Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: nnR2DkOAmb+T1OQgxFmLUb7AocYe8Bcr096yGzoO/+I=
Subject key identifier: F9:D2:18:7D:3B:B4:F2:FA:3F:91:59:9C:ED:D4:D2:96:3F:AE:6A:CE
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 0194BC72EF7B6F6C85D2F9AF896F8D0C9F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 035E
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: G+PmSeIKKXwiW0SxZ/zNA1OgsQ5s9QfHytOaghtCL9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ef:7b:6f:6c:85:d2:f9:af:89:6f:8d:0c:9f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=f9d2187d3bb4f2fa3f91599cedd4d2963fae6ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:34:ae:c5:33:50:4e:58:d9:0b:af:30:d4:
43:4d:ef:e9:cb:05:74:fe:e1:46:89:bd:f0:dd:e5:
80:5f:6b:dc:46:fd:b8:cd:e3:09:35:d3:3a:47:56:
04:50:b7:25:9d:72:e1:e2:b1:39:89:f1:42:ef:e0:
ac:f6:62:91:06:ca:d0:20:d1:66:1e:f1:f4:f9:4d:
06:1f:c3:84:94:03:51:a8:ea:7d:d3:3f:d3:9b:60:
ec:b7:90:26:bb:35:27:40:b2:49:37:35:cd:a3:fb:
26:f7:44:bd:44:65:98:95:0b:6f:f5:da:ae:26:68:
22:4f:77:0c:83:ef:4d:7c:bf:3d:3e:4e:51:f4:ae:
99:86:e1:93:bc:42:79:a7:49:60:97:d0:f8:76:42:
4b:48:65:0a:dd:68:77:d4:04:23:6c:0a:ed:d7:ac:
bc:60:16:25:45:7a:b3:17:98:e4:e1:65:8f:69:0e:
17:12:a9:6f:a7:a4:55:5e:75:b4:0e:a4:7d:8c:80:
a8:cb:a8:a3:48:0e:8a:8a:53:37:92:0c:1f:d0:45:
0d:38:77:b8:8a:5b:93:77:3c:5a:18:23:e7:4c:af:
4d:f7:c3:05:a1:d4:37:40:15:3a:dc:83:62:ff:9c:
08:2e:8a:8b:43:a3:0b:98:f0:c5:7d:fb:8a:f7:50:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:18:7D:3B:B4:F2:FA:3F:91:59:9C:ED:D4:D2:96:3F:AE:6A:CE
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:20:0a:06:d9:d4:cc:62:7e:b5:fc:48:52:9a:f4:8f:58:
cb:98:0d:d3:d5:24:b5:28:a7:be:51:d9:59:92:f1:02:c5:d4:
aa:81:e7:86:67:1e:39:cb:15:4d:e9:05:be:eb:d1:04:4b:54:
6c:9c:43:52:99:57:ff:73:5c:1d:e8:77:c7:36:17:3d:58:09:
ee:2d:9b:f3:a1:f6:ef:df:24:fe:38:67:d4:89:6a:e9:f8:ee:
7a:58:d1:dd:85:13:9f:87:e1:9f:96:c4:92:69:3f:39:9d:6b:
05:74:ce:db:94:c4:e0:0f:e0:62:21:69:c2:7a:b2:6f:cb:e8:
78:5d:09:f7:f6:80:e8:a4:b8:db:bd:66:41:a0:ea:ea:d9:8f:
5f:2b:29:d4:83:35:fe:aa:70:e6:56:5b:ec:fc:09:0c:56:6e:
aa:c8:ff:87:2c:16:cc:1d:cc:40:7f:9d:e3:7b:65:8f:eb:cf:
42:63:81:02:83:a1:3a:85:80:ce:84:4b:c2:2d:a0:2b:c5:b5:
03:c0:50:ef:64:8d:14:4a:bf:2f:9e:82:cc:78:3f:9c:e7:c0:
24:ee:b1:a6:4d:8f:d4:f6:8e:2e:78:7c:e0:d3:e2:7e:97:08:
2f:8a:8a:8b:e6:b2:76:58:bf:d7:96:f4:70:0d:af:d6:6a:ad:
af:45:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:35 2025 by rpki-client