Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: 2lkqCDY3Agk8NnS39mWdnpJDfrmhIosw3wIH6GxuH9A=
Subject key identifier: 1F:ED:D9:B4:5A:27:2D:0C:12:66:67:53:4B:A5:59:4E:77:71:1E:F8
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 0194BD17764DD2013ADFE0E2A260CCBC91F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: SEcmK5Dk1jFRKuIrxDwQ0LWwgU8XDqbaNSb4ICERfeU=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:76:4d:d2:01:3a:df:e0:e2:a2:60:cc:bc:91:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=1fedd9b45a272d0c126667534ba5594e77711ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:62:7c:5b:ed:10:d2:43:2a:6d:2e:05:dd:
95:fc:f4:35:a5:97:2c:e4:81:a0:aa:e7:97:69:aa:
01:f1:97:c8:a9:3a:89:47:4b:bf:e5:5a:41:9c:78:
8f:b0:62:ed:c7:ee:81:2e:ab:81:3d:26:56:ed:55:
69:fe:a6:96:1a:52:09:9c:83:90:96:1e:e1:18:08:
f2:96:6d:30:4e:cf:4b:32:b8:e9:54:8e:83:e7:d7:
9d:6a:41:cd:00:23:35:d2:97:a5:1c:cb:00:b5:66:
44:7f:a4:5f:aa:aa:08:19:f4:cd:13:20:2b:b1:a0:
70:35:9d:39:c1:e3:d1:31:91:b4:0e:e8:95:e3:04:
33:ed:68:bf:d9:25:3b:87:b0:c6:3d:88:d4:85:d1:
fb:25:0c:0c:c3:9d:39:51:36:c4:70:39:53:6c:49:
45:4c:9d:7a:90:e0:c3:1a:46:9c:58:9e:fa:f7:e7:
78:cb:02:03:e8:83:68:81:bf:c2:c4:16:40:88:31:
3e:f9:56:92:65:62:6d:b1:e7:71:42:bd:ce:08:d5:
21:33:4b:fd:40:98:47:70:c1:43:96:5f:94:10:c1:
2d:09:e1:2c:37:f3:cd:87:58:3f:97:a2:27:96:cb:
a4:01:08:de:62:5e:95:b9:be:33:95:3b:ba:70:fa:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:D9:B4:5A:27:2D:0C:12:66:67:53:4B:A5:59:4E:77:71:1E:F8
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bf:a3:19:4b:2f:05:4f:92:6b:43:a4:7a:9d:0d:c6:83:be:
36:06:bd:69:f3:e9:8b:d3:14:a7:df:62:a3:94:02:d0:f9:8f:
06:00:94:23:5e:cb:b3:6f:92:e3:9d:bc:88:ba:9f:31:77:ef:
92:9e:19:65:f6:cd:eb:08:5a:93:63:6e:34:f6:ab:4b:18:4e:
97:f5:e5:f2:c1:c5:8e:dd:d5:3a:77:86:1c:62:29:1a:f5:f3:
7d:3b:12:07:f3:d8:f0:e2:2d:22:73:f9:02:fe:f6:d0:24:3c:
20:2e:b3:04:80:90:a3:5d:be:f8:84:c6:0f:54:aa:0c:29:a9:
06:34:f1:55:8b:96:1f:c5:4f:41:62:1c:93:f3:61:2d:af:a1:
3f:a7:d0:e4:36:a3:2e:ec:6f:60:bd:d4:8b:17:bd:8f:6a:20:
39:63:36:17:5a:48:95:d7:92:fe:cf:8b:84:b6:92:80:df:3e:
6b:e2:76:5a:0e:7d:06:53:9f:a3:79:f5:94:61:f8:a5:74:00:
56:76:69:f0:eb:aa:ee:4e:08:f4:2b:58:69:33:cd:f8:6b:95:
17:37:8d:c4:07:d3:8b:50:6d:f6:5e:50:58:d8:02:a4:a9:53:
f6:0c:56:ca:37:b7:3e:01:de:52:ca:0f:77:9a:18:2b:a9:c8:
94:c3:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:50 2025 by rpki-client