Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json)
Hash identifier: tHub8rVlOaFlbTf17shhCiSWlIfFHEwRJ4YZUUj4itU=
Subject key identifier: 3D:60:3C:7C:16:EB:8F:88:79:29:78:22:0D:CE:CF:33:D2:9F:E5:4B
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 0194BBCEFCF50D589801DB835DBD2E0ED03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: pqv7MayT3Pedr5K89XJbrHjGidoiWFpqWZpQUjyIJv4=)
2: qxUZWESkWfPvrh5nMLtmisJ-xm0.roa (hash: QiH9IyXND+kMiLoL1S1ImhCqyZcezaR+0IjNSX+Zg6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fc:f5:0d:58:98:01:db:83:5d:bd:2e:0e:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=3d603c7c16eb8f88792978220dcecf33d29fe54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:2a:62:a7:42:09:15:f0:4d:73:2c:89:92:
79:ce:b9:71:68:63:7f:59:89:26:bc:9a:85:2f:14:
60:ef:70:87:64:b2:1f:83:ed:21:9e:df:b5:3b:3a:
49:d6:d7:16:95:f6:29:10:60:8e:5b:54:a3:66:53:
c2:b4:25:0b:e5:ee:b7:15:e6:80:7a:21:a9:81:3d:
62:7c:7d:8d:31:68:36:06:17:a3:fb:1f:46:46:d0:
ee:36:be:37:d6:00:68:20:08:4f:39:42:36:ef:d2:
0f:30:e9:b0:b7:ed:7b:59:c1:53:69:4c:06:a9:61:
54:6e:6a:b8:c6:17:74:12:8c:8a:92:28:1c:e4:da:
1b:05:b2:32:ef:2b:3c:11:23:19:21:5f:2c:8e:b3:
31:90:b4:c5:09:e5:83:ae:9a:7d:2d:1c:88:36:fb:
78:88:ad:fb:e5:6e:7d:c2:b4:4c:25:44:21:ac:c8:
0a:10:31:5d:ac:58:d4:3a:aa:cc:7b:c4:37:0d:f1:
cc:d8:2c:6e:0e:39:bd:aa:3f:0f:25:1b:d2:c7:80:
27:85:42:7d:c4:43:3c:2a:40:79:99:8b:74:ef:8f:
6e:59:55:9d:2b:61:87:06:4c:69:ba:85:f2:a4:a0:
3c:4a:a9:b4:e9:6e:52:76:28:12:a7:ea:7a:8b:97:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:3C:7C:16:EB:8F:88:79:29:78:22:0D:CE:CF:33:D2:9F:E5:4B
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:68:17:72:aa:f7:02:79:0d:c1:e2:8d:aa:1e:4a:df:39:
87:34:2f:4c:85:ae:76:97:8a:16:76:4a:b2:67:a2:67:cd:21:
58:33:43:92:ed:37:5e:b2:fe:79:82:7d:4e:62:46:51:3c:36:
a7:d4:77:4d:63:12:5d:a4:58:da:b2:01:2c:03:f8:c1:9e:c7:
a6:37:4a:42:0c:13:2a:10:3f:10:e3:f4:3a:9b:60:2b:d1:6f:
bb:8c:ca:4d:d8:a6:47:c4:33:a6:a9:ad:e4:2c:ca:38:7d:0c:
5c:ba:40:e2:3d:a0:78:06:01:d4:73:ea:f4:fd:f1:60:d6:61:
c0:96:20:b9:9b:ff:7a:9a:0e:bb:5f:df:69:c8:48:6b:a7:83:
07:d3:7e:a0:46:bc:66:cd:66:31:3c:13:19:1f:be:e3:ee:af:
fb:d4:f3:0d:bb:03:f8:3f:ab:d3:69:2d:fa:64:ce:d9:89:b4:
a4:0c:c7:d9:27:7e:28:59:3b:fd:b9:be:0e:6c:11:84:30:16:
c7:52:af:18:22:7f:c0:c0:98:36:7b:80:88:b6:8d:b7:ec:46:
94:52:cb:2d:a7:50:e1:25:c0:4c:95:a5:96:88:81:ef:b0:9b:
67:42:20:04:bb:41:0a:36:72:1f:89:f4:d9:be:80:f7:05:c8:
f3:07:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:23:06 2025 by rpki-client