Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: 8QOcVNph82Tt5hZfk2aICeqxW4zPAaqRdbSYCmqKB8c=
Subject key identifier: 25:09:77:48:8F:31:30:E1:1B:14:9D:8A:26:26:8A:E7:C7:8C:5E:4C
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 0194BD175CF9D75F35E93635B49867D5C76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 0275
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: 0GLoopZX175+y6LpOXOV3bPTW0psjRsLUdqNN8kN1cA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:f9:d7:5f:35:e9:36:35:b4:98:67:d5:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=250977488f3130e11b149d8a26268ae7c78c5e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:f7:03:54:8a:4c:22:a5:cc:4d:31:24:57:
38:fa:cc:8a:cf:3e:ef:18:c4:53:76:a4:89:7c:b8:
6c:6d:bc:4c:7c:bb:ef:61:60:b9:8c:09:fd:e5:66:
c5:ee:21:47:a3:86:8e:4c:91:fa:95:f1:72:27:78:
33:ce:e8:40:31:c1:cf:f2:2f:84:ec:11:a5:b1:b8:
4b:ae:47:34:0b:cf:a4:2f:48:df:d4:ad:35:39:a0:
37:a1:38:a1:f0:e5:4e:06:8f:c0:b3:bb:e1:86:09:
52:3c:e1:22:c1:df:37:12:3a:3e:df:d4:1b:58:4f:
f0:0b:aa:c1:65:b7:13:2a:f9:93:af:22:a3:f4:d3:
b8:a6:6b:97:b9:4b:fb:a9:e8:0e:09:7c:d9:da:18:
22:0e:43:b7:ea:2a:bd:ae:6c:a5:19:be:43:2a:a5:
af:fe:2a:a8:d7:61:27:23:e9:9a:2e:b1:f6:67:d9:
ca:22:86:e0:4f:a5:0f:97:c8:14:34:ae:cb:80:ab:
81:25:58:a1:35:0b:89:43:14:ab:b7:eb:32:a0:dd:
48:97:dc:a0:a6:cb:77:5c:d3:76:88:f0:e8:95:0f:
86:53:53:e3:44:c0:82:32:4c:f2:1c:91:d5:ab:42:
b0:77:5a:0a:53:e7:ab:e0:c5:7b:bd:c4:8e:8d:3d:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:09:77:48:8F:31:30:E1:1B:14:9D:8A:26:26:8A:E7:C7:8C:5E:4C
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e2:5c:4f:5e:f6:5a:7d:75:d9:5f:84:da:3c:93:a9:e6:74:
57:a3:1a:cc:83:20:67:51:0a:cd:46:36:30:10:a3:28:d2:76:
35:ae:d4:06:6a:16:93:35:72:98:fc:42:11:ec:b5:4e:82:db:
09:f3:4f:b1:71:a5:57:29:58:ce:91:6a:7a:f5:41:fd:ce:71:
f8:b5:45:77:29:fe:36:2f:69:d3:67:26:b1:b5:25:db:95:1c:
b2:97:45:76:c2:d8:16:26:b5:65:80:e0:6c:f7:1e:33:a7:66:
2f:69:42:20:4d:17:32:88:2c:9a:2a:17:f3:35:1c:b0:1f:fe:
0b:c3:39:33:b1:bf:23:cb:b7:df:d6:00:3c:c5:25:9c:aa:1f:
2a:78:54:2d:25:66:0d:42:8c:4e:c5:23:a2:dc:95:e4:fd:65:
1e:b6:86:3a:48:f3:8a:39:75:44:f8:b1:4d:41:8d:c6:ad:f8:
4e:84:4c:b4:77:da:8c:b3:b1:9a:88:3f:73:5e:02:9e:8c:54:
1b:38:8f:49:47:5d:9e:98:61:5d:b9:a0:bf:2c:10:a8:9b:79:
a2:00:1c:1d:7c:c0:1a:2d:40:b6:86:cb:b4:96:37:29:e3:16:
3a:00:ad:5a:91:d6:a1:a6:b3:0c:17:69:41:31:2e:fa:c9:b9:
15:bb:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:06 2025 by rpki-client