Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: Tj81wgjei0urLT5l8h0fm8BTo5Dq7MbT0ekKNOYDV6k=
Subject key identifier: 83:C5:E5:92:50:26:60:56:46:EE:04:67:9A:54:89:4C:9A:AF:EC:79
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 0194BD8556681EB885A553BE537B4EB56D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 13ED
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: FYxSzwMBsZ0iW7NbbnaVS6i+WPSm204w9/IRoEcnfSw=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:68:1e:b8:85:a5:53:be:53:7b:4e:b5:6d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=83c5e5925026605646ee04679a54894c9aafec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:38:c7:5b:11:09:bd:53:e4:01:cf:bb:92:
79:ab:2f:5a:90:3f:81:68:21:0c:eb:59:4d:fe:4e:
48:02:09:2b:b5:26:d7:ac:3e:30:e8:0c:08:3e:c7:
cd:c3:59:45:ff:7e:ed:a5:3f:64:33:8f:84:d1:d8:
41:6c:0d:72:14:79:95:c6:f3:e6:a1:0a:f8:70:17:
0b:57:c4:93:eb:98:2b:3f:87:c9:b2:32:3a:16:45:
9e:39:e2:f3:03:7b:1a:0c:a1:4c:75:d6:2b:5c:dc:
21:46:02:08:d1:b0:30:13:f7:45:1a:01:2c:3c:25:
c0:a5:50:87:2f:b3:a5:a4:0d:a4:70:37:bd:cf:54:
da:35:b8:23:72:02:dc:f0:bf:69:fe:84:32:46:55:
ae:1e:9d:88:ed:59:c9:e5:e6:20:2c:ac:1b:e5:60:
eb:e0:81:e2:0f:19:4e:46:31:42:c7:d0:c5:4a:39:
80:eb:1b:b2:5a:c3:69:5f:79:97:ae:5d:c1:6b:14:
2e:18:d1:bb:13:6e:3d:1c:30:f3:b4:58:87:5d:b8:
54:21:c9:0b:9b:0f:09:1c:e2:36:76:3e:1e:75:70:
ea:ab:05:52:92:9a:af:f5:2b:fc:da:75:c0:09:96:
cd:6d:00:5b:fa:d2:d4:60:36:dd:38:28:3b:42:42:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:E5:92:50:26:60:56:46:EE:04:67:9A:54:89:4C:9A:AF:EC:79
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:09:55:64:b5:71:51:a0:2f:8d:1b:60:85:9b:0d:43:16:95:
b5:dd:6c:a6:d5:fa:7f:3e:43:9f:24:2b:b8:32:c3:ee:4d:5a:
42:c1:f2:c5:ee:3e:e2:ae:25:88:7f:91:88:d8:56:86:1c:e2:
6b:88:5b:59:8d:f9:ff:89:2e:29:d3:e4:f2:39:3d:06:31:91:
78:29:23:43:ac:dd:18:3d:b1:91:cf:e0:ae:13:e5:25:8d:ef:
33:89:d0:5c:7c:0d:a9:6b:65:67:18:33:64:64:ac:03:ba:e7:
8d:24:e5:f3:6a:98:0c:c7:ac:64:8e:1b:b9:76:f4:df:45:d0:
83:bf:7a:4c:34:4f:bc:c6:74:23:43:99:e5:b0:d5:64:0b:bf:
d3:e8:29:fc:0e:cc:cd:e4:cc:87:c8:04:01:30:75:2c:a2:a9:
6a:f9:9c:69:e4:2f:88:3a:4d:64:7c:6e:5e:39:c7:82:d0:f3:
ee:f1:e1:ed:e1:5d:2f:a5:61:04:76:f8:12:04:b1:9f:8e:e8:
a7:0c:b3:93:b7:d3:fa:64:9e:4a:8d:b3:ea:a2:22:52:aa:a4:
a1:64:3b:e3:8a:ce:fd:aa:74:24:98:49:ae:b5:1a:c2:2e:b3:
14:03:55:0c:93:88:25:e8:c1:bc:a7:72:7d:81:dc:9e:dc:19:
c5:f3:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:08 2025 by rpki-client