Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
File: lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft (raw, json)
Hash identifier: EQw2eoXwL2nn8J6nVdI4y9itMLsUJakrUftCYKTBCys=
Subject key identifier: A0:74:89:63:78:FC:2B:AA:DF:F1:FD:4D:C4:52:81:65:30:DF:4D:87
Authority key identifier: 95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
Certificate issuer: /CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Certificate serial: 0194D030D6FA661BE6F8C8E8C05E2E0CC6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
Manifest number: 1285
Signing time: Tue 04 Feb 2025 09:00:49 +0000
Manifest this update: Tue 04 Feb 2025 09:00:49 +0000
Manifest next update: Wed 05 Feb 2025 09:00:49 +0000
Files and hashes: 1: lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl (hash: zoLAoiX/jmH5EyBJaZ+ItesdqOVkh7zCbC8P3BeRvmE=)
2: xW2URwmy3MAc43ukfcbqMYMuxdw.roa (hash: Ma/n0ismeTjhAebqRYXqWhimU+dr8eW7Fszdn7DlAoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:30:d6:fa:66:1b:e6:f8:c8:e8:c0:5e:2e:0c:c6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Validity
Not Before: Feb 4 09:00:49 2025 GMT
Not After : Feb 5 09:00:49 2025 GMT
Subject: CN=a074896378fc2baadff1fd4dc452816530df4d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:9d:9f:75:2f:7e:90:56:d0:a8:ac:db:83:
9a:ab:e5:8e:04:28:b7:f2:6b:29:9f:89:0e:43:d1:
b5:74:e7:0c:68:39:86:17:d8:c0:30:81:58:d8:98:
5e:ed:64:55:54:6b:36:aa:b9:cc:d3:e5:bf:05:47:
01:36:7e:d0:ba:71:45:cb:5b:c1:84:46:9a:8c:95:
04:b0:ee:eb:8b:5b:35:ef:76:e5:38:cb:1e:af:a1:
bb:91:d3:72:c4:c3:20:76:ec:23:5f:03:05:ad:c3:
8b:2a:a0:90:83:8c:38:52:6f:b9:e8:81:95:8d:c5:
c7:6e:d7:cd:3e:a0:a4:83:51:6f:b7:03:5a:34:03:
68:73:a4:c4:9f:f5:10:97:1b:ba:d0:38:f1:24:92:
61:e1:f2:ed:40:76:5e:62:8e:d1:e5:bb:4c:4c:86:
cd:f7:6f:74:ba:f9:43:1a:bb:e5:41:76:8f:aa:b9:
b9:16:5c:be:ad:e9:9b:b8:8d:a6:4a:70:a7:ba:9e:
81:40:85:23:18:e4:d4:6d:52:ee:f6:ca:47:e6:71:
67:6f:a1:8d:79:eb:df:5f:f5:88:7c:1d:d6:a7:35:
fd:23:85:f0:e7:c3:7b:f6:2b:a2:dc:b8:77:58:fb:
e5:b4:87:cc:0f:c2:5d:1e:6a:62:f9:4b:37:ce:c3:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:89:63:78:FC:2B:AA:DF:F1:FD:4D:C4:52:81:65:30:DF:4D:87
X509v3 Authority Key Identifier:
keyid:95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d8:d1:29:2f:9f:64:22:2c:28:ed:79:fe:cc:56:a7:7a:d3:
ed:c1:03:6f:31:67:5b:fd:23:8c:6e:4b:2a:81:eb:ae:d6:d8:
7d:1d:00:91:dd:c5:a7:77:47:e4:33:12:2c:bc:8c:5f:d8:1d:
53:e2:04:d5:0b:24:ed:56:4a:0c:60:cf:28:0c:46:33:43:7c:
7c:c4:6b:5b:6b:00:f3:81:f5:68:cf:5f:68:1b:68:25:de:29:
d0:78:6a:5e:02:d6:03:e5:5a:cf:db:15:31:1d:01:8b:7e:88:
8f:1f:b2:77:7a:2f:8e:16:9a:56:75:c8:21:17:33:c3:90:40:
66:32:3b:74:68:a4:f9:81:4c:9d:9f:db:04:80:6c:cd:34:83:
2b:f6:3c:f5:c2:41:15:0d:2a:ea:26:ee:94:7d:de:2a:a7:8a:
fb:7c:13:b7:e4:df:12:52:52:bb:f6:e4:e8:8d:74:54:80:af:
10:9c:c3:25:ac:69:7d:9e:91:93:c0:00:7c:58:79:6b:f8:c1:
22:23:d7:63:84:90:b7:cf:3a:66:c9:33:2a:5e:e4:4d:17:da:
d7:2a:ca:be:37:55:48:64:aa:3f:0f:da:02:ee:8d:7c:8f:c5:
c7:80:3b:a9:3f:64:22:6a:ad:97:d3:76:37:94:90:4c:dc:9c:
00:b4:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:47:51 2025 by rpki-client