Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: xJvNdv+BLjYaw1XHKPyd0pzXhBqcmZVMh9C3N+Oh+Gg=
Subject key identifier: C1:0A:21:6B:D0:4C:53:C8:29:00:14:73:7C:EE:C6:C7:CD:EE:0D:B6
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 0194BCA9A6C0B6CBC4AD9FF7833B44DAFC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: HK6OvM1YTy3iWbE6IvFqYbwK0oMWPqywC+eMqpU1vjI=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:c0:b6:cb:c4:ad:9f:f7:83:3b:44:da:fc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=c10a216bd04c53c8290014737ceec6c7cdee0db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:07:f5:a5:72:b9:9c:79:64:5b:b0:35:5b:
1a:8c:cf:fe:88:e6:b3:01:13:da:c0:3a:61:03:d1:
e3:71:ec:ac:d6:56:97:ab:d0:13:f1:ee:d8:38:b8:
92:e8:cd:e3:77:8c:d6:fe:f8:25:0e:35:7e:cd:37:
29:c7:aa:cf:aa:c1:d8:c6:c9:cf:13:f1:f7:ec:02:
e8:01:7d:62:ff:3e:1f:26:21:94:0f:19:be:5d:90:
bb:64:19:77:f2:84:91:cc:e1:36:89:fc:69:f9:70:
f7:0c:6b:74:bd:52:8b:a3:14:e7:cd:2f:58:8c:0a:
46:90:3f:9a:18:a8:34:7f:dd:13:17:c1:a2:aa:08:
14:36:18:46:4b:ad:fd:1a:89:bc:cd:6d:3d:de:e2:
92:07:dd:ca:d7:66:35:7c:82:02:7c:ba:d1:7d:c8:
45:76:a9:ed:a8:4a:9f:78:03:1d:50:cd:ec:e7:8d:
68:f0:b8:57:e6:82:61:01:24:5f:39:ec:ac:a2:e5:
42:58:9c:f0:26:a1:02:92:8a:c0:1d:76:dd:17:44:
25:05:ee:4d:18:1d:39:d9:58:e6:3a:38:59:0e:35:
50:d1:55:ea:58:82:0d:6d:01:d9:da:07:34:47:09:
c4:6b:b7:8a:6f:44:54:a0:20:c8:16:9d:bb:ec:b6:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:21:6B:D0:4C:53:C8:29:00:14:73:7C:EE:C6:C7:CD:EE:0D:B6
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:80:49:00:de:f3:57:32:df:80:d7:40:2f:e9:b3:74:e1:4c:
27:c0:c9:52:66:95:a7:ce:0f:a2:23:21:9a:18:ed:3a:19:4e:
6a:4a:c4:31:29:aa:9a:f6:a1:27:07:f8:f4:19:2a:a5:ea:7e:
f5:34:35:c0:fd:5a:df:30:f4:28:cf:0a:1d:7b:18:86:52:78:
5e:d6:22:99:33:7b:b7:fb:1b:3c:f6:19:85:2a:f8:94:0a:41:
30:3d:5c:73:fb:86:eb:c5:3e:94:34:51:42:e1:da:2f:5f:95:
02:03:f0:65:f4:1d:a1:c0:0e:73:41:83:6f:97:75:e5:f0:a0:
a2:80:c9:e6:76:37:01:37:13:a5:44:71:80:f8:dc:a2:50:e3:
dc:cc:71:0b:da:61:e3:4b:11:d4:79:a9:ac:94:cd:17:80:0c:
76:8c:ea:db:d8:32:13:0d:78:e2:00:d9:26:50:64:65:14:16:
8c:db:0c:53:d3:e2:fc:33:37:59:ed:7b:d1:01:d0:44:cb:a6:
ab:6f:09:af:51:0b:6a:01:0e:8e:51:04:bc:0d:68:63:01:de:
77:26:c8:f6:d7:85:ab:2b:a0:2d:e0:a9:ff:45:cd:7b:c5:3a:
e6:21:2a:76:27:4a:5c:ee:61:27:80:c3:12:7b:6f:dc:92:e5:
9a:90:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:18 2025 by rpki-client