Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: VJJdauEv+MnqUK7l0P1TirVveQ5QaCdDjPlQkZoe+aQ=
Subject key identifier: 00:ED:8E:E4:90:DA:D4:92:B8:08:D6:16:48:BB:62:11:4A:17:46:E9
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 0194BC3C9AD8D6A280AAEB48CBE06AA9E7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 066A
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: Ga/2ShNhHp8FIsLvCGa/g6axVGGYakeRpYtQDc84Ol0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:d8:d6:a2:80:aa:eb:48:cb:e0:6a:a9:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=00ed8ee490dad492b808d61648bb62114a1746e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:9c:18:fe:7c:20:16:2e:72:cc:9b:45:81:
6e:ed:10:92:2c:10:59:d9:69:94:53:8f:22:61:e2:
00:8d:02:ce:c4:44:7c:76:05:d1:bf:68:de:a1:4f:
76:43:bd:c2:d1:8c:45:69:78:32:41:05:c1:b3:c1:
79:03:7f:dd:7f:ce:08:3e:4a:04:b5:cb:4b:03:21:
47:5c:5c:0e:af:9f:0c:a8:8e:54:1d:3c:2d:60:29:
4a:dd:22:00:bc:ca:63:64:36:23:4d:bd:2e:a8:fb:
b6:3a:15:5b:da:9f:31:d8:ab:cf:9e:3f:74:97:c8:
73:46:7d:3f:2d:87:ef:03:43:e6:ed:65:28:ec:4b:
f7:59:a3:8a:1a:61:be:2e:00:5f:1b:8c:1a:b0:e4:
81:65:bb:1b:15:1a:1e:c6:f4:03:86:4f:c3:48:5a:
ad:6f:25:78:28:01:13:0a:2d:3b:a5:2e:8d:df:3c:
84:9e:85:7d:0e:7d:0e:12:c0:ef:b0:4e:e2:05:91:
c1:98:39:f8:0c:97:db:16:60:62:b7:2a:30:97:ba:
09:e9:c7:fe:2e:69:f3:54:23:1e:a3:ba:7d:d4:ef:
94:db:5c:a4:e7:0b:33:fc:b4:81:a5:96:25:97:be:
2e:ac:88:fd:30:d5:94:f6:6a:6e:a2:eb:d8:44:68:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:8E:E4:90:DA:D4:92:B8:08:D6:16:48:BB:62:11:4A:17:46:E9
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:25:fb:80:2f:77:02:00:80:a2:39:1c:e1:04:1c:59:fd:ac:
12:dc:6c:58:e7:02:ff:ba:7f:18:fe:79:d1:ff:6a:1d:13:8e:
1e:6b:2d:01:8c:60:04:7d:d6:21:e3:b8:fd:57:90:cc:4d:07:
9e:ca:a2:ce:e9:de:38:fc:a1:9f:7b:78:c6:fc:ec:90:f2:82:
60:17:ea:c5:25:68:d1:7d:39:c6:bb:1a:73:db:29:0d:4b:65:
be:4e:1e:9d:fd:32:6f:13:19:c3:14:75:14:ed:2c:58:3c:45:
ac:1b:dc:14:37:6b:02:e5:3a:a2:2c:00:05:6e:e9:bb:2e:9c:
5e:0b:a8:76:98:0b:56:a4:2a:1a:0f:c6:2d:45:0e:a5:ff:3c:
b2:6b:8a:57:fa:e1:d9:23:43:26:62:92:d9:14:4e:e8:43:4f:
7e:9c:c2:73:a6:d2:c1:91:18:59:ae:f6:0b:a2:2d:b8:1e:f2:
71:ed:67:f5:7a:55:87:b7:27:69:76:73:09:2b:97:a8:c5:37:
9d:31:7c:95:84:6d:5d:c9:1a:a1:5b:99:16:a6:55:c1:5c:26:
88:d0:af:88:a1:2a:f4:dc:6d:e6:a9:f4:95:51:1f:0e:71:c0:
d3:a6:72:b5:21:30:93:3d:d4:d8:4b:32:bc:b6:43:83:de:c8:
79:03:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:32 2025 by rpki-client