Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: o19Zu7gJwRJtutx55lHa/DiiAOL5ee8N26Sax0Ass2M=
Subject key identifier: 6F:FF:09:34:66:F5:58:9F:4B:25:E9:42:8D:49:3C:73:C3:53:12:E5
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 0195DFD8F694E21FA49239CC9684A7297169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1264
Signing time: Sat 29 Mar 2025 03:01:32 +0000
Manifest this update: Sat 29 Mar 2025 03:01:32 +0000
Manifest next update: Sun 30 Mar 2025 03:01:32 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: qG58njq6dYSxBQAjrXKnWRMmQngxH6rwQxL7FsEH5zE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:f6:94:e2:1f:a4:92:39:cc:96:84:a7:29:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Mar 29 03:01:32 2025 GMT
Not After : Mar 30 03:01:32 2025 GMT
Subject: CN=6fff093466f5589f4b25e9428d493c73c35312e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:b7:a3:44:a2:d5:76:87:c3:32:2e:11:72:
54:f5:2b:e7:4e:ff:66:e1:e6:23:28:2b:a2:f4:d3:
cc:07:a6:89:07:0b:04:fa:8c:a1:f3:b0:7c:ec:bd:
fc:70:ac:df:40:19:ea:14:ac:05:26:d1:94:86:54:
9f:f0:3c:b5:4c:3d:96:9f:48:13:14:c1:34:da:25:
43:4b:b8:73:35:d9:16:17:7a:32:12:0c:80:e7:d2:
96:2b:30:1f:54:d1:23:70:fc:dc:c1:ee:36:d4:48:
66:75:93:4e:60:24:e6:ae:e6:c2:87:5b:67:95:ec:
5d:d2:ba:b1:4f:76:97:8b:8b:53:9d:db:90:c5:9d:
f7:75:63:d1:9e:2f:1f:ae:04:fe:97:5b:75:ad:ae:
69:f6:cc:e1:ab:d5:ea:a8:9e:44:aa:0c:67:59:a6:
af:8f:0c:b8:3b:4a:db:b2:7d:bb:08:ee:db:38:78:
7b:46:a2:98:a6:59:5a:25:40:ad:bc:b4:b9:51:1d:
89:56:70:aa:5d:1b:5b:48:da:94:4e:02:04:f9:69:
dc:a8:eb:53:a7:f3:ff:23:ca:f1:09:17:fe:4a:b9:
ba:34:d8:72:61:ae:cd:98:f1:6a:ed:f1:ba:77:3b:
66:76:ee:09:13:4e:15:2e:28:b4:2d:f2:c0:02:4c:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:09:34:66:F5:58:9F:4B:25:E9:42:8D:49:3C:73:C3:53:12:E5
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2d:b9:d7:e7:ec:4e:b9:58:4e:ec:58:c4:2a:05:1f:db:6b:
24:7d:1b:c1:ad:5c:be:a7:a3:71:43:6a:b3:2a:e8:69:37:05:
8b:fe:fc:99:54:dd:53:98:d2:c8:f0:ed:a8:1b:0f:dc:35:2b:
28:b6:98:64:c5:e1:d0:31:e3:7f:8b:4d:91:2b:60:fd:15:98:
57:c6:2c:8b:5f:59:89:ce:5f:f5:d3:ed:34:5b:2e:96:70:b1:
84:d1:ad:2b:99:39:1c:a3:2d:d8:01:45:6c:4e:a3:e0:c5:01:
77:47:0e:46:7f:c9:22:54:48:6b:dd:38:3f:98:15:7e:4a:05:
60:3f:a5:8c:cb:5b:c1:71:5f:33:d8:8a:6a:06:af:33:ec:58:
9b:c6:3e:23:f0:26:e5:d6:3c:01:de:59:43:ac:a8:0c:13:b0:
8d:7c:0d:74:96:8d:14:45:31:b0:00:d3:33:9b:6b:c0:c6:c0:
b6:5d:9d:b8:36:1a:ad:74:28:3a:a9:a2:fa:9e:62:6a:29:14:
86:f9:a1:ba:2d:a0:34:40:12:70:f1:36:dc:b5:b5:9d:25:84:
fe:79:0c:0b:af:ec:15:37:35:3b:e7:1e:11:09:64:21:40:09:
62:aa:c3:02:31:fa:09:44:55:f2:52:aa:fe:55:d4:f0:00:07:
f9:8f:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:08 2025 by rpki-client