Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: 95TBojdTr8IzywZI+G5qrQydEsgN9evoMxZ16pFwr10=
Subject key identifier: 18:92:65:C0:F2:40:58:74:EF:DD:AB:D6:89:5F:F2:E9:D1:18:48:4B
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0194BD17896A4C9036275CA7E61BADB0C8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: 7P7vwmrfpnZ7ZIxmCnOKQ52Q3ZuI4CPyef2/KhID7Dc=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:89:6a:4c:90:36:27:5c:a7:e6:1b:ad:b0:c8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=189265c0f2405874efddabd6895ff2e9d118484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:a9:fb:97:5e:8c:4c:9c:aa:bd:fb:a4:f3:
50:2d:a1:36:1e:60:7c:33:26:16:9d:63:b3:21:63:
6e:f5:d8:e2:54:ee:4c:c4:9e:01:c1:02:eb:8e:af:
fd:e6:35:c3:e5:03:a0:1c:fb:43:d6:94:ef:40:4d:
f5:40:c5:64:71:f6:6a:52:c2:43:04:e5:1d:25:4e:
d0:e2:ae:97:e1:cf:09:87:71:77:d3:46:cb:3d:9f:
6c:a6:5d:78:2d:9f:15:1b:e6:67:99:03:25:0a:4d:
ed:65:29:03:12:79:25:a4:99:6a:6d:c9:17:d9:22:
61:00:4e:50:79:55:6d:b4:99:f2:db:ea:74:3a:84:
63:0d:7c:ae:a3:62:ac:1b:cd:7f:46:15:01:be:d6:
3e:cd:03:6b:ec:21:aa:6b:20:06:2a:a1:27:e0:a6:
3d:1b:43:ea:e2:0c:3e:ff:43:e5:0d:f1:04:ba:f2:
fd:6e:51:44:45:54:6d:2f:2f:2a:fe:9e:02:7c:9d:
69:ef:aa:8f:61:3f:40:81:52:f7:f4:54:c3:7a:17:
80:5e:99:51:42:4e:1e:c2:eb:1f:6b:ad:11:7d:1f:
a3:c5:f7:6d:be:65:8b:48:38:2b:9e:bb:44:93:d0:
53:2f:1c:f2:48:cf:d9:f9:f9:6a:c4:40:4a:df:62:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:65:C0:F2:40:58:74:EF:DD:AB:D6:89:5F:F2:E9:D1:18:48:4B
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:52:77:17:56:e3:65:07:92:93:73:53:a1:df:66:80:bf:
1d:ad:31:48:73:92:0d:fe:29:24:b7:2a:20:8b:21:38:d4:75:
ca:38:64:02:81:4d:c5:81:69:6a:1d:f2:c3:f7:19:a1:90:e3:
70:f1:29:11:6c:d6:35:15:9c:0d:81:97:73:12:7b:5c:f5:ef:
83:c2:1c:02:19:b1:94:d7:33:84:8a:cd:cb:87:2f:55:30:a8:
d3:48:d5:f8:49:78:39:c8:7c:e6:8d:33:ff:e0:f8:b4:c6:e2:
a4:07:f1:b4:3c:2b:8e:e7:12:31:0e:57:09:38:fd:f3:b3:12:
2b:04:bb:48:01:7a:c6:92:d6:ab:4d:56:cb:12:2b:99:aa:ec:
cf:04:fc:f1:bb:88:e8:1f:59:42:b7:0e:35:59:b9:d5:8b:1e:
0f:59:87:ef:02:4f:c5:60:ed:81:74:e1:76:40:bc:4d:b4:67:
4d:2a:d0:b8:50:fb:a5:7d:25:fc:65:65:3b:86:82:8d:73:1a:
3b:dd:fc:86:ed:78:c3:0b:7b:29:48:68:5a:9a:80:b6:13:f2:
a0:a4:25:7a:54:35:7f:e9:fd:f2:c9:62:31:d4:47:f6:93:21:
2e:e5:78:35:c0:19:ca:89:6c:c0:8a:e8:90:1b:43:55:62:52:
6c:2c:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:24 2025 by rpki-client