Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File: il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier: 0jrUkl4SUxwSOtLdBniP8t4RpxQ65NdiBpoTQoyuPj8=
Subject key identifier: 2C:CE:A9:CB:C3:BA:58:84:7A:7B:0B:4F:84:FE:5F:E9:D8:AA:20:06
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 0195E0B42DFDAB923A39FB178D5C115C1527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 07:00:59 +0000
Manifest this update: Sat 29 Mar 2025 07:00:59 +0000
Manifest next update: Sun 30 Mar 2025 07:00:59 +0000
Files and hashes: 1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=)
2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: XIOxj7iJcLj4hjV8VIf50YvjkAtMAtJ5DNbgzO9G3po=)
3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:2d:fd:ab:92:3a:39:fb:17:8d:5c:11:5c:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Mar 29 07:00:59 2025 GMT
Not After : Mar 30 07:00:59 2025 GMT
Subject: CN=2ccea9cbc3ba58847a7b0b4f84fe5fe9d8aa2006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:ec:f2:f6:83:df:bb:e4:6c:3b:c7:77:3f:
8a:dc:af:b7:d4:17:93:80:2b:14:4c:6f:28:03:be:
73:4b:73:25:bc:be:ae:37:2b:f8:a9:55:9e:2b:60:
58:de:7c:7d:cb:54:67:f1:49:5f:54:0e:04:29:b6:
24:93:8c:05:b5:3f:24:46:f7:be:0c:18:51:84:f7:
cb:11:08:77:17:32:5a:d2:5c:ef:08:77:60:b7:ac:
90:10:ba:7b:da:dc:75:47:a1:18:9e:3a:03:34:bd:
a6:7b:0b:02:2a:3e:dc:68:11:38:9d:87:f2:e3:30:
b8:59:52:12:67:60:ed:a1:93:75:01:8e:46:35:d9:
cf:f3:d7:3e:e7:f7:a8:84:86:5b:6d:83:48:93:7a:
c0:4e:28:0a:c3:58:31:33:08:63:40:46:66:4e:81:
11:39:33:70:7c:3c:51:51:fd:3a:64:11:7b:b7:e9:
a7:06:67:e9:57:6c:41:4e:15:a0:b7:98:09:ea:9e:
65:f7:97:28:d3:5f:f5:80:9d:31:bf:a6:64:b9:72:
d6:e1:87:b6:44:93:51:5c:a2:8b:54:e0:ba:ec:80:
22:a8:11:05:a9:bb:44:c6:a5:7d:44:4d:92:b9:a3:
a1:5c:26:9e:e0:7f:9f:02:57:a1:5f:90:2b:04:68:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CE:A9:CB:C3:BA:58:84:7A:7B:0B:4F:84:FE:5F:E9:D8:AA:20:06
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:93:21:7b:00:fc:f7:b1:be:87:5f:6f:b9:e9:ea:a0:82:f4:
8c:09:64:23:28:77:e9:1d:bd:e4:39:10:a1:14:c2:60:70:19:
cd:1e:c3:1b:cb:15:3b:f5:cf:41:ad:56:1d:1e:9e:a4:04:78:
f1:b7:52:af:b4:1a:02:fd:31:29:7d:72:41:9a:35:ee:dc:cb:
6a:6c:43:03:93:da:3b:5a:c6:66:c3:aa:32:40:ee:c3:89:8c:
82:97:7e:e8:88:d7:70:0e:79:c3:7f:a5:a6:75:f1:bb:28:bd:
d1:01:11:b0:a6:71:7b:3f:19:44:c8:27:75:89:ff:55:cb:63:
7b:f1:19:1c:9f:5e:f2:1f:a3:bf:36:52:fa:2d:7c:61:ff:31:
6e:5c:c1:ed:fe:22:9a:c7:0f:55:95:94:58:bb:5d:46:65:e3:
a7:50:29:f9:68:72:70:be:2d:7c:a2:25:cf:a5:de:cb:b9:39:
03:43:b9:68:3f:fd:bc:33:21:84:0f:69:38:84:07:d5:99:64:
87:cc:98:e1:8a:81:48:a0:8c:c2:2a:13:2b:e9:4a:88:db:6a:
b2:68:0e:77:87:87:81:93:1a:93:ce:5e:37:b0:ce:16:fb:4f:
ff:ef:00:da:3b:fc:17:a8:8a:c9:42:d9:4c:71:3e:1a:d9:1d:
76:bd:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:32 2025 by rpki-client