Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
File: lrEip9unQykwyDH1epQG9zRJxbc.mft (raw, json)
Hash identifier: 4AegmK9WgIiK19JAcW4cAqm6y8B4Ru3I1V2/WZUk0lE=
Subject key identifier: 79:26:50:EA:B1:30:D5:90:E6:C1:D8:E3:3B:06:41:2B:B6:F3:17:34
Authority key identifier: 96:B1:22:A7:DB:A7:43:29:30:C8:31:F5:7A:94:06:F7:34:49:C5:B7
Certificate issuer: /CN=96b122a7dba7432930c831f57a9406f73449c5b7
Certificate serial: 019593E2F81231EBF5258686AB827660B30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrEip9unQykwyDH1epQG9zRJxbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
Manifest number: 13FE
Signing time: Fri 14 Mar 2025 09:01:20 +0000
Manifest this update: Fri 14 Mar 2025 09:01:20 +0000
Manifest next update: Sat 15 Mar 2025 09:01:20 +0000
Files and hashes: 1: X9lq2TyNxo7WZXjl0jh86V8-l0E.roa (hash: USn0rj/YpeMPKgnpBvU5Anc5Vafiy63ZYOhqIK1Toao=)
2: lrEip9unQykwyDH1epQG9zRJxbc.crl (hash: 7RqGrUlfCjseeRw/pOz8qFFCNPnmAveuHx3zfyuLfvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:e2:f8:12:31:eb:f5:25:86:86:ab:82:76:60:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b122a7dba7432930c831f57a9406f73449c5b7
Validity
Not Before: Mar 14 09:01:20 2025 GMT
Not After : Mar 15 09:01:20 2025 GMT
Subject: CN=792650eab130d590e6c1d8e33b06412bb6f31734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:0b:df:1f:5f:8c:9d:6a:be:7b:da:5a:61:
2c:ba:81:84:4a:2a:f4:3e:a2:74:c5:a4:2b:13:b3:
fd:33:41:f4:2a:dd:b4:b1:ee:32:f5:62:1f:cd:25:
c2:0b:e4:49:b6:a7:85:56:15:00:de:f5:46:d5:db:
01:68:dc:d8:1c:68:09:b7:de:ad:e7:0f:6e:3b:13:
f7:e7:3c:11:b5:54:94:33:d9:ba:a9:71:9c:76:ba:
50:81:f8:2b:7a:ef:bf:5f:f0:85:57:9b:69:6a:69:
93:f8:ba:20:28:f0:ea:07:89:1e:17:3a:16:41:5c:
0e:f0:6f:4d:31:0c:93:24:2d:bd:fa:c9:65:3b:44:
3b:4d:cb:e1:05:8c:7b:b1:12:ef:86:cf:78:a1:f8:
d4:f2:3f:12:5a:69:3d:3a:1d:7c:05:df:c8:ff:cb:
96:c1:41:0a:6a:76:76:a3:ab:83:4d:9e:0c:f9:a8:
de:a1:48:96:5e:5b:b7:c2:2b:9b:4e:f0:05:66:3c:
e0:0e:a4:67:3b:30:55:e4:d9:2a:04:3e:14:3a:4a:
dd:1b:6f:44:a9:fc:b0:3b:d9:46:bf:5d:9f:0b:83:
61:40:04:14:b5:61:db:5f:aa:f3:81:dc:11:c9:0f:
5c:e7:98:cb:b8:6f:b4:81:e8:17:b1:0a:17:d4:b4:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:50:EA:B1:30:D5:90:E6:C1:D8:E3:3B:06:41:2B:B6:F3:17:34
X509v3 Authority Key Identifier:
keyid:96:B1:22:A7:DB:A7:43:29:30:C8:31:F5:7A:94:06:F7:34:49:C5:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrEip9unQykwyDH1epQG9zRJxbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2d:82:fe:ac:71:7e:fe:6d:54:b4:bb:f5:9d:97:16:6b:79:
72:5f:c5:33:db:c3:75:c4:16:84:d7:58:0f:89:bf:b8:39:0c:
90:33:56:81:83:f2:2b:1e:c0:67:3e:d4:0e:fb:31:1f:62:6b:
1e:93:d2:f4:75:6d:e9:7b:1d:da:0d:a4:1e:4f:bb:0e:63:25:
97:a5:67:6b:30:c9:20:0d:df:cc:53:71:d9:99:c0:d5:36:16:
e9:0d:5d:25:7b:fb:cb:4c:02:44:86:05:09:7b:99:43:87:c4:
5f:ce:c3:08:72:79:4b:ec:40:8b:8a:02:c2:b1:d9:40:b1:da:
4b:74:c6:c6:0b:58:5c:7f:88:69:5c:a8:21:4f:ab:b7:71:9e:
85:47:28:ea:62:3a:24:3f:1b:83:b8:b4:ad:c0:56:d1:c3:a7:
eb:dd:f3:af:a6:f9:60:b2:9b:ac:25:15:0a:50:6a:cc:3c:46:
8a:86:ef:e2:a2:d8:09:cd:ab:9c:b6:c6:38:3d:dd:2f:08:f7:
33:14:21:cf:8e:fd:ab:f9:74:d4:23:5a:85:d9:1b:fd:77:52:
a5:4d:b9:44:14:b1:d9:cb:de:cb:5c:83:f5:ce:98:e0:ac:ff:
c2:67:ed:bb:d7:9f:07:1f:0f:0d:ea:cc:ad:e2:5f:36:a2:c8:
eb:b7:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:22:06 2025 by rpki-client