Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json)
Hash identifier: eYI7lFkeJdcQl2x2eePzN+naTc6Kldp/Hl44xRUUEes=
Subject key identifier: BE:86:B5:F1:9D:BE:13:D5:C2:00:2A:32:77:30:8E:D8:31:7B:95:EF
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 0195E15912622F251AAA11B0BEC3AC7A3EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
Manifest number: 14A9
Signing time: Sat 29 Mar 2025 10:01:05 +0000
Manifest this update: Sat 29 Mar 2025 10:01:05 +0000
Manifest next update: Sun 30 Mar 2025 10:01:05 +0000
Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=)
2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=)
3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: jjhqdqwCaKMEPfp93LEzcgYe90Ii/iTTuTFAQ8533+Y=)
4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:12:62:2f:25:1a:aa:11:b0:be:c3:ac:7a:3e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Mar 29 10:01:05 2025 GMT
Not After : Mar 30 10:01:05 2025 GMT
Subject: CN=be86b5f19dbe13d5c2002a3277308ed8317b95ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:ea:4e:0e:1a:88:9d:90:4d:fe:84:16:c6:
84:42:f1:0d:12:68:53:a9:73:b6:30:b7:3d:e0:21:
b1:f1:7b:12:13:4b:37:79:cd:48:af:c1:51:b9:64:
a7:7c:ba:23:20:76:12:b7:6b:8f:72:0c:2a:26:59:
a9:95:0e:e4:8b:26:5d:88:0d:aa:f8:94:11:46:47:
5f:ff:50:39:e9:f3:e6:09:cc:89:e4:21:cb:af:cf:
4b:a7:d9:85:15:60:c5:62:9e:30:35:58:d6:64:78:
cf:e0:d5:0f:f5:ec:21:5e:b0:03:40:41:83:3c:56:
ad:77:97:e4:b5:4e:62:91:66:2f:81:ae:b1:83:29:
f1:88:af:56:b3:ca:55:46:f5:7b:20:01:59:26:eb:
f2:f4:6d:63:9e:03:2f:6a:7a:95:45:e3:c2:0d:78:
8c:21:6b:b2:66:8d:af:2c:e1:36:07:c4:22:5d:fa:
79:cf:ba:43:53:c0:82:8d:28:d0:d9:5f:95:83:e7:
0c:f9:45:76:ad:0d:8a:a7:7c:9d:56:c9:14:c2:42:
9a:25:31:3e:a5:c1:c7:16:c4:fa:8e:28:72:38:58:
33:21:f0:6e:3b:75:d8:e6:2d:7b:c4:02:4c:27:22:
d2:25:82:3e:32:98:e8:c9:69:a2:97:ef:10:32:39:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:B5:F1:9D:BE:13:D5:C2:00:2A:32:77:30:8E:D8:31:7B:95:EF
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:93:f4:39:60:77:18:7b:e7:c5:8b:d8:f1:f7:4f:09:85:45:
42:20:5d:5b:2a:2a:9a:25:73:fc:2b:62:e6:10:82:fd:84:56:
29:58:4f:d4:1c:c1:b2:13:ab:3d:0b:d6:01:ec:a6:46:2f:d9:
49:ac:b6:66:ed:38:0c:e4:c9:0f:dd:0f:96:fd:a9:5f:97:2d:
3e:3c:c6:d1:5a:92:54:c3:28:34:20:fe:30:38:ab:23:9e:d4:
2c:40:90:b1:70:1b:af:92:fa:02:7b:d6:d2:2b:ca:2d:6f:de:
2a:6f:5c:e8:eb:eb:66:8a:2d:bc:9b:4a:dc:6b:4d:3a:73:21:
8a:c7:a9:7c:a5:1e:c5:b3:9f:72:bc:33:5d:fd:8b:80:65:73:
e5:a2:0c:94:b0:6e:07:72:66:da:de:f5:e5:8a:b2:26:30:06:
2a:93:e8:c0:71:2f:ba:c4:fb:9a:a6:05:82:0c:21:72:c2:14:
04:42:82:ad:35:bc:4d:d7:0a:08:9f:a9:ef:89:bf:dd:f7:c8:
3f:4e:2a:0b:6e:a9:4a:79:0f:a7:13:ae:b8:5d:0e:41:72:ea:
91:29:7a:96:64:d9:8e:4b:5d:06:08:95:46:11:4e:e0:68:30:
ef:75:36:7c:e6:4e:f7:0f:7d:56:ff:b6:04:9f:7e:15:f5:22:
b1:ca:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:44 2025 by rpki-client