Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
File: lUBmkfLjdO43pkBJKjZN_FO6RBI.mft (raw, json)
Hash identifier: vJk9SSjODbwzkkE4L5vMa5HaEecN9WGXnt2JWB8DZow=
Subject key identifier: C4:BB:B5:E2:E4:21:F8:8A:A5:61:0B:57:51:6B:A1:1F:11:6F:76:AE
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Certificate issuer: /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial: 019468558671FDDF745D4AC7A5D34B81A45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
Manifest number: 1401
Signing time: Wed 15 Jan 2025 05:00:22 +0000
Manifest this update: Wed 15 Jan 2025 05:00:22 +0000
Manifest next update: Thu 16 Jan 2025 05:00:22 +0000
Files and hashes: 1: NX78TLuxo_4vt_c14axKG6eNS8k.roa (hash: ZCM6oMNX/R/tSSMp4qhK6/dyh53SFicBqaxiQEDShzk=)
2: YYewIfSW8YZG5GXlXoKgWIZJtMQ.roa (hash: 8G6IxD39undLVTlM4ffqyy9Xs/BA/MV147QlLhbSDR4=)
3: lUBmkfLjdO43pkBJKjZN_FO6RBI.crl (hash: +rmBgX5hvYwyFBpZuy7zJcAgaaAmWK9Z4inwnNZ0vw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:55:86:71:fd:df:74:5d:4a:c7:a5:d3:4b:81:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
Validity
Not Before: Jan 15 05:00:22 2025 GMT
Not After : Jan 16 05:00:22 2025 GMT
Subject: CN=c4bbb5e2e421f88aa5610b57516ba11f116f76ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:94:ef:ed:ba:ed:80:2d:ac:70:d6:f0:27:
4f:6e:97:28:31:71:bc:20:64:de:53:1c:d0:d2:2b:
29:c4:a4:d3:68:a1:10:65:42:32:26:be:75:e8:66:
ac:9e:2c:0a:51:2f:32:cd:47:cc:de:f7:e1:da:87:
11:36:b1:ab:8b:b2:a8:ef:9c:7c:4b:f6:96:f7:cb:
61:85:9e:89:f9:5e:ad:4a:de:31:a1:5a:c8:d1:41:
81:c7:0d:98:3f:81:8d:59:09:10:d7:8e:9c:9b:c4:
a2:71:37:0a:fb:79:79:37:8c:cd:e5:bd:69:ca:6c:
c0:f3:57:dd:b3:c7:00:52:4c:f4:8b:9b:d6:02:22:
d5:c9:61:0d:47:f0:0f:1c:0f:8a:6b:24:29:d5:34:
47:a3:f2:03:36:6b:75:02:93:6e:e3:4f:42:06:d8:
ff:bf:e6:92:b1:3e:99:9d:37:27:a0:64:c3:4a:93:
6e:90:2c:a7:91:8b:f4:f0:07:2d:b7:1d:07:8e:89:
d6:2f:db:2f:4b:2b:ea:99:8c:15:00:37:6d:0f:04:
a0:bb:b4:fa:c4:a9:55:ef:91:00:b9:4c:7c:2f:53:
60:00:1f:f4:a3:49:2f:ec:fa:25:f4:68:4b:8d:ef:
d0:6c:f5:d3:d8:90:a7:7b:6e:f1:68:50:02:7c:2a:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:B5:E2:E4:21:F8:8A:A5:61:0B:57:51:6B:A1:1F:11:6F:76:AE
X509v3 Authority Key Identifier:
keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:dc:56:32:23:c1:4b:39:61:4a:11:46:d7:8e:4d:39:be:
1b:86:cc:66:2a:49:58:61:da:2d:fc:6a:84:90:75:62:50:fd:
f5:47:08:86:9e:66:59:bb:80:5f:8e:f4:80:3d:5c:b8:a5:4d:
f8:1a:ac:cf:92:7c:02:38:63:5c:4e:c8:f0:93:c7:f9:50:d6:
fb:c2:78:89:c2:2b:de:69:d6:87:56:18:75:0a:a8:0e:d3:b2:
5a:52:70:4f:81:76:bd:ac:23:22:99:78:7e:07:e6:a1:1f:8d:
6b:b3:1a:7e:d6:fc:bc:fc:2e:c8:e3:0b:53:6d:78:90:8d:bb:
22:35:e0:9f:dc:fa:ef:37:83:03:cb:c9:40:ef:14:57:d7:33:
95:08:51:9f:de:9e:c5:41:e8:8b:04:3a:be:32:9c:bd:20:e2:
43:b8:8f:e8:42:5d:31:0b:3f:59:29:43:99:e5:19:fd:73:50:
46:34:fc:db:e8:c7:30:d5:7a:e2:8b:ca:60:6d:18:2a:fa:67:
d1:70:4f:2f:8e:b3:ad:2a:7a:05:4f:73:34:98:16:77:80:ba:
2d:fc:47:db:85:d4:d8:9c:fd:d2:9b:dd:79:91:46:d0:dd:4b:
02:61:7e:d2:91:7a:01:81:00:92:e4:44:09:75:c0:1d:1b:d1:
de:73:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:04:19 2025 by rpki-client