5:b5:d6:35:54:d9:ef:60:39:94:80:
2a:86:7c:8c:51:40:68:a6:41:3e:0f:7d:31:bb:0d:3c:c9:4a:
84:e1:ea:ee:fc:1e:9f:38:17:39:53:ae:15:ba:ea:57:2f:7a:
20:74:b2:dc:5a:79:ec:d8:f5:a9:6e:d7:3c:24:97:8c:dd:30:
4e:94:62:cf:4b:02:e3:ca:81:c1:ee:ba:8c:a7:d1:41:89:cf:
80:7b:51:01:65:81:a4:89:e1:f2:0a:bf:62:d8:36:8e:58:8a:
87:02:bd:e8:18:61:bf:21:b9:14:56:57:94:c1:4e:20:d4:3d:
9f:a7:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:01 2025 by rpki-client