Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: tEyTG9mRCoj7es3K2A5HQ8wR4mmsOavK5D1yb5ahozQ=
Subject key identifier: 10:52:4A:96:3E:99:18:07:D1:3A:E9:E7:DA:BC:AB:81:E1:70:F1:55
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0195E0465B1BF175CF570920DB0441538142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0D77
Signing time: Sat 29 Mar 2025 05:01:01 +0000
Manifest this update: Sat 29 Mar 2025 05:01:01 +0000
Manifest next update: Sun 30 Mar 2025 05:01:01 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: tNUWkfID61A3axUOCoaH8Bk4VKHxBYOX5G9LqsPhrZM=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:5b:1b:f1:75:cf:57:09:20:db:04:41:53:81:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Mar 29 05:01:01 2025 GMT
Not After : Mar 30 05:01:01 2025 GMT
Subject: CN=10524a963e991807d13ae9e7dabcab81e170f155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:df:e1:83:77:98:cb:42:17:6d:cb:98:f5:
53:d2:60:10:bb:85:9c:37:be:0b:e8:76:c6:54:78:
46:d1:d6:d8:d1:22:82:ca:91:9b:4c:88:cf:24:8d:
1d:67:d3:c4:fb:43:b3:8e:37:bf:89:b3:cb:56:cb:
0b:47:25:24:d1:ad:1a:51:79:3a:36:4e:f3:b4:e6:
c9:92:82:e7:cf:5a:3e:73:71:bc:ab:57:3a:d2:76:
d2:8f:e1:7a:62:f2:1a:05:71:b8:01:e6:a7:22:7c:
6b:66:1f:60:87:05:72:0c:60:da:51:31:c9:ca:66:
27:08:53:9f:f4:e9:3f:8c:10:fe:8d:ff:a3:0b:bf:
e5:f9:e9:55:59:de:d6:08:54:4a:47:6e:4b:f3:f1:
45:a7:c2:04:3e:5b:46:cd:65:e2:a2:11:65:3f:7e:
79:a3:be:d5:4a:7e:2b:a7:c2:80:7c:d8:ea:33:21:
fc:30:c2:49:fc:66:c3:f2:62:63:51:27:c8:6e:d0:
0f:c3:7c:b6:f5:76:c4:15:c8:29:73:0c:29:59:86:
01:12:eb:6f:36:38:eb:eb:ba:8b:8f:af:9a:96:7c:
2d:ab:d0:9b:c0:96:36:45:dd:d2:c1:81:24:ff:f5:
a9:3c:49:07:8e:0e:88:de:e6:28:90:91:d4:20:29:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:4A:96:3E:99:18:07:D1:3A:E9:E7:DA:BC:AB:81:E1:70:F1:55
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4f:e9:55:2d:ee:79:3a:e1:f8:3e:68:8c:8d:a0:05:c9:a6:
47:ff:31:8e:24:87:e5:62:36:66:bc:8e:fc:56:52:c5:91:86:
02:ea:97:12:97:30:4f:60:5f:a1:3f:11:2e:14:87:2c:7c:66:
ce:14:e1:48:87:d5:c2:2d:92:b3:e1:81:b3:44:d3:c8:ff:f9:
5e:d5:47:ec:53:31:2f:cf:e5:40:ec:3d:dc:ee:08:17:e8:ae:
2d:8c:c4:ef:3a:c1:ad:8d:cf:8d:00:c6:24:37:d3:10:86:cf:
db:43:30:f1:2b:43:98:c2:87:12:3c:b7:0b:c6:51:77:73:0b:
d0:38:9a:fb:33:ea:e9:61:ef:a0:e3:ea:b8:b3:63:85:44:d3:
50:c6:82:51:2e:4b:59:e0:0e:f0:28:4e:d5:26:48:3c:90:eb:
8d:8c:63:8d:a6:d6:07:7d:06:2f:2c:29:a2:e0:36:fe:b0:76:
23:06:4c:bd:9e:44:cf:02:67:01:8d:a1:55:47:b8:30:7d:35:
87:96:07:ec:af:52:cf:cf:61:8e:f5:ab:51:04:ee:4e:70:e4:
a6:38:1b:6e:2a:b1:f6:f8:ab:d4:fc:30:24:fd:54:2b:0f:0f:
5c:94:04:0a:e1:07:3b:90:6f:67:29:e8:26:54:19:19:87:c8:
6d:e2:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:36 2025 by rpki-client