Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: W1CsqlkGTnSxdO9yCvqd2JWAPT3MOL9ZfZUzayEF6Po=
Subject key identifier: 5D:C3:DC:D4:92:2C:19:C6:29:AA:E7:83:E1:73:C9:32:B9:E1:B5:88
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 0194BD4E826F536584D1FF27A3189D407A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 10B9
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: 90qJ19FONNMHXmj8JoXlK+i7BvX8KssI/+HRU0SClDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:6f:53:65:84:d1:ff:27:a3:18:9d:40:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=5dc3dcd4922c19c629aae783e173c932b9e1b588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:f4:8d:2d:b0:42:14:e6:80:eb:fd:76:59:
74:4b:55:04:5b:9d:eb:e5:2e:9e:4c:8a:5a:e8:e2:
a1:a7:d0:80:6f:5e:f6:c3:00:3f:8d:57:22:e1:8b:
86:78:76:79:45:aa:4b:da:21:82:31:9a:ed:4b:46:
01:fd:0e:d5:b6:4c:81:79:78:c2:1e:28:f8:e4:b6:
fc:22:30:f5:d3:ab:fc:81:45:46:78:aa:08:d6:21:
da:b8:b9:b4:df:08:aa:04:2b:d5:f6:3a:ed:f9:62:
11:10:f2:75:c5:e5:05:d8:5e:2e:56:8b:1e:1c:3a:
86:fa:19:ae:bf:b6:f5:e9:55:f1:21:35:b4:99:04:
93:ab:86:b6:f7:0e:39:b1:33:c5:46:9f:8e:6c:b4:
49:14:b8:ce:09:b2:78:a9:50:f5:71:11:5c:81:d6:
5c:83:18:3a:66:1e:e9:f3:84:df:92:5f:82:b3:34:
e4:64:ed:2d:c7:71:a7:c0:f4:20:f9:54:27:65:a0:
a9:1b:bd:7a:3d:1a:71:5b:b3:35:c4:7b:ca:4b:6d:
f2:19:de:9b:0f:d0:60:f4:2c:32:7c:18:0c:eb:40:
77:c6:ba:2a:03:3c:4f:49:b7:75:a1:7a:46:ac:df:
46:2e:d6:e8:9c:17:f8:51:ba:4d:cc:de:f0:0a:4e:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:DC:D4:92:2C:19:C6:29:AA:E7:83:E1:73:C9:32:B9:E1:B5:88
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:f3:68:be:14:4c:e4:29:07:21:c5:5b:35:ab:a5:e7:0e:
63:a0:63:d5:6f:5b:bb:6d:a9:b7:5a:43:32:d0:37:50:7d:b9:
0e:70:3e:44:b0:ff:34:61:91:a2:16:9f:cc:b1:6c:8f:49:c9:
c8:93:70:7b:e5:72:df:a9:87:f1:6c:5a:2b:32:70:b9:6c:c9:
a7:06:9a:61:66:33:ce:9e:64:53:9b:7d:d4:d4:7b:ad:59:aa:
dd:3d:21:90:34:19:9a:35:82:3c:ee:8c:00:5a:db:9c:48:8c:
01:e1:df:f1:e3:81:bc:0b:f8:7d:3d:2e:b5:e2:18:02:5f:ba:
2f:84:95:60:a0:72:de:8e:b3:98:e7:9a:3f:6f:e9:6f:6f:ff:
d5:11:34:cb:5e:f3:b8:69:9d:c0:89:6a:1c:89:e3:79:d7:3f:
eb:fa:01:8e:ff:e1:cc:5b:a0:94:10:db:06:68:12:26:aa:43:
71:8a:64:93:12:7b:a1:14:b1:2b:ee:d8:e1:d1:98:00:64:e2:
8f:01:81:96:d0:8c:a9:bc:55:16:7b:fe:85:fb:57:7c:fe:70:
09:3a:2e:66:af:75:75:2c:d2:a7:ac:7e:c2:ba:d5:02:2a:a8:
ea:2e:bf:42:76:85:a4:05:b3:4b:7c:48:8c:70:a9:67:fe:f5:
37:83:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:23 2025 by rpki-client