Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: WSWXv8j98jHw3/LUxtePtPmgkHmIFHgY1dJ2zqK0Qzw=
Subject key identifier: 24:FE:1A:22:0E:1C:DD:0C:88:79:AA:10:47:B3:EB:64:37:81:24:E5
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 0195E1221969E9F0F2562EBDEDF0B86E58C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 12D2
Signing time: Sat 29 Mar 2025 09:01:03 +0000
Manifest this update: Sat 29 Mar 2025 09:01:03 +0000
Manifest next update: Sun 30 Mar 2025 09:01:03 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: ZONt9PfH4GGM8zFQDWdvZJiGEmdSbaf6h8/8zEmr4zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:19:69:e9:f0:f2:56:2e:bd:ed:f0:b8:6e:58:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Mar 29 09:01:03 2025 GMT
Not After : Mar 30 09:01:03 2025 GMT
Subject: CN=24fe1a220e1cdd0c8879aa1047b3eb64378124e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:f8:b9:f0:0c:0c:5f:7e:6b:94:43:29:54:
75:01:de:48:f2:2e:59:b9:9d:7b:98:38:1d:7d:78:
89:32:39:dc:45:44:7b:8a:cb:d8:fe:a7:92:3b:7f:
9b:eb:ee:90:f7:47:36:1d:33:03:b9:77:52:4d:08:
e1:61:39:69:6e:25:e5:b5:94:fa:14:ea:45:18:34:
33:19:b2:1b:ed:0d:19:92:2d:22:dc:ec:78:b3:e3:
57:3c:79:fb:c3:cb:37:cf:fc:0e:f6:82:94:2f:1b:
7c:d1:a5:53:f6:71:d7:7c:81:c9:8b:43:38:38:3f:
76:ab:35:3f:2f:be:e6:c5:3c:e3:19:8d:21:f0:c1:
7b:6f:94:3a:48:51:30:55:ff:bc:fe:c9:35:1c:60:
40:da:6c:d8:3a:02:e4:ac:ac:3e:7b:c0:28:eb:69:
e4:96:e6:0e:a3:72:14:bd:9f:f2:c3:4d:4f:49:5e:
ab:c5:43:d1:1d:03:40:39:76:62:1f:aa:ae:18:a7:
8a:20:07:7b:49:af:ff:d3:7d:44:13:05:fa:be:84:
fb:78:64:08:db:83:92:19:1f:c5:8d:a2:66:d2:fe:
d8:2b:db:97:2f:f2:2c:08:6b:12:10:55:91:6c:6c:
f3:f6:de:69:41:48:5b:4b:bc:a5:c9:a8:0d:43:a1:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FE:1A:22:0E:1C:DD:0C:88:79:AA:10:47:B3:EB:64:37:81:24:E5
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5a:22:51:c3:bc:73:e5:73:b9:94:c7:17:3b:83:75:e3:ee:
9c:ec:ea:0d:d6:dc:76:86:a2:dd:4d:fc:ed:ec:0b:bf:4d:55:
4e:5b:2c:73:72:2b:c3:bf:ed:a7:cc:e5:69:5d:8c:57:53:01:
f9:bc:4a:93:d2:d5:20:52:e0:b8:55:d5:66:7f:a3:f3:99:e4:
e6:44:2f:5c:3f:1b:90:db:67:90:a9:c5:24:91:65:3e:ef:6b:
cd:c2:58:8b:5f:dc:7b:82:1b:4b:3a:8a:50:ba:75:81:48:16:
4b:83:8f:12:55:09:a4:1e:18:3e:c9:5c:7a:3c:6e:66:7d:61:
33:ca:17:10:e9:ef:27:87:d1:14:94:45:70:57:7f:17:a6:9d:
9a:7b:4a:c1:cd:5c:c3:5b:cf:fa:a0:20:b6:f5:76:f7:39:73:
95:69:fd:6f:7a:76:d0:6f:71:1d:eb:93:01:56:81:d6:39:5b:
81:3e:3d:ab:47:90:94:b2:ba:5e:25:1d:6f:9b:65:36:05:a0:
ff:fb:c0:d4:b5:8c:e4:67:2c:44:1c:af:eb:68:61:9a:e8:9f:
e9:46:5c:65:f2:0c:7c:1b:f0:9f:ef:7a:9c:48:ee:f8:ac:9e:
55:6d:c4:15:7f:29:23:7c:19:23:49:35:b5:31:38:ef:fe:de:
3c:fb:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:44 2025 by rpki-client