Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: ApDwi4WC5mwVK1yS0VWXZV2D5faBaR/EdDd64dJzbaM=
Subject key identifier: DA:0A:96:02:96:51:29:27:03:5C:41:50:81:F7:0A:EB:46:55:54:6D
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 0194BCE08F87BA4C5CAD4691406A1A0D5FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0B09
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: JCeDf2XHW82Umugen6nAuAm+xwwH7tNtz9Q1AXmqD9E=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8f:87:ba:4c:5c:ad:46:91:40:6a:1a:0d:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=da0a960296512927035c415081f70aeb4655546d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:a7:a2:e0:fe:e4:28:6e:a5:51:18:6c:fa:
40:27:d2:02:c4:39:c0:bc:29:85:47:43:6b:8e:3a:
d0:a6:0d:c1:89:e0:f7:0b:c9:01:e0:f6:ee:88:52:
82:21:8b:cd:11:ed:f8:53:2a:18:de:df:33:cf:5d:
cc:8a:e6:68:bd:a8:4b:1c:d6:4f:ab:17:61:b2:d8:
ce:df:ba:9d:c0:f5:d4:f2:a7:70:38:95:be:7f:aa:
20:96:2e:f0:0e:98:ee:d2:3e:a0:67:ff:d9:b6:26:
2d:68:a5:ec:3b:22:66:3e:5f:3f:7c:a9:8c:40:f5:
34:a6:4c:58:84:3c:04:35:d7:e1:77:c0:44:55:f7:
25:cc:a7:81:96:66:d9:64:ed:0b:6a:4b:42:95:17:
5b:45:aa:a6:6a:8a:97:4a:0c:56:78:99:4b:b4:06:
5e:b7:37:d0:71:86:bd:9d:3d:8d:e1:ba:14:8c:54:
94:00:be:9c:ba:07:6d:87:b0:70:a5:19:92:83:bc:
f1:a0:27:12:47:d7:84:65:85:cb:b0:c1:5d:cc:b5:
ec:c9:fc:19:07:e7:11:33:f3:1b:96:8d:d6:aa:50:
8d:e2:f0:1a:2c:21:ce:d1:64:47:e3:58:de:b8:7b:
99:7e:e5:07:5f:41:ba:78:15:57:70:31:23:0c:06:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:96:02:96:51:29:27:03:5C:41:50:81:F7:0A:EB:46:55:54:6D
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:15:ac:08:0c:bf:90:81:22:31:69:b6:a8:6e:0a:d5:bb:f6:
a4:c5:0a:47:15:6b:8b:ee:07:0b:85:eb:64:67:70:92:90:9a:
f9:8e:25:43:f8:14:c4:5a:9a:d7:f7:46:6c:b0:26:b7:fd:d0:
bd:3b:07:3a:8a:c7:12:67:61:16:21:94:af:4b:b0:d0:4a:2c:
ae:c3:3f:b7:c3:a6:33:a2:fd:d5:48:e7:b2:ea:40:50:a1:3a:
cc:5e:74:7e:ff:ac:77:8f:21:9a:45:ae:ac:76:49:28:60:62:
c9:6f:69:2d:c2:f4:2c:e9:04:a9:be:33:cf:e2:20:dd:e1:a2:
49:50:40:df:e4:ce:ba:c7:ef:43:4b:59:14:ac:b9:e7:6d:3e:
0d:01:93:60:3d:0a:18:f8:b7:a1:dc:ee:a5:67:c4:b6:eb:ff:
6e:42:9a:d8:a8:9e:d2:3c:da:15:f1:78:39:8a:c5:0b:64:6c:
40:9d:de:4e:70:34:d9:0a:42:02:01:88:46:c1:4a:42:71:3b:
2c:e2:33:bb:93:c6:3d:d9:bc:29:df:e6:c9:ed:c0:42:64:fc:
27:83:0d:8d:60:dc:fd:a2:05:7c:0c:1f:5d:e4:b5:bd:17:f3:
a9:62:57:76:32:a5:da:b9:60:4e:70:22:3a:17:81:49:59:42:
58:b9:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:22:50 2025 by rpki-client