Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: RjIRmU45E+odKbW587zKI1SeNKfbcnLtnJ2RxbWVouY=
Subject key identifier: AE:6D:D6:1C:91:18:D6:97:28:DC:CA:F7:A3:D7:38:A1:20:5D:BF:A1
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 0194BBCDF4618BE71A14A92D3697AC2E6552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 0206
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: t4/QAjbHOenpiADJ+jK0vQVA4jNWLjBDm83X8J3HTnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:61:8b:e7:1a:14:a9:2d:36:97:ac:2e:65:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=ae6dd61c9118d69728dccaf7a3d738a1205dbfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:38:8a:64:aa:8e:2c:88:06:a9:70:89:58:
a7:53:73:61:cc:05:c8:8e:90:67:be:0c:df:91:5d:
2e:20:21:fd:bc:3a:0f:39:7b:7a:d7:40:24:09:9b:
b5:14:5f:8a:72:ba:e2:3b:34:89:9c:ee:d2:12:90:
2d:3a:e4:b9:2c:2d:0a:48:61:61:35:10:a6:d9:8b:
87:9c:5b:70:e8:5a:ef:c2:b5:7b:6d:e9:c2:e5:52:
d6:c6:bd:4c:c0:25:3c:87:b2:a1:ee:98:e8:71:c7:
11:47:bd:de:87:24:f4:2b:36:f6:9a:61:29:e3:f2:
d2:5d:83:79:f8:9f:1b:4e:6a:41:60:8b:06:a3:b6:
63:8f:06:43:31:8b:6b:41:dd:4f:68:07:4d:4e:f2:
27:99:ea:32:7f:04:19:3e:1a:60:80:ae:3a:93:04:
09:de:81:66:46:6c:8a:13:90:65:1a:e3:38:ff:68:
e7:2c:e7:01:e1:4e:a7:e0:3f:df:09:7b:52:39:9c:
24:17:dd:2b:95:15:00:31:67:a8:83:b7:8d:22:b6:
85:8f:09:fa:a5:6c:b8:cb:12:90:0b:59:74:9f:75:
e4:5c:09:1f:9a:48:ac:95:8a:07:e6:54:d4:05:0b:
8c:36:e2:bc:fa:34:21:4b:22:82:6d:cd:27:74:61:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6D:D6:1C:91:18:D6:97:28:DC:CA:F7:A3:D7:38:A1:20:5D:BF:A1
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:d2:96:12:50:ce:44:ee:74:30:12:91:3a:43:8d:a8:af:
27:96:ef:06:78:3d:e4:4e:2f:ad:b5:1e:da:10:fd:69:dd:e6:
28:7c:75:38:46:60:46:f2:65:a4:3e:5c:60:0c:12:b9:a3:57:
72:63:6e:3a:a6:fc:bb:4e:68:68:cd:6c:f0:4e:59:b0:c9:cd:
ee:b6:71:d5:5d:43:87:79:37:22:ca:4c:ba:da:0e:65:c6:a9:
2a:cb:53:34:a4:db:a3:4d:29:d1:dc:36:19:26:95:d1:cb:df:
72:c0:d1:ee:0a:6b:bd:5e:cc:28:16:03:6e:b0:2d:69:e8:fd:
70:cb:38:0c:2a:0a:54:38:aa:6f:d2:65:83:e4:63:14:9f:b4:
c7:c4:55:4e:ae:38:84:c7:f7:2a:50:cb:3c:86:b6:f4:7f:00:
3c:05:1d:04:48:27:a7:df:43:71:a2:f3:c9:97:a1:25:83:19:
b5:7b:78:e7:e9:40:5f:05:a2:b0:14:7b:dc:81:39:3f:0a:ce:
cb:5d:d0:94:32:ee:14:06:72:76:b3:54:95:82:6a:72:67:5b:
7a:d1:49:12:c2:ac:4e:71:22:33:13:29:e2:af:65:ab:ce:f5:
7c:fa:5a:9a:0e:64:21:e3:d7:b4:7e:75:ab:63:f5:85:08:61:
6e:55:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client