Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
File: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft (raw, json)
Hash identifier: K86donR8cx1TDus1qh504F0BQ6xZwjCb4+Mwhg7yYoo=
Subject key identifier: 23:D1:59:28:18:81:2B:32:C6:C1:DD:46:3D:AC:71:5D:0F:F2:47:85
Authority key identifier: 94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
Certificate issuer: /CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Certificate serial: 01957EA45F82890BD4B83E53ECCED963F5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
Manifest number: 0437
Signing time: Mon 10 Mar 2025 06:00:56 +0000
Manifest this update: Mon 10 Mar 2025 06:00:56 +0000
Manifest next update: Tue 11 Mar 2025 06:00:56 +0000
Files and hashes: 1: BsjKxlyhr1xJt-_B7RFdha2dw34.roa (hash: DZrrLtviTY8IeT2xTa11fcFFAO4I1PCCgwnVwmVsFaU=)
2: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl (hash: ZTp/2iJzDZBuVLbrdBGqPKMGeVWXTosr/nHpvgGz2mw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:a4:5f:82:89:0b:d4:b8:3e:53:ec:ce:d9:63:f5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Validity
Not Before: Mar 10 06:00:56 2025 GMT
Not After : Mar 11 06:00:56 2025 GMT
Subject: CN=23d1592818812b32c6c1dd463dac715d0ff24785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:63:34:96:0e:cb:84:29:85:e8:b6:26:f0:
c4:38:16:32:d2:1a:17:8c:b8:fd:2a:95:38:7b:2d:
c4:64:fd:17:8a:02:bb:c5:da:5b:32:00:c5:96:14:
66:d7:f0:b5:a7:d7:a4:0b:2a:6c:c4:71:a9:2a:7c:
89:e7:cf:8a:41:03:0f:34:1b:7f:a9:7e:b3:21:c7:
9f:03:b2:4b:06:d4:d2:3b:3e:ae:f8:e3:1c:3e:7c:
e1:d0:76:05:62:96:8d:fe:35:1e:f9:9f:4f:f3:9b:
07:39:16:81:3c:16:3c:b9:f5:e5:df:bb:d2:c6:4a:
47:83:b9:e8:30:c8:99:f2:0a:0c:1e:ba:e5:62:88:
90:83:54:7f:e8:1b:6a:75:7a:24:00:b1:ed:e4:d8:
c9:20:f5:1f:e8:ac:0c:0b:09:e6:46:5f:28:67:62:
31:58:53:e7:86:c0:26:40:b1:0a:6b:34:78:4e:68:
e7:13:83:1f:1a:fd:bf:ce:3b:be:a5:c2:46:10:ee:
9b:ed:79:b0:d1:e7:a1:22:20:32:62:30:de:7f:3f:
47:77:61:1a:bf:75:d8:0b:00:39:63:ae:41:20:49:
d6:be:09:ce:83:a7:4d:81:c8:df:ff:2f:1c:71:ae:
0d:1b:6d:be:da:79:ca:33:99:dd:12:49:48:7e:da:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:59:28:18:81:2B:32:C6:C1:DD:46:3D:AC:71:5D:0F:F2:47:85
X509v3 Authority Key Identifier:
keyid:94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:17:de:be:a2:1b:97:5a:05:57:d9:c0:fd:8d:e3:a5:1e:31:
f7:8c:4a:40:a0:18:2d:f0:92:bf:ae:a5:77:e2:75:2d:c6:4f:
fa:d5:75:cf:d1:81:48:db:d3:10:5a:d1:7f:78:5d:ba:60:62:
0f:a5:52:6a:cd:ef:aa:62:1c:28:0b:50:c4:d6:29:e6:98:80:
4c:72:07:49:2d:7f:bf:a6:2f:11:c4:88:8d:8d:90:24:18:ba:
71:b2:ae:ca:27:be:63:17:df:a2:91:1d:2f:ab:49:48:5d:99:
a3:05:46:d2:f6:4b:5a:b7:18:97:98:79:20:08:a2:7e:7f:a1:
0d:a9:68:f1:b0:21:ea:8c:af:70:47:94:e6:d8:cb:57:f8:11:
db:ba:a7:c0:99:76:85:51:4c:6e:96:01:7a:08:45:bd:91:ef:
6f:29:42:83:08:b6:d0:a9:bb:56:ce:ca:59:0e:ce:94:79:92:
30:c4:df:7b:e6:0f:1c:f6:55:66:6c:1e:2f:58:84:06:18:59:
d9:95:e7:14:af:23:d7:0f:9c:6a:ec:db:bc:90:57:15:51:67:
c2:cd:07:f0:e6:22:79:1b:78:8c:4a:6b:d1:00:81:04:d5:c7:
bf:2a:d0:5b:3d:8b:62:69:fc:1b:3f:bc:a2:d1:2c:78:d4:ec:
61:a9:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:53:30 2025 by rpki-client