Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
File: lrEip9unQykwyDH1epQG9zRJxbc.mft (raw, json)
Hash identifier: oFTobYi8dCs22nAA6QP14YmbAkyR8+WXwdIa7NqBfb8=
Subject key identifier: 4A:50:01:C2:C6:46:04:64:AC:6D:64:B9:F1:2D:4B:E8:01:84:14:45
Authority key identifier: 96:B1:22:A7:DB:A7:43:29:30:C8:31:F5:7A:94:06:F7:34:49:C5:B7
Certificate issuer: /CN=96b122a7dba7432930c831f57a9406f73449c5b7
Certificate serial: 019591F49010F98C0F9AF1AC85C66B59923E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrEip9unQykwyDH1epQG9zRJxbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
Manifest number: 13FD
Signing time: Fri 14 Mar 2025 00:01:18 +0000
Manifest this update: Fri 14 Mar 2025 00:01:18 +0000
Manifest next update: Sat 15 Mar 2025 00:01:18 +0000
Files and hashes: 1: X9lq2TyNxo7WZXjl0jh86V8-l0E.roa (hash: USn0rj/YpeMPKgnpBvU5Anc5Vafiy63ZYOhqIK1Toao=)
2: lrEip9unQykwyDH1epQG9zRJxbc.crl (hash: u12DrD6ZKuxpO4cNqBJ4lgFLhzWDES9RhwoIiEWLIHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:f4:90:10:f9:8c:0f:9a:f1:ac:85:c6:6b:59:92:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b122a7dba7432930c831f57a9406f73449c5b7
Validity
Not Before: Mar 14 00:01:18 2025 GMT
Not After : Mar 15 00:01:18 2025 GMT
Subject: CN=4a5001c2c6460464ac6d64b9f12d4be801841445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:cf:44:8f:5a:98:99:46:76:a8:9f:3e:06:
53:ea:dd:2c:43:71:93:df:96:82:49:91:d5:04:0b:
e2:a5:21:7d:0b:54:5c:ea:e4:d6:28:8b:07:e5:47:
2c:f4:07:51:9a:3b:bc:ce:7c:b3:33:5f:11:76:08:
8c:29:17:f3:cf:c5:78:39:bf:80:48:1c:b2:9b:1b:
13:39:92:8a:b2:af:d8:4b:37:7a:bf:71:6d:a6:9d:
18:8f:c4:cc:42:2c:77:4e:1a:77:23:b6:5d:99:f7:
3d:28:99:b2:f9:fa:9c:f2:42:67:7c:eb:41:b5:52:
9e:3c:cc:74:5b:5d:07:3c:a5:81:8e:36:7d:3b:4b:
e5:e5:6c:f7:fb:a0:10:9b:80:e8:f5:e9:0d:73:01:
cc:f5:8a:7e:6f:b8:9c:b5:43:60:6f:10:c3:50:27:
fe:7a:89:cc:ab:8c:ac:0a:ed:c8:f1:18:0b:92:96:
42:d3:1a:96:a4:69:f4:f0:67:80:64:59:2a:e5:4b:
57:93:d6:30:09:b5:11:cb:d5:2b:d4:63:f9:42:ad:
6f:b0:e5:9b:8e:f3:6f:9a:99:d9:89:a3:3b:bb:71:
99:a2:a8:34:5d:51:98:a3:e6:fb:fe:17:79:dd:e8:
ea:78:2a:9b:92:5f:19:e3:7c:69:ac:f3:ca:a8:97:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:50:01:C2:C6:46:04:64:AC:6D:64:B9:F1:2D:4B:E8:01:84:14:45
X509v3 Authority Key Identifier:
keyid:96:B1:22:A7:DB:A7:43:29:30:C8:31:F5:7A:94:06:F7:34:49:C5:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrEip9unQykwyDH1epQG9zRJxbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:42:7f:3f:2f:0d:ed:7e:ec:75:ea:eb:7a:c3:c2:61:43:7e:
43:63:3e:4d:29:0d:76:95:f7:a2:c1:c2:d4:87:78:ed:fd:34:
f7:1b:35:16:a3:37:cb:3a:1c:d4:ae:d1:10:a1:8d:6d:5e:6d:
35:86:93:db:c2:61:6b:ea:90:3d:a4:1f:be:ab:38:6c:5f:c3:
da:ce:89:4f:ef:ec:27:99:56:78:40:8b:68:a4:7e:74:07:67:
80:e3:a6:10:7f:3b:2f:dd:6c:98:9a:65:7f:1a:a8:94:e5:ba:
89:1d:81:82:f4:ee:1f:62:0e:de:8f:62:0c:f9:7d:b2:8c:61:
c6:b5:59:c6:b1:ca:ae:d0:8d:bc:7c:92:15:4d:64:04:18:3e:
d7:4e:67:fc:e2:33:27:28:61:bc:59:c4:54:e4:9c:00:bf:2c:
b0:cc:e1:c9:7b:a2:fe:84:6e:6b:9a:f4:60:57:a1:50:94:51:
65:56:94:d6:34:d6:bf:32:66:d4:c2:1f:cd:15:68:2f:77:4f:
b3:7f:c9:3c:bc:4c:a5:fe:e5:cf:81:ed:53:29:ce:1c:6a:94:
a6:7e:cc:8f:b4:a5:ee:d3:2c:4f:81:7b:ff:eb:a2:2f:a2:92:
c1:93:20:6d:a9:d4:73:e3:b6:01:14:dd:3b:66:bf:ec:41:b6:
fe:59:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:20:59 2025 by rpki-client