Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: LoulhGKM3fati+y+Yzv/XMip0/p5laAOCQfiV/HFStA=
Subject key identifier: E7:A9:E1:0E:55:90:44:3B:75:AE:B8:D9:4E:21:79:02:3D:E7:F0:6B
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 0194BCA993FEEADC7794E6202470A98E47BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: vch/YUWZ2DPvj8o/39+VxJNi7gO5eerw8FTMbTxgR8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:fe:ea:dc:77:94:e6:20:24:70:a9:8e:47:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=e7a9e10e5590443b75aeb8d94e2179023de7f06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:ba:bf:c4:7f:d4:f3:bf:ae:06:1a:70:ca:
80:14:73:40:87:2c:a2:be:e7:9c:f8:53:4d:36:be:
fc:13:dc:18:8a:d8:5f:d3:06:b7:07:8a:71:d3:66:
54:7d:79:97:15:3c:53:ec:32:4c:78:2d:b5:a3:91:
78:bf:25:7e:a8:35:9b:02:ab:5a:e4:5b:06:f4:b9:
3a:51:52:71:66:e4:43:0a:37:ae:8d:85:59:90:2e:
3f:56:ce:b2:1e:ae:7f:79:a1:a0:ae:28:88:d1:1b:
0e:01:a9:11:b3:9d:56:4d:6f:66:17:25:ea:14:72:
ba:a2:3d:2c:17:1b:db:24:f0:34:e9:ef:9c:c1:e0:
59:34:7a:d1:8e:21:48:f3:ca:68:9e:0e:26:66:5e:
3a:d6:6d:90:0f:d0:60:57:2d:93:a3:7f:23:5e:c4:
7c:b0:6e:b7:a1:7b:63:31:8f:fc:8b:06:2c:02:ae:
dd:53:6a:66:17:a7:58:a9:c4:1b:fc:5f:3d:e1:1a:
ec:3a:8e:e0:5e:a4:e1:36:9b:75:58:6a:81:db:f5:
f0:7c:3b:e6:24:be:3e:b9:41:d4:63:67:ca:78:c5:
0c:a1:fa:b8:04:4b:6c:9b:44:1d:48:5d:84:0d:00:
9e:84:de:60:cb:ff:50:e9:e4:30:29:c8:3a:8c:25:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:E1:0E:55:90:44:3B:75:AE:B8:D9:4E:21:79:02:3D:E7:F0:6B
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:32:6c:79:2e:c8:54:ca:4b:df:f0:7c:b6:b8:fe:05:e7:59:
27:f6:c0:a4:d1:6d:8a:10:fe:88:33:21:b0:e8:35:e3:4a:1d:
f1:96:90:3e:7c:39:6b:fe:e6:c9:af:01:47:9b:24:f7:97:85:
f5:33:94:66:1e:e2:03:8c:14:93:9d:18:95:66:1e:e5:7d:22:
4b:0c:e8:b3:b3:79:23:5a:d1:f3:3a:5a:43:59:eb:3f:4a:8a:
ad:b6:67:15:35:0a:e9:74:3d:62:d1:20:c3:99:bf:7a:6d:9e:
77:ea:53:52:a8:67:31:5a:5e:64:06:7b:30:9b:17:e4:0a:30:
c2:e7:b6:3c:ad:36:77:da:08:24:37:26:0e:31:e8:b9:79:07:
d4:36:1a:a0:00:e6:db:f9:be:27:19:02:38:17:ec:95:14:db:
a5:ac:64:10:76:ce:4f:57:c6:6d:20:5d:22:a4:70:4d:df:19:
93:2f:a2:bd:e6:a7:41:69:ab:db:3c:ae:07:c7:79:55:7b:71:
a0:af:c7:86:04:4d:ad:3d:c2:2c:98:fd:85:52:d3:d7:a9:bb:
57:56:cb:2c:a8:5b:e1:a0:97:92:b4:81:3a:39:6e:ce:97:f9:
a4:af:83:44:ab:6f:f4:40:07:d1:fd:f4:d2:09:11:88:3f:a5:
81:0c:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:51 2025 by rpki-client