Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.mft
File: l0j8087s244EpSSvlnTLWIA_9mg.mft (raw, json)
Hash identifier: 21CWEUzNntRhS1sxsH+95amd1S/uselqkYgNE5+rFQc=
Subject key identifier: BD:9A:ED:A8:A8:D3:FF:80:21:8E:DD:47:CA:22:25:D3:A4:98:34:28
Authority key identifier: 97:48:FC:D3:CE:EC:DB:8E:04:A5:24:AF:96:74:CB:58:80:3F:F6:68
Certificate issuer: /CN=9748fcd3ceecdb8e04a524af9674cb58803ff668
Certificate serial: 0191DA8597648F4EC551C25B5B7D1ACC06EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0j8087s244EpSSvlnTLWIA_9mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.mft
Manifest number: 12AC
Signing time: Tue 10 Sep 2024 06:01:13 +0000
Manifest this update: Tue 10 Sep 2024 06:01:13 +0000
Manifest next update: Wed 11 Sep 2024 06:01:13 +0000
Files and hashes: 1: QuOe09itvYFdHIFF4-8IFbtRhxs.roa (hash: hx1lHbX9GncY6T8Dq1Qnn2UttN9cffXfQm7iJJ3LqwE=)
2: l0j8087s244EpSSvlnTLWIA_9mg.crl (hash: kmM+HfwAuEhFS/AqTHBUX0YqcWIeFfxVc3pcUcc24j4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:85:97:64:8f:4e:c5:51:c2:5b:5b:7d:1a:cc:06:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748fcd3ceecdb8e04a524af9674cb58803ff668
Validity
Not Before: Sep 10 06:01:13 2024 GMT
Not After : Sep 11 06:01:13 2024 GMT
Subject: CN=bd9aeda8a8d3ff80218edd47ca2225d3a4983428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:37:ef:ac:31:7d:eb:74:72:37:a7:86:57:
b8:a3:a3:9b:7c:b0:4a:5d:e4:c2:f4:a9:c6:f2:f8:
46:af:93:93:be:98:a3:c9:c1:ae:e0:88:88:e3:6e:
58:92:7e:6a:fb:85:6b:46:56:b9:55:c4:f7:61:47:
eb:09:d7:45:7b:88:f3:5c:bc:82:a1:cd:6c:fd:a7:
dc:7a:7e:ce:dc:f3:43:b1:40:f1:fe:a9:6d:e8:7d:
3b:0b:6d:98:e5:c9:eb:55:00:2e:0a:8a:06:dc:ee:
23:37:b1:16:d9:b1:aa:f5:22:f9:3d:e3:b5:a7:fe:
00:eb:c9:74:62:30:86:eb:75:86:a9:9b:24:d0:89:
95:9a:62:ee:22:12:10:6f:03:e9:28:ed:eb:ef:4e:
ce:fc:44:79:e8:9d:f1:42:02:c4:54:5d:f6:60:91:
8c:ea:5c:9e:43:f1:01:7c:f8:62:83:22:1a:43:8d:
c0:ca:9b:fa:9d:fc:bd:59:cc:51:f3:e0:d3:d9:c8:
e0:96:f8:7c:cf:b5:07:a3:4d:1f:4a:f0:86:57:99:
47:ed:32:69:fd:7c:72:5a:3b:92:13:f1:cd:6f:94:
8d:d4:49:a5:64:c7:37:b6:6c:60:bc:6b:71:7d:f2:
22:94:3c:03:07:97:96:e0:ee:fe:6d:d1:f2:bb:d0:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9A:ED:A8:A8:D3:FF:80:21:8E:DD:47:CA:22:25:D3:A4:98:34:28
X509v3 Authority Key Identifier:
keyid:97:48:FC:D3:CE:EC:DB:8E:04:A5:24:AF:96:74:CB:58:80:3F:F6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0j8087s244EpSSvlnTLWIA_9mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ce:93:07:fc:ac:5c:d3:44:62:a8:91:c3:65:f9:5f:75:cb:
77:dd:56:41:52:1d:f0:50:60:a5:c9:86:99:13:74:02:b9:d5:
fe:46:5b:cd:64:a9:e1:89:30:e1:ae:d6:38:d4:78:61:a1:76:
23:f3:6f:e9:fd:23:52:fa:4b:89:cd:40:0d:65:d9:37:a9:c3:
95:db:42:d7:2e:62:80:7b:95:03:78:19:51:0a:87:4e:48:e4:
8a:e0:0c:a3:2b:b4:f2:fa:bc:09:83:14:78:61:f8:75:0d:e4:
45:ea:3e:ae:6e:d7:98:42:cd:19:e5:c6:bd:67:b9:9e:98:28:
b5:17:72:d2:d8:20:6f:88:54:16:51:74:e6:6b:fc:4a:14:02:
9c:f3:a7:90:8a:38:28:f0:db:49:63:1f:b4:b5:cd:46:73:41:
96:de:20:eb:d3:6c:8a:34:a0:2e:cf:f5:55:04:ac:eb:e7:49:
e4:e9:56:51:4e:59:ca:59:ab:de:90:20:46:82:1f:44:2f:bf:
e3:2b:93:a4:f7:6d:3d:32:9c:e8:e9:aa:d8:be:73:b3:58:82:
b1:a4:57:da:16:89:45:54:46:b4:d8:b0:f3:38:a3:31:3a:78:
23:8f:03:71:b7:fc:46:8c:f1:1b:63:59:6e:53:45:90:a5:0f:
e4:b8:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:51:32 2025 by rpki-client