Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File: Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier: 78UZfh6mouq1SEjwenylHJl4eSX8zUj203KU4zeONRk=
Subject key identifier: ED:41:2F:65:51:43:79:19:00:45:30:9E:DC:78:C9:F0:49:57:2D:18
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 0194BD175E0D9E1422234448D10127DA59F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number: 10A6
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: +z/VUMbD+qcMfe8CAw7va7fTrrRpskU2DB3kQ3N+9o8=)
2: ffIXUQgNnNxkun86gvscnN9T0cI.roa (hash: VW5SzImNSTB3Slsj3lqEAsmeeuKYUrnsLBc5k+WJ/m8=)
3: lVizdiQgX20fzcRSA4GIK4wJrtQ.roa (hash: XzPZ+5jYbipWydPDPeCQpQP8Pnh6Ui1fyKGQoWrzSvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5e:0d:9e:14:22:23:44:48:d1:01:27:da:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=ed412f65514379190045309edc78c9f049572d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:b7:d2:92:0b:64:2b:f5:3e:3c:13:95:52:
60:0f:16:32:f3:c3:12:56:f4:fe:03:69:cc:27:01:
0a:e4:c9:60:fc:37:35:70:41:05:55:98:8e:fd:82:
db:eb:b8:e6:9e:c8:fe:75:af:28:e4:a4:76:9e:8d:
e7:01:f2:49:b5:72:e1:1f:c8:f6:8d:6d:21:a5:f9:
56:c0:42:d1:e0:f7:4f:5a:bb:3f:ec:7b:f5:c2:f7:
cb:bb:d7:36:c8:0e:ab:67:e1:ea:ce:45:2c:ae:3e:
d2:89:c9:09:f8:29:76:95:55:02:49:ac:41:e6:e9:
3b:49:41:8a:54:af:cf:72:c9:88:36:be:b2:07:31:
db:a9:05:b0:ba:20:58:a7:b3:fd:64:e4:72:b9:8c:
41:fe:80:47:e3:fe:95:c1:c7:62:06:3e:5e:96:bb:
68:12:28:f6:85:e2:80:fe:04:00:b5:f9:10:1a:b2:
8c:2d:ca:57:ba:27:33:ad:61:d7:35:43:40:5f:51:
a8:05:80:5d:08:16:af:21:52:07:5d:f5:f2:89:05:
6b:c8:9f:10:d1:b4:7f:08:05:3d:d5:86:0c:12:e7:
90:23:54:e1:ec:24:b5:ea:43:6c:3b:93:aa:2c:54:
03:a4:6e:71:eb:de:eb:ca:cd:8f:9d:df:b1:b5:51:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:2F:65:51:43:79:19:00:45:30:9E:DC:78:C9:F0:49:57:2D:18
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ee:53:f2:ec:23:95:4c:69:b4:ab:69:0c:da:b7:c3:34:ff:
19:ef:14:25:58:2f:53:17:f9:af:0f:08:df:a0:b0:5c:b4:52:
eb:30:9d:2d:fa:4c:e4:aa:0c:f5:b9:6b:6d:2f:36:c0:57:d7:
95:1d:06:15:8f:53:e3:85:dd:04:e9:c2:8f:18:c6:95:e7:18:
6a:d4:4f:ea:44:e3:7b:5c:a7:80:24:e5:43:34:d2:f8:86:d5:
bb:bd:31:0e:97:d8:01:85:ee:58:d2:30:10:2b:be:92:7a:bf:
97:21:22:2e:2f:fc:be:8a:ed:00:0d:ad:4a:90:47:dd:c4:c2:
41:91:c9:78:c8:34:7e:d5:71:a2:85:1a:86:7c:a7:bd:ed:a4:
63:6d:32:4d:0e:e0:4e:bd:95:88:28:de:ea:d6:b4:43:77:cf:
70:57:95:38:03:8a:8f:e6:38:64:2e:26:d6:f1:4f:43:8c:55:
71:c6:30:b3:6b:fd:39:fa:54:66:ac:8b:48:66:fe:6c:4e:63:
a9:cb:a6:86:ae:92:9d:d2:fb:2d:b5:80:d8:ac:1b:00:03:a1:
78:f2:3f:65:94:94:cf:52:d3:5e:f9:56:a1:93:f0:b5:8b:2f:
66:22:8f:86:44:0b:6a:cb:47:7d:52:41:49:30:d5:bc:50:ec:
7f:09:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:57 2025 by rpki-client