Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: x2J9l5DonHU7X+F4oI1w01VU/g7Q2m9EgYMTyqMGBHY=
Subject key identifier: C8:02:9C:17:A0:4F:A7:28:E9:43:36:6A:B0:FC:85:34:FC:D8:A1:FA
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 0194BC7315EB8F867F9D39B9542051885A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: o5GPgZMr1y1yjuEPGdiWZc9yxBaCL6SfNsVggDFPZiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:eb:8f:86:7f:9d:39:b9:54:20:51:88:5a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=c8029c17a04fa728e943366ab0fc8534fcd8a1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:6b:a3:2c:90:9a:8b:f1:15:1c:9c:39:59:
42:f3:2d:ed:cf:e0:6c:26:d9:fc:29:19:d5:2a:e0:
47:72:e8:7b:d0:24:07:18:be:67:72:22:e1:05:d5:
4c:37:67:53:9b:44:7d:a9:11:1f:02:cd:8e:76:a5:
41:f5:e3:c9:a1:af:6a:80:32:b9:ef:c2:1e:1e:c6:
e1:dd:43:17:4b:44:a4:b5:ae:5b:51:0f:b0:c8:3f:
23:ce:2d:27:8b:5a:f4:a2:bc:4e:95:98:b3:ec:01:
aa:ae:43:8c:6a:71:07:8a:c5:c9:9c:69:34:db:7f:
84:f3:58:e3:2c:ee:58:e7:21:24:5e:ad:35:d0:8e:
d2:42:6a:63:72:14:21:8d:86:50:31:7a:45:d7:f0:
fb:69:12:5a:f2:e9:0f:89:d9:8f:70:24:d2:c6:d3:
a1:3e:03:a7:c4:79:65:57:8d:16:dd:33:e9:1e:c9:
98:0c:2a:3d:0c:af:eb:96:77:b7:b1:89:38:16:fb:
ba:29:d2:de:98:7e:da:83:fe:3a:8d:8a:dc:32:b2:
e0:57:d4:f4:83:32:fd:8f:4b:0a:73:b2:cb:31:62:
d7:73:c9:23:d1:8b:ce:95:8d:3b:71:c0:d7:5a:29:
99:b8:c9:30:70:d6:ad:3a:c8:ec:a3:32:1c:10:81:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:9C:17:A0:4F:A7:28:E9:43:36:6A:B0:FC:85:34:FC:D8:A1:FA
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:77:8b:e2:8b:6e:e3:9f:04:81:c1:66:ba:7c:8b:0c:94:1b:
5a:8e:ce:23:12:43:2b:8c:67:f0:81:f7:c7:65:d0:0c:c8:3c:
e5:e6:ce:3f:d3:d9:00:3b:a1:fa:de:dc:77:1c:fe:da:69:5b:
db:22:b1:c9:1a:1e:fb:d0:7c:d6:1a:37:45:0e:64:c6:2e:26:
f0:b7:45:90:5a:73:23:c1:3f:30:a5:40:ae:ff:5d:93:30:34:
4b:16:ea:e9:fd:60:e9:d6:79:92:e2:d0:17:e0:b1:44:2e:b6:
1a:c2:20:4c:16:51:0e:8c:1f:aa:fa:6f:41:01:41:3d:87:c0:
74:f8:c0:99:21:15:9a:e1:d4:5d:1a:cd:54:eb:3c:e7:15:99:
7c:21:00:d5:84:20:a4:89:c1:15:ef:a6:99:9e:e0:7b:61:e5:
09:fb:1e:43:d8:35:07:9f:22:b7:24:26:48:62:26:26:2d:87:
05:e2:60:59:bc:63:cc:06:1f:e1:0e:ba:5d:0b:10:b2:ee:a4:
72:55:61:27:19:ce:54:f8:8a:13:b3:50:5b:54:56:ba:d2:8f:
d1:13:d5:67:bb:3f:d5:dd:b6:80:5e:7e:e8:0e:1d:57:b9:79:
3c:48:97:24:54:ba:10:15:cc:07:39:d2:67:10:25:f9:f9:74:
1e:d9:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:11 2025 by rpki-client