Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: VKdYaP41xL/gU8UXHJoou8r8OTRARKPx/VF/FGvi13Q=
Subject key identifier: 1C:D6:94:11:9F:DC:9F:C6:71:19:B1:7C:51:10:09:DF:AC:5B:FB:94
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0194BD85B8F76EC5CED689FB8EB5F6024876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 022B
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: aPHgmvvJLe/nLQRq21LUX1xeEoP/3+oZkrnTM/LvX/g=)
3: M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa (hash: dHd9hXlo/bLFC9dpW29XAWP5l4uG2XM3fAni1G6KglA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b8:f7:6e:c5:ce:d6:89:fb:8e:b5:f6:02:48:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=1cd694119fdc9fc67119b17c511009dfac5bfb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:16:9d:de:37:5f:20:5a:56:4f:32:ea:4e:
85:6a:3e:d8:63:66:7b:3b:e5:8d:40:e8:f1:47:9c:
e7:fe:a1:b4:aa:34:38:eb:29:62:8e:61:7a:48:77:
5f:e5:41:e9:bf:d7:fe:4e:f9:da:81:45:4a:71:e3:
c4:ea:71:67:1b:8c:45:cf:81:38:1a:b4:08:4d:55:
8a:e9:ae:b5:47:af:5a:60:fa:e7:1f:bd:de:17:6d:
6e:06:5e:b6:f8:f5:50:81:86:8e:e3:b8:fe:47:5e:
5d:a7:9c:c1:83:87:72:10:99:e6:83:cd:6b:1f:51:
52:36:d7:7b:08:d6:a3:ae:93:b9:19:0d:8e:96:3c:
04:a5:3a:be:e3:ac:44:b9:9b:c0:5f:ad:13:c5:43:
97:28:39:a2:ad:e7:24:1f:82:31:8a:53:67:41:03:
2a:98:11:cb:aa:85:d4:72:60:d9:b1:5d:ec:dc:71:
da:01:96:68:a4:19:fc:56:04:13:06:3d:94:e7:a1:
35:11:4c:85:5b:bc:2e:b1:83:c3:7d:a1:9c:d0:21:
e5:98:5b:b6:06:47:a5:7d:62:f6:58:5b:85:26:5a:
02:73:f8:46:00:94:15:9e:5f:4e:62:45:39:18:58:
99:a0:98:5d:51:50:e8:ca:a8:0d:34:2b:24:b5:21:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D6:94:11:9F:DC:9F:C6:71:19:B1:7C:51:10:09:DF:AC:5B:FB:94
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9a:5a:4e:c5:9d:b6:2a:73:2d:ae:5e:c2:e0:1c:de:21:a3:
d4:17:83:4c:3f:9f:7c:f8:e1:c6:68:86:18:1e:50:d2:5e:bf:
9d:af:df:f3:73:f7:8a:ef:2a:28:08:9e:ab:40:4d:54:33:ea:
36:3e:71:ec:5f:02:27:2c:6a:81:63:b6:b9:a6:9d:eb:8e:b4:
a3:4c:3d:a0:e7:5f:73:61:4d:2b:7f:07:17:31:3b:e9:39:22:
18:03:d7:d5:d6:44:2a:8c:30:cb:a6:9e:09:46:37:59:89:e3:
1a:68:4e:bc:36:80:2f:d1:f3:f6:6c:d6:e2:e9:6a:5b:ea:67:
a6:d7:a3:26:63:05:cb:dd:7b:57:d4:49:f2:8e:63:3f:fc:f3:
e2:7c:57:27:51:ec:5e:69:b6:fb:7a:41:85:87:e7:27:20:b9:
8e:f1:58:a4:9f:3e:ce:82:19:0e:56:ce:b7:0d:90:86:d0:99:
ba:23:f5:a0:a6:9e:2f:83:93:be:1b:cf:7c:4e:5b:f1:23:fa:
38:15:46:9a:fb:1f:a5:8b:e1:67:a9:ab:b0:f4:74:55:32:e5:
f4:de:1b:8b:41:38:68:99:3b:2d:c7:d1:8f:f1:5e:fd:cd:7e:
ae:14:ee:f3:a6:05:7c:b2:54:df:ca:7d:34:38:c9:fc:e9:f9:
28:99:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:12 2025 by rpki-client