Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
File: lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft (raw, json)
Hash identifier: pm7RaiHqLM9Lz9kpli83hZRlCtf1gsez2Y6CdQ1uxfA=
Subject key identifier: 6E:30:C0:54:D8:38:77:4E:10:8F:D0:D5:B7:7F:7C:BD:7C:B3:78:AF
Authority key identifier: 97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
Certificate issuer: /CN=97206b5201df70eb916669b455849647797ab679
Certificate serial: 01943E7E2A04D2430E7057816A4658728303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
Manifest number: 0360
Signing time: Tue 07 Jan 2025 02:00:43 +0000
Manifest this update: Tue 07 Jan 2025 02:00:43 +0000
Manifest next update: Wed 08 Jan 2025 02:00:43 +0000
Files and hashes: 1: Rxo9pDtt6zt7rkKAYui8cbObPrY.roa (hash: bzsoD5nC/Bv/TzwFJ8nDFXxOv5XrIKH5PBrfXWzU7qA=)
2: lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl (hash: x9ZjlCcBoBUp7ggMpz9ZJa49LjvaRY2no+DYNIrR36w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3e:7e:2a:04:d2:43:0e:70:57:81:6a:46:58:72:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97206b5201df70eb916669b455849647797ab679
Validity
Not Before: Jan 7 02:00:43 2025 GMT
Not After : Jan 8 02:00:43 2025 GMT
Subject: CN=6e30c054d838774e108fd0d5b77f7cbd7cb378af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:98:a7:ad:d6:6d:20:5f:4a:95:d6:bc:6f:
f3:42:67:c0:60:a1:4a:2e:76:78:df:1e:08:aa:31:
cc:4e:4e:ea:ed:0a:a4:1a:9d:51:44:60:2e:70:88:
46:9c:07:83:c7:73:56:f6:8b:88:23:90:25:da:85:
8d:98:3c:73:e8:09:2e:22:38:c2:75:e4:33:cd:f2:
6e:71:16:26:0e:58:e6:8e:d6:dc:9f:96:a7:aa:03:
06:aa:d9:a2:1b:c7:f6:ce:e3:9d:43:b5:a3:02:7c:
d3:cf:28:2b:1a:ac:c9:87:4c:0d:28:a0:19:b0:dd:
15:6d:5a:1b:10:1a:02:22:5e:6a:b4:97:ca:76:b0:
61:51:81:f5:0e:a9:af:58:59:0d:2d:12:e3:ca:86:
88:d0:db:66:b5:22:ea:bd:a0:db:37:3b:b8:85:1d:
00:7b:c9:e3:06:52:5c:99:79:0f:70:42:db:7e:0e:
ff:e0:af:71:35:c3:2d:39:c1:8b:26:d1:f8:4d:13:
fb:0a:85:2b:16:49:27:48:f0:c0:41:ce:eb:8b:52:
38:d5:26:5a:9a:51:9c:45:67:ec:dc:89:06:18:32:
62:c5:14:da:27:93:4b:36:8e:02:1f:75:da:70:2c:
50:30:ab:3a:d7:a1:f1:98:e9:65:58:ef:dc:79:95:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:30:C0:54:D8:38:77:4E:10:8F:D0:D5:B7:7F:7C:BD:7C:B3:78:AF
X509v3 Authority Key Identifier:
keyid:97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:8a:71:b9:fd:0e:c9:f1:4e:10:b0:03:62:d1:c6:4e:a9:
31:74:a3:6d:7c:47:c4:3a:28:cf:60:d5:96:71:a0:e2:c3:50:
ef:a3:2c:9d:e4:4a:ec:3d:f2:be:ed:cc:4e:56:2e:3d:44:54:
e5:3d:61:66:68:fb:8d:25:80:fb:c7:ba:c9:7e:0a:94:99:de:
6f:b6:da:9a:f7:2e:e0:d3:a7:20:c5:11:d3:7e:6b:e2:35:73:
bd:72:27:25:09:30:69:bc:21:d2:08:30:bb:5a:29:de:d3:8d:
3f:fc:53:c9:f4:6d:4b:bd:f9:2d:45:e1:db:33:50:51:03:30:
84:cb:e8:cc:fc:71:57:d3:70:3b:9e:d4:7e:ce:1b:7f:fa:de:
b0:7d:48:4f:b4:84:c6:c9:55:97:dc:86:98:8c:3b:e6:d4:dc:
4e:d3:5b:ad:50:77:9b:b8:3e:51:9f:85:ce:35:51:26:d3:93:
fc:9f:4d:3a:73:4d:61:4d:9a:2a:1b:41:3a:0b:e5:f9:80:97:
d1:37:ac:71:6e:2a:a8:90:4c:03:bd:4d:b1:15:bc:57:25:cb:
67:81:81:4c:4f:46:58:98:af:1d:30:63:ae:35:87:2a:af:a0:
fb:02:90:d3:39:81:95:5e:e7:ab:44:47:cd:04:f1:7f:9e:67:
fb:a7:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:01:25 2025 by rpki-client