Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: F6eID7ukWXaKdcrZhHioz0RvZy6w+Qvf8FtxGyxqdIw=
Subject key identifier: 1D:E6:24:3F:0A:85:7B:D7:01:55:4A:D4:F7:A1:2E:8E:E2:A4:AF:1B
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0195E046E425961A1E0E68016EF28A2AF8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0A94
Signing time: Sat 29 Mar 2025 05:01:37 +0000
Manifest this update: Sat 29 Mar 2025 05:01:37 +0000
Manifest next update: Sun 30 Mar 2025 05:01:37 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: pYkWjLqdw69rQki1UX6nJKgmgy1QxAYRa9Ki94OL3QA=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:e4:25:96:1a:1e:0e:68:01:6e:f2:8a:2a:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Mar 29 05:01:37 2025 GMT
Not After : Mar 30 05:01:37 2025 GMT
Subject: CN=1de6243f0a857bd701554ad4f7a12e8ee2a4af1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:cc:33:11:8c:f9:9b:53:0f:0e:6f:71:0b:
98:c6:d4:49:ef:3a:4b:db:0d:42:41:58:11:71:35:
1f:f7:45:e1:28:97:7c:ce:44:46:a3:cc:8f:cb:d5:
62:ec:36:98:ab:12:18:7d:95:61:da:da:1b:ac:25:
18:35:9b:21:02:1c:9a:31:e9:79:64:c6:8c:71:ce:
fa:31:bb:30:0c:9f:05:08:64:7b:6b:07:ac:1f:5a:
4c:97:34:71:ad:03:b2:da:29:85:b1:fa:45:68:2d:
9c:28:df:82:be:fe:e6:5b:15:c4:59:6c:1e:29:e7:
29:6f:86:d3:a4:a0:8b:da:94:f3:ee:6d:69:a3:14:
97:25:f7:f8:a4:fc:ad:ba:16:7b:f5:ee:a4:92:29:
47:5d:92:8c:e5:3c:96:67:1c:58:16:66:85:33:7e:
00:41:83:18:53:ca:83:bd:ba:7c:8e:47:45:27:8d:
73:02:f0:66:e0:9e:02:e8:b5:49:26:61:f8:0b:0b:
c3:f3:cd:f3:68:af:2c:97:59:11:aa:31:35:98:95:
97:77:c5:9d:ad:cc:d8:43:4b:20:44:b4:79:8a:eb:
f6:6e:3e:b0:d5:f3:0d:34:7a:5f:af:b4:33:b7:17:
21:e9:9a:51:f1:7d:05:9e:de:93:01:b5:27:70:0a:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:24:3F:0A:85:7B:D7:01:55:4A:D4:F7:A1:2E:8E:E2:A4:AF:1B
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:47:e0:94:75:d9:b2:d0:f1:41:b5:9d:b7:b9:ef:d0:e6:
ab:cb:74:25:b9:4d:18:27:b2:fa:60:f1:63:d0:24:3a:59:35:
91:aa:70:66:e7:75:b3:35:ed:7f:4d:62:0e:1a:42:1d:2d:e7:
08:a0:50:7f:25:42:fe:2c:b0:f0:27:af:40:b9:93:bc:3e:60:
29:7d:d6:c6:e5:a4:e4:91:2b:6e:0c:18:a9:55:b2:dd:44:a1:
e8:07:5b:d5:32:71:77:2f:20:61:bd:57:c4:02:bb:18:b6:2a:
6f:6b:bd:10:5f:49:80:d0:6e:50:fb:0a:fb:8b:ce:6d:a7:c7:
d3:4f:ad:98:84:36:33:0c:80:88:73:83:45:2f:5e:f9:61:d5:
23:eb:d1:0d:d7:dd:ac:4c:64:b2:ff:a5:52:5e:d7:68:63:53:
f6:f9:cd:ad:65:76:5b:a5:16:ef:0b:e8:ca:bc:fc:04:f3:cc:
5e:ca:1a:3a:05:a9:24:fa:3a:46:21:30:52:81:b1:df:cd:c3:
8b:3d:88:3b:bb:38:4f:21:82:71:95:09:29:ae:47:bf:fd:b5:
87:57:c7:c0:8c:b9:aa:4f:73:c8:57:2e:79:eb:24:7b:72:79:
73:6e:99:c9:8a:ea:7b:e7:a6:8c:11:68:ef:29:9a:fd:2a:b1:
7e:eb:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:19 2025 by rpki-client