Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier: yoIiAX0QBi9sy4sMfWm/lpDlLtlQGOMqXd86FL2XaIU=
Subject key identifier: F8:86:27:DC:37:F6:42:A0:B1:49:89:64:62:8A:D2:C9:34:F5:9B:EF
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 0194BD17707B2C222178C6E9654DDB957120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number: 0377
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: g6Ii6vO1d24Y2ociOHWUnMaK3hDY0GB3s6UZuc688fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:7b:2c:22:21:78:c6:e9:65:4d:db:95:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=f88627dc37f642a0b1498964628ad2c934f59bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:dd:36:68:9b:ce:c0:00:5e:44:ed:9f:87:
4b:52:7d:ac:d4:ce:5d:69:71:5b:11:90:c8:b4:4f:
d9:52:d3:43:ab:7a:f2:b6:3d:70:b6:51:8e:50:36:
ad:ee:6a:a6:20:39:97:c5:99:ca:71:8b:d2:60:2b:
b4:7c:30:9e:b7:d7:89:d1:1e:9a:63:bd:2d:57:90:
53:db:ca:81:38:a9:04:f5:49:b7:8f:25:75:c4:4c:
cc:9c:2c:6f:b3:b6:2a:28:3c:04:92:54:be:1a:2d:
e4:a2:fc:51:fe:53:0f:f8:f7:6d:cb:5d:27:e2:fd:
96:16:3e:be:3c:12:33:d0:ca:bc:9b:03:c7:be:54:
b4:ab:17:e9:b1:d8:e2:a7:4c:4d:b5:f1:62:49:f0:
76:d6:ab:d4:87:89:09:9e:6b:d3:21:be:16:96:c6:
38:93:42:ff:b0:28:a5:fd:df:6b:15:2a:d2:36:43:
57:5b:fe:c0:0e:f6:52:dd:aa:71:5a:d1:f5:c8:b4:
5d:1a:9e:1a:29:d2:25:14:45:af:e3:83:bc:92:b7:
f3:d1:55:c5:37:2b:70:39:7f:59:55:bf:64:71:c5:
cb:0d:0e:2e:a0:83:84:dc:19:cc:c8:61:3c:8b:b1:
4a:5e:e3:c6:a9:fd:8b:1d:54:e5:2d:48:43:9f:2f:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:27:DC:37:F6:42:A0:B1:49:89:64:62:8A:D2:C9:34:F5:9B:EF
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:f4:a1:08:48:a0:f7:1c:3a:e8:65:30:80:b8:b4:33:2a:
f7:4e:96:40:e6:99:0e:51:d4:35:d2:e3:1d:85:16:34:b8:c8:
5a:74:8e:db:3e:06:ca:40:95:0b:ca:6b:96:ae:d6:9f:7d:3a:
41:0e:9d:a1:48:c7:38:d6:67:3d:a1:03:07:d4:cf:b2:7f:da:
c5:f7:a3:2d:36:18:42:87:ab:6c:f0:74:65:55:bb:d3:d2:69:
86:fc:52:65:3a:18:c8:48:ee:03:38:9f:bb:ea:17:42:c0:dd:
ad:68:f2:da:02:5f:87:2b:77:29:ca:7e:87:f4:44:4e:7f:a6:
35:26:fb:f3:e6:ad:44:96:47:fb:8f:16:7c:c3:5a:27:19:d1:
98:15:98:2b:60:7c:ae:18:36:62:d2:3a:db:0f:94:78:7c:e0:
7b:ea:90:d5:e8:ac:be:9b:f3:20:6b:14:ed:dc:10:55:dd:78:
12:61:9b:60:f8:a6:6b:e3:cf:72:85:4a:92:eb:8f:7d:bb:41:
89:90:5b:e3:93:0f:32:dc:f8:1f:97:33:b8:40:d9:48:ae:7c:
c8:b5:89:97:5c:b6:fa:47:62:31:27:28:c7:95:da:98:fe:e7:
da:db:cb:fb:dc:e2:28:14:9d:a9:21:a2:4b:ac:8e:1a:a2:da:
04:cf:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:54 2025 by rpki-client