Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier: s4dek3YU0eJcBSstSta+iLk1bNMn9nG0FB8TlOb1Mts=
Subject key identifier: 79:8F:47:24:7B:A8:84:C5:83:59:10:B5:3C:AC:73:2C:EC:3E:DF:4D
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial: 0194BCA9CC75D440841145D594567A8AFF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number: 133D
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=)
2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: hKK+ixTsrBrbuJSeznWMGznyIr185L8l5tktpoGfdHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:75:d4:40:84:11:45:d5:94:56:7a:8a:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=798f47247ba884c5835910b53cac732cec3edf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:c4:2b:40:73:b7:77:1d:17:e8:bc:14:98:
0e:83:69:41:e3:9f:5c:96:ab:68:8c:eb:b9:b4:04:
18:bf:6e:67:fb:94:0a:de:34:c2:5d:39:4b:04:ef:
e7:07:00:41:bb:c5:7d:9c:02:22:1f:46:05:c3:63:
b1:1d:24:11:af:9f:26:59:0c:e3:79:8d:d4:4b:65:
a5:eb:7f:52:6a:47:bd:b6:be:f3:dc:19:16:af:da:
c1:55:52:7f:ae:04:83:fe:be:c1:b4:3f:8c:3d:e0:
bb:c5:58:2e:12:66:b5:cf:5e:12:3c:c4:b4:0c:77:
2a:f6:f2:e0:4b:21:3f:72:c6:a6:70:e7:e5:a6:48:
a0:6a:e1:97:16:28:b1:d8:25:0e:96:80:11:e1:dc:
28:d6:b1:65:5f:83:a3:a0:56:7e:a4:89:cc:5e:86:
18:44:e8:0b:b8:bf:c6:ec:1f:84:29:ab:9d:e6:f0:
88:e2:ea:6e:ac:74:fa:eb:47:9e:81:0b:0f:79:23:
81:d4:08:26:70:65:16:5c:22:e9:db:56:a1:c7:2e:
17:c7:21:f1:ee:4c:c3:64:e4:1e:e5:17:e5:ef:8b:
91:1a:eb:3e:d9:7d:52:14:9b:37:64:a2:e6:7e:78:
6d:62:76:4a:32:cc:06:1b:8e:76:1e:c7:07:21:d0:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:47:24:7B:A8:84:C5:83:59:10:B5:3C:AC:73:2C:EC:3E:DF:4D
X509v3 Authority Key Identifier:
keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:5a:5d:41:a4:36:ba:8a:5b:4a:62:9a:53:50:9d:c9:15:
33:a6:92:86:da:7e:d9:3e:54:f2:d6:e6:68:28:b4:bb:9b:b5:
87:4d:19:80:60:83:df:89:c3:c0:5e:bf:f7:30:bd:c2:6b:80:
a0:78:88:22:11:af:a7:2d:87:7a:43:8a:77:b7:25:f9:67:1c:
3c:d8:7d:21:56:76:00:bf:5b:f9:15:ca:37:82:c8:55:06:d8:
b0:c0:8e:ac:a3:32:93:d0:6f:fd:29:88:98:04:ad:d8:78:89:
42:f4:59:4c:14:88:54:48:dc:9b:57:38:bc:d7:94:b4:8a:4d:
44:22:81:a8:bf:a7:24:cb:ca:3a:a9:2d:f5:34:65:d9:0d:88:
8b:b1:6b:63:84:17:3b:56:21:fd:f7:78:12:e0:67:40:b9:fa:
30:b7:59:da:56:90:3d:9f:60:2d:33:10:f3:a2:8a:51:c0:49:
af:ce:d5:a4:c0:08:e6:29:13:2d:a5:fb:53:19:a9:d1:5f:c6:
b7:4d:1b:81:5a:92:ea:91:ed:84:40:88:c7:47:19:39:62:6c:
a9:fb:d0:0e:6c:b3:d3:e0:ca:4a:7b:fc:17:46:68:7f:11:3f:
73:df:38:5d:ca:12:69:c7:6a:b8:82:ca:9c:c8:4e:d3:bc:48:
08:39:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:16 2025 by rpki-client