Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: IOxZfszGzKiUlbHgjQsEgEafXF6WY2lkNmCzVO0hN8A=
Subject key identifier: 44:0B:C1:63:E4:44:7F:03:74:BB:D8:44:8C:5A:27:FE:B2:E2:6D:B8
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 0195E0B44E70003C1536F668C6C319AABE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 07:01:07 +0000
Manifest this update: Sat 29 Mar 2025 07:01:07 +0000
Manifest next update: Sun 30 Mar 2025 07:01:07 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: IuTbwcUUe6NuLbdOAUkPltGEimPocsPd3bb0Qo43r/4=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:4e:70:00:3c:15:36:f6:68:c6:c3:19:aa:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Mar 29 07:01:07 2025 GMT
Not After : Mar 30 07:01:07 2025 GMT
Subject: CN=440bc163e4447f0374bbd8448c5a27feb2e26db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:7b:39:3b:7a:a5:c3:9f:58:c0:9e:96:9f:
85:41:45:29:5a:a0:24:39:d6:ef:78:32:4c:af:4d:
89:60:a3:48:1a:03:3e:cd:5c:64:d3:11:ed:f3:6d:
ad:a9:9d:53:2e:03:2d:c1:34:73:20:ed:90:10:d7:
5d:d7:77:74:70:d2:5d:77:32:e5:f6:89:03:d1:de:
d2:d1:a1:9a:14:5b:2b:c2:f4:78:98:69:ff:69:d7:
77:a5:59:24:2e:4f:06:ba:3c:b1:cb:1a:03:e6:fb:
ab:ac:6b:47:49:b9:0b:43:7c:56:e1:08:29:51:21:
e2:59:41:92:44:83:07:2d:d5:1d:03:6f:e6:7a:13:
e3:2a:22:79:2f:eb:dc:bf:bc:86:36:a3:56:46:36:
3b:50:53:a0:1b:21:97:28:fb:17:f5:d9:17:fa:89:
b5:46:71:fa:b7:8c:50:f3:9e:07:db:00:77:28:e6:
13:d1:0a:73:3a:d3:fc:5a:18:37:01:32:9f:bb:68:
e6:91:34:0c:00:78:99:c6:43:42:71:42:e4:98:6d:
d9:17:b2:e9:7a:a4:5b:33:01:57:d6:b2:8e:14:b2:
ee:58:57:ee:c8:1f:71:cf:e1:ce:a3:a8:70:a4:9a:
90:a3:c4:5e:9a:73:7d:c8:d9:c0:c9:d1:80:9b:25:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:C1:63:E4:44:7F:03:74:BB:D8:44:8C:5A:27:FE:B2:E2:6D:B8
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ba:a6:69:da:c5:90:d5:c5:45:98:65:84:d1:58:57:09:41:
bc:cb:19:f0:c0:d0:e3:9f:8c:17:1e:9c:c4:ac:78:9a:ce:09:
3f:4c:8c:72:aa:f2:da:65:e9:d7:f2:57:e9:d1:1d:4d:17:bb:
e6:cd:62:53:da:9d:10:63:58:e2:8e:1e:89:00:85:f6:80:85:
82:f2:b4:70:c4:6c:17:32:ce:06:4f:51:b1:08:0f:97:f9:93:
cf:7e:fa:2b:c5:22:db:f7:21:07:4e:49:a7:2d:27:49:bd:41:
59:41:c0:08:96:8f:f3:d5:24:1f:44:c6:52:2d:33:c3:53:18:
76:54:b9:93:9e:4d:1b:0e:b7:11:2a:26:af:13:74:d8:f9:cc:
2d:53:aa:e7:09:82:d9:ac:1a:e5:57:6f:e9:76:f0:67:6f:ab:
ce:af:58:0b:ea:a3:c9:8f:84:94:e5:8d:c7:13:07:1b:03:1c:
61:b1:9f:29:f2:07:25:41:33:69:0f:06:d6:7c:9a:f2:19:e9:
87:84:d1:f8:96:9d:80:07:34:50:41:e7:9b:89:a9:7e:ea:1b:
7f:ef:54:7b:e9:8a:70:b1:ac:5c:b2:cc:a7:51:ac:23:8a:e3:
26:65:36:4d:b8:e1:d1:db:22:e5:39:81:3f:9c:d3:64:3a:59:
7b:06:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:21 2025 by rpki-client