Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File: rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier: NAW9ZBoeQk2geMiV1jTcsHniCfKbqjFinBVao1xpc0s=
Subject key identifier: 60:FE:2B:D4:27:0D:9A:70:38:25:E4:71:51:29:E0:E5:72:AA:4D:EE
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial: 0194BD17FAA90951E26F6F27904792650A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: JhWEH1-OplFyfRpnGPaAH68zRx4.roa (hash: 58PwPKP/vJBtdtkIKyrehJCWwjagistWjkfUZr2AKRU=)
2: Kalap6T2m16JSwDjwLxjNXHdNyY.roa (hash: JVJj7fl4hbm6J8kNJ+/MRSc7T2RN3F+EXAgFNtKUtbU=)
3: PUwPc09p8c8_Sn1YM_ZYypexbaI.roa (hash: OH20qakQRBJhyXsGRRFFaEvlTNopBkE9EYzgH/uJXtA=)
4: Qa2_2S_PkTHxTJ-vKPqlybewfm4.roa (hash: drfKDlHg11rvWBFBJCgdefYg02WWSePfByGXqjFYb5E=)
5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: rCS56eMZxF8bDKVhgDZVFFgIFLB7T+wR6/PK3j2zVaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:a9:09:51:e2:6f:6f:27:90:47:92:65:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=60fe2bd4270d9a703825e4715129e0e572aa4dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:2a:cf:da:75:82:ca:03:d5:ac:28:60:8d:
67:c8:ab:5c:f6:2a:61:bf:b9:7f:97:12:c6:96:10:
f9:13:b3:46:38:fd:4b:db:e0:a3:86:1d:35:d6:7a:
d2:bc:06:1e:e9:ca:1d:f6:13:a6:8e:ad:dc:f7:4f:
12:c8:34:65:f8:a0:b7:7f:17:a0:30:83:d0:e2:1b:
c6:fa:8b:7f:98:d6:00:3f:4a:d4:eb:68:f3:23:b0:
74:64:3c:cc:88:b5:e0:9e:73:43:9d:0c:a1:95:5d:
9a:f7:57:79:3f:be:83:df:d0:90:12:80:1a:8a:20:
0a:4e:81:d8:2f:c9:10:45:c1:f5:a6:c5:8a:94:32:
a7:e0:ea:92:b8:92:2f:ae:2b:e5:02:6f:24:8e:84:
2a:59:5b:8e:47:02:aa:5d:e0:e6:f0:70:cd:ae:b6:
89:6e:ea:a7:b0:45:df:96:00:fe:f6:a7:a7:a1:1e:
65:0b:ff:fe:9a:25:4f:e2:43:23:e8:86:f3:d6:06:
f7:d2:ca:fa:28:d1:70:a2:12:1d:7c:5b:aa:e6:27:
05:e5:88:13:26:bc:6f:86:64:30:b5:a8:8b:2d:55:
c6:6f:84:9e:98:ea:62:39:24:15:60:aa:19:fe:0b:
95:00:5e:0b:8c:49:b1:27:95:4b:6b:8b:18:46:12:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:2B:D4:27:0D:9A:70:38:25:E4:71:51:29:E0:E5:72:AA:4D:EE
X509v3 Authority Key Identifier:
keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:74:bf:df:89:c1:ba:6a:15:04:fc:c4:90:39:51:b9:9a:c6:
5f:18:76:e4:e1:05:42:04:af:54:f0:fc:d1:df:f1:f0:63:9e:
d9:cf:5d:81:db:8c:98:5b:a1:17:0f:0a:76:4b:dc:1a:41:cd:
f5:17:22:9f:87:b8:fd:ee:2b:ea:d3:a4:85:60:64:45:ec:b9:
6f:cc:ff:b6:80:bc:37:b8:c3:90:48:fd:00:ab:d4:79:f2:ce:
0f:c7:52:e2:32:00:eb:8b:0c:2c:f1:99:37:9a:db:b4:86:44:
30:df:ef:d2:29:6a:f8:93:92:da:b2:ce:90:fc:c2:3c:0f:bc:
99:ff:31:0a:fa:fa:7f:d2:f7:64:18:9d:5b:a9:bf:09:ef:77:
36:a8:26:3a:f9:35:34:1c:fd:3d:ba:e8:86:00:cc:46:28:51:
45:6f:52:6c:87:65:13:ad:0e:eb:23:24:ef:0c:c8:97:6e:d1:
98:e8:c4:39:40:43:14:a0:92:97:b0:56:a8:0d:d7:e9:86:f0:
bd:c7:27:f0:cd:69:79:9d:2a:79:ac:d5:d6:6a:c5:d9:f3:e7:
74:ea:a1:9e:f9:b5:49:5a:62:0b:e3:64:a9:cc:81:15:ea:a6:
a8:74:90:90:f1:eb:ef:87:fc:b5:0b:27:53:04:80:4c:d6:11:
db:f0:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:37 2025 by rpki-client