Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json)
Hash identifier: dB7r57u5pazn4cdrZdu64GgpeW11Zol+1JlVb10jFww=
Subject key identifier: 8D:F0:78:F3:D5:56:71:E9:C2:BA:75:CD:D6:D2:90:3C:F4:C9:7C:F7
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 0194BBCEE54816F7B7A9C88E55697F78D857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
Manifest number: 1411
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=)
2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=)
3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: fLQvKYL4JosMob/zgs/8wgOfU+I8I6P3hBVyneMVE8E=)
4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e5:48:16:f7:b7:a9:c8:8e:55:69:7f:78:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=8df078f3d55671e9c2ba75cdd6d2903cf4c97cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:fb:47:41:3d:f1:0a:95:c0:b1:20:2f:ae:
ca:d0:77:73:54:5d:ea:6f:17:0b:c3:44:d9:c1:da:
16:f8:34:da:a6:d6:6a:81:46:4d:9c:af:76:d6:47:
43:31:18:0f:98:fb:93:a3:26:99:26:0c:fc:40:ab:
17:86:d9:7a:87:d0:8a:3f:e1:fb:6b:7f:29:e6:6a:
98:32:da:54:8b:fb:41:92:3f:b6:4a:4d:c4:fb:3a:
94:93:6f:0c:65:64:60:47:ef:ca:3d:09:33:23:8b:
4c:1a:1a:08:6c:9c:62:ee:6d:b8:64:11:6d:a0:ad:
53:62:56:a3:a5:67:ca:98:27:51:53:da:42:65:f7:
56:90:11:38:a4:0c:38:cb:db:b6:9b:41:38:e7:54:
49:00:98:39:76:ec:cf:31:d3:35:d6:eb:60:0f:27:
7c:33:b4:f5:da:e8:8b:f8:fe:9d:4e:6b:f9:f4:f1:
4c:e7:da:3a:43:21:43:82:35:c2:0d:a1:2f:71:29:
df:c1:96:b2:f0:22:93:9d:3e:e4:55:1b:bd:8f:08:
2f:f1:9b:de:85:f1:81:95:70:35:ce:74:29:8c:50:
a0:b6:b8:ef:61:3e:8b:9b:e4:ff:3c:ac:a5:2d:de:
68:71:78:79:47:b4:ca:46:13:04:80:ad:fd:d9:f3:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F0:78:F3:D5:56:71:E9:C2:BA:75:CD:D6:D2:90:3C:F4:C9:7C:F7
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:87:c0:f7:c7:3f:a8:bd:83:c3:bb:41:76:4a:ce:7c:ea:0f:
6a:62:1d:dd:98:b8:6b:d1:fc:60:91:f5:3d:4d:6d:88:8f:97:
cf:55:c2:88:c3:2c:7e:45:e8:af:c2:c5:8e:b9:02:9c:55:3a:
83:30:9f:20:1c:d8:69:8b:81:0e:ba:32:95:59:b6:63:d1:45:
4f:35:ee:ad:d8:d6:5f:7e:d1:2f:aa:8d:0d:71:2a:e8:ba:1a:
a3:62:e9:c1:02:c4:76:aa:99:df:96:0f:f2:3f:e4:ca:e9:36:
07:9e:4a:66:b6:d8:37:8e:df:1b:f0:65:a5:0b:a6:00:a3:29:
05:fe:6f:7a:e9:11:74:a8:30:df:17:57:a6:0b:0c:ff:23:08:
df:c5:c0:79:eb:cf:c5:56:88:63:26:ea:62:fa:bb:48:73:01:
be:58:e7:67:5f:f2:67:2d:4d:2f:ea:f0:31:22:5a:23:ed:7a:
36:1c:40:6d:9c:9b:e2:fc:60:13:09:8b:81:1e:ab:d1:aa:95:
9a:ce:ef:6f:d3:c9:67:af:43:26:4c:51:97:ad:08:d4:a7:0d:
e7:df:f3:8f:19:db:f7:81:95:ac:7b:c5:e0:5e:63:9f:ce:b7:
26:85:97:22:46:52:5a:65:62:bb:30:16:ff:6c:41:2e:4a:cb:
4e:83:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:59 2025 by rpki-client