Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
File: lA4qcW5diYld_qLvKQMIHe3pnGg.mft (raw, json)
Hash identifier: kHxaL46XGHXBBP46Zwk+/tiysrHkIHJE1IbXhHuX/ag=
Subject key identifier: 72:31:35:53:A5:47:85:FA:70:28:0A:0C:01:89:E3:2B:E0:D3:D4:B8
Authority key identifier: 94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68
Certificate issuer: /CN=940e2a716e5d89895dfea2ef2903081dede99c68
Certificate serial: 01948B187CAF813FD4103BBE86D4D84C04F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
Manifest number: 10D0
Signing time: Tue 21 Jan 2025 23:00:25 +0000
Manifest this update: Tue 21 Jan 2025 23:00:25 +0000
Manifest next update: Wed 22 Jan 2025 23:00:25 +0000
Files and hashes: 1: ijlmq02aaoB7j8gZhXvYm8FPPVg.roa (hash: /s7Z3bc4WTjGm/Dn6uRbKk4UoLtU5WzyIOA+T3EWXWw=)
2: lA4qcW5diYld_qLvKQMIHe3pnGg.crl (hash: YWPK+Z4jrUPENyA10lztBciAaI4Kv8xz3Ffl/1ZBegI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8b:18:7c:af:81:3f:d4:10:3b:be:86:d4:d8:4c:04:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940e2a716e5d89895dfea2ef2903081dede99c68
Validity
Not Before: Jan 21 23:00:25 2025 GMT
Not After : Jan 22 23:00:25 2025 GMT
Subject: CN=72313553a54785fa70280a0c0189e32be0d3d4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ae:9d:80:8e:f9:30:ea:6f:6b:8e:21:69:fd:
24:09:6e:40:f2:88:ef:dd:3b:7b:ea:2b:04:30:30:
47:73:7e:6c:74:b8:8a:90:9e:ae:1f:94:6b:bf:89:
c8:ae:b8:d3:a5:f2:8e:08:b0:d3:24:ad:3c:de:9a:
38:7f:56:b0:db:42:68:68:73:64:f9:0d:a1:b7:f1:
80:7f:aa:a5:13:05:ef:c1:1b:d4:4c:b3:70:5b:b8:
a8:f3:e6:66:e7:a4:06:34:c1:55:ff:10:8f:55:8f:
4f:13:69:4b:7d:9b:52:90:27:94:b7:6f:ce:ad:17:
eb:dd:d9:2e:04:45:eb:c1:5e:ec:62:7b:90:4a:bd:
ec:e2:9b:78:52:26:ca:db:5b:77:91:b3:80:43:19:
13:da:46:a7:34:8d:43:6d:69:77:ea:21:d8:9f:16:
30:25:ea:7d:54:2a:f4:07:c6:ec:a8:13:14:2d:6b:
60:ae:f3:7f:58:23:31:f7:4b:ab:b6:82:64:bb:be:
dc:86:a6:42:e8:bd:21:32:e1:b8:c5:d1:a7:f9:b6:
fe:61:38:d3:a8:05:48:fa:ce:b2:df:98:c3:a6:ef:
13:f7:85:fa:01:31:ca:cb:69:45:21:c4:8f:30:b4:
5c:4e:49:2e:ef:59:e2:1f:93:a5:a3:85:61:d0:a1:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:31:35:53:A5:47:85:FA:70:28:0A:0C:01:89:E3:2B:E0:D3:D4:B8
X509v3 Authority Key Identifier:
keyid:94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:69:64:34:ac:c6:3a:2b:2c:14:f9:72:d8:67:4c:6f:0c:ee:
23:18:86:11:64:85:ef:68:15:15:72:49:7e:38:27:13:ea:53:
c6:ba:cc:28:2c:7e:f3:2a:67:b5:b0:a3:77:bc:19:c6:94:95:
b8:0c:94:d1:ab:ba:64:2b:7f:e3:ed:30:8b:0e:bb:42:33:07:
67:4e:45:e0:5c:14:2a:47:cb:dc:33:75:86:f9:03:cb:ff:11:
e3:dd:4d:97:54:ff:a5:0b:82:d6:9d:91:12:35:eb:02:46:04:
d5:4a:ef:bb:20:44:53:81:07:1a:8f:2c:85:c7:2b:0a:61:45:
8d:73:0d:96:71:91:b0:57:5d:3b:08:32:bc:cf:29:8f:6a:c5:
89:3f:b8:40:59:a0:42:70:8c:d7:ea:07:75:20:53:cc:ad:a4:
9a:fe:95:08:49:df:5e:e0:ae:ab:bc:07:d7:20:68:0a:17:31:
6c:a6:55:27:ad:6c:07:f9:c4:28:1a:f0:06:bb:65:c6:b3:30:
90:b3:78:91:62:9c:05:de:8e:91:79:98:71:53:8d:e6:af:4e:
09:66:74:a3:d1:0f:76:d9:80:50:40:6a:64:49:cb:00:97:05:
c9:59:6b:76:a1:f5:e8:5c:ba:f4:65:1e:4c:42:a9:53:54:6c:
45:24:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:36:40 2025 by rpki-client