Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: Dc6cl0fUIOW0dPIKU3Tx0M1wEnAaBDTdPca+E5L4c70=
Subject key identifier: 7C:35:79:5D:64:C2:1B:91:BC:6E:2C:22:9A:5F:44:10:74:DE:23:20
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 0195E159A9461FE4135E26B404FE3D63031C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0B6D
Signing time: Sat 29 Mar 2025 10:01:44 +0000
Manifest this update: Sat 29 Mar 2025 10:01:44 +0000
Manifest next update: Sun 30 Mar 2025 10:01:44 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: o9pA++pr2LqhCHxahVJOYf0AfxDCCCjmKNxYio+W18k=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:a9:46:1f:e4:13:5e:26:b4:04:fe:3d:63:03:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Mar 29 10:01:44 2025 GMT
Not After : Mar 30 10:01:44 2025 GMT
Subject: CN=7c35795d64c21b91bc6e2c229a5f441074de2320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:4b:42:07:87:5f:2f:ff:9e:b3:9f:57:d8:
8e:88:ed:c7:77:22:5b:72:c1:c2:ab:12:06:ad:d2:
46:9b:e7:07:a6:93:54:0d:07:31:79:41:20:a3:40:
06:3c:92:4a:45:32:ff:2f:95:92:58:c6:fc:34:ab:
55:17:21:ac:41:c5:ee:6e:00:f6:bd:28:75:e5:89:
e6:7a:67:1e:a3:de:aa:97:1c:8c:9e:59:eb:cb:3d:
84:1a:bb:b0:ae:a5:de:fa:e8:d5:d8:9a:8a:16:24:
8e:8e:c5:1a:77:7b:50:de:2e:06:5c:d1:36:e4:eb:
74:a2:84:e6:6b:f6:87:8c:a6:1b:79:91:57:89:38:
27:9c:b5:b3:43:e1:d0:df:41:f3:3f:44:9d:e7:33:
b2:a7:35:30:3a:6c:a1:f5:a8:24:19:f5:b1:7c:3d:
6d:3c:ac:63:e4:cd:87:77:76:0b:de:5d:5c:bb:a8:
6d:01:27:d7:6e:55:91:c1:b6:63:24:3b:2f:d1:5b:
4c:93:42:9c:aa:4d:55:89:55:ee:4d:f8:61:48:86:
96:14:b1:1f:70:62:06:99:cd:16:be:93:75:d0:91:
7b:54:ae:25:c9:06:46:52:ba:64:9f:c7:ec:d9:af:
0a:e9:66:b3:42:6b:8c:a0:31:9b:24:9b:7f:f3:52:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:35:79:5D:64:C2:1B:91:BC:6E:2C:22:9A:5F:44:10:74:DE:23:20
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:28:e0:60:24:f5:9f:c6:28:49:3b:ab:2a:01:4a:d2:1e:1c:
3c:72:d0:5d:b0:0d:6a:06:62:d4:8c:c5:81:2b:ef:f3:40:bb:
e6:ac:c5:92:c9:00:91:95:94:c2:be:2e:97:07:b2:4a:4d:dd:
ae:4b:7f:50:3e:0d:fe:be:26:4a:5d:d1:d9:18:4c:bd:da:c2:
98:38:44:91:f5:54:73:a1:95:a9:d4:bd:0e:07:a7:ca:7c:ab:
fc:fe:a2:b8:3b:7a:54:b3:5a:97:99:16:e4:a9:31:fc:72:ef:
b8:20:3e:f6:58:4c:91:8f:43:57:dc:3c:6c:57:ff:05:ee:ea:
9c:9f:3f:41:01:0e:49:ac:44:6c:09:b4:64:86:ea:bf:93:d7:
20:03:72:44:88:30:3e:ab:c8:a0:08:cb:f6:2e:3c:ad:9b:72:
0b:b7:f7:ce:08:7d:30:59:46:ee:d0:05:93:1f:1e:63:88:ad:
21:c6:33:9a:87:83:0e:af:0c:47:e1:10:5f:1b:d0:a6:cb:5a:
33:8e:20:9e:b5:1f:5a:9c:a2:cf:fb:f1:50:d7:31:f5:88:14:
f6:e8:fe:a7:b6:6b:ff:67:7b:53:75:69:95:c8:e8:bb:6a:a7:
e0:6d:1a:f0:66:d2:72:46:da:db:aa:06:c3:25:24:4f:c6:d4:
7b:89:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:11:04 2025 by rpki-client