Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier: 0UAfYv3aMV1wUbXiQF3YlVBe0I8E3RsAB+7QI129FBg=
Subject key identifier: 16:94:1B:E4:FE:23:7B:CD:58:E5:2F:FD:CA:8C:8B:0C:A7:69:16:27
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 0194BD4E35BF21C757BCEBC02C4C18841618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number: AE
Signing time: Fri 31 Jan 2025 17:00:06 +0000
Manifest this update: Fri 31 Jan 2025 17:00:06 +0000
Manifest next update: Sat 01 Feb 2025 17:00:06 +0000
Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=)
2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: xbmAMNwkN0lZN1r2ebqi6GuXpzTpQeuiXPmESsz0zfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:35:bf:21:c7:57:bc:eb:c0:2c:4c:18:84:16:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: Jan 31 17:00:06 2025 GMT
Not After : Feb 1 17:00:06 2025 GMT
Subject: CN=16941be4fe237bcd58e52ffdca8c8b0ca7691627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:68:49:71:d9:f6:40:a1:1c:20:5f:31:19:
c0:45:ba:40:27:ef:85:a1:5e:c3:92:13:1a:6b:ad:
e3:8d:08:d3:3e:9c:91:70:b5:06:5b:25:63:74:37:
28:16:8c:f5:5f:9d:a6:b8:1d:20:54:49:ca:ec:7d:
91:c5:83:bc:d2:0e:26:76:22:be:4e:a2:e2:be:e3:
c7:3b:da:64:5b:ca:c0:26:b7:9d:3a:1e:8a:1d:ed:
ed:07:d4:bc:79:33:bd:94:05:57:32:06:42:f1:a8:
61:c1:13:b9:7a:bb:62:15:5f:44:21:23:22:fc:23:
be:a5:e4:ce:3f:47:ad:75:0b:0c:8b:21:55:e9:2d:
7c:4e:f6:cd:16:4e:82:33:52:39:0c:52:77:84:7d:
ee:f4:16:eb:0f:99:6a:ab:fd:57:4d:ee:92:0e:4f:
b5:56:18:00:f1:bd:7f:44:59:75:00:48:27:e1:31:
2f:00:4a:bc:d3:58:a4:35:2e:34:39:fa:38:bd:30:
5d:bd:ea:cb:07:78:12:4b:79:79:ab:37:3e:48:04:
84:63:bd:17:db:7b:53:d5:c8:e4:ea:52:5e:67:fe:
64:b4:e6:2f:01:c1:e2:e9:6f:25:e0:c5:8d:7f:00:
59:fb:83:2a:98:a9:93:d6:1b:75:9a:ed:62:8d:d9:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:94:1B:E4:FE:23:7B:CD:58:E5:2F:FD:CA:8C:8B:0C:A7:69:16:27
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:17:51:aa:ca:f8:03:31:5e:b4:50:40:e4:0f:58:56:4d:82:
8f:fa:35:77:7c:79:cd:c0:a9:2c:d2:26:d5:6a:ee:c7:6a:3e:
1e:19:a8:94:4f:41:c1:73:3d:fa:ad:5a:bb:13:7d:e2:7d:02:
95:c2:14:06:d7:a4:e3:f6:54:f0:c5:c6:fa:ef:38:f1:3c:a0:
7c:50:85:76:ed:a1:08:3e:25:59:31:26:95:4a:b1:27:87:b6:
c1:fe:58:b1:33:20:f8:12:0e:1e:ee:d5:5c:aa:35:27:8f:34:
1c:b8:8a:fc:0a:ab:bb:2c:6c:90:f5:1a:51:97:82:2a:39:c0:
7a:74:ec:ea:ac:35:8a:ee:9d:ae:57:e7:4f:54:13:af:ed:42:
0f:1e:7e:fb:9d:24:dc:ad:0d:b6:63:57:57:92:77:0d:6f:38:
2f:91:64:68:39:62:08:2c:1f:ef:33:70:0f:08:38:87:19:71:
60:de:02:55:a5:29:af:c5:79:ab:a1:fb:4f:ac:a9:f3:d5:7d:
6c:5e:fe:97:52:c2:81:e2:9d:18:b2:f8:30:f8:f3:5d:4b:bc:
46:41:92:61:23:76:03:5d:78:cb:c7:5e:9d:55:f2:5b:28:56:
3a:50:94:66:ce:cc:cf:c5:27:69:b0:3a:a1:66:51:20:c9:5f:
01:9c:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:50 2025 by rpki-client