Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: CAerzhJbeP2KO+WCKPc4DdAyLD424vZ9YaGgXATJWvc=
Subject key identifier: 83:7C:7F:C5:91:75:05:56:47:C5:09:E3:D1:A9:B6:AC:99:59:02:65
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0194BC731800BA8C0A09DF15EB4A7A87CC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0B87
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: r3y6scdgA2PeWaxy2CHq7xhVngiCcJIpN5oJDP7rWkU=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:00:ba:8c:0a:09:df:15:eb:4a:7a:87:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=837c7fc59175055647c509e3d1a9b6ac99590265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:4f:5f:1b:9f:78:fd:e1:f3:59:6b:f3:1d:
74:e2:1a:ac:76:4d:36:99:3f:cc:47:87:9e:11:c6:
ef:5c:e5:05:f0:05:86:8d:15:04:e3:d9:e8:d7:e3:
93:d1:1a:a3:4f:10:48:65:1c:4a:92:91:1c:eb:12:
b5:ef:df:39:22:b8:a6:e2:fa:a0:67:16:29:8b:79:
ef:94:3a:b1:4f:2c:1a:95:74:94:a6:c3:7a:9e:de:
7e:9c:89:00:8d:66:d2:48:5d:af:4f:d3:9a:20:a0:
47:cb:69:2f:1c:e8:16:c3:9e:26:27:0a:32:ad:89:
5c:fa:34:70:7c:02:4d:72:c9:02:bb:1a:ae:3f:4e:
64:68:c6:40:6f:f5:e7:5f:40:3b:d2:83:75:bf:3d:
f0:42:8e:6c:5b:8d:48:7f:fb:59:b5:81:72:ea:89:
f7:0d:a0:13:bd:2e:bf:1b:ba:5b:86:00:0e:34:97:
96:45:29:82:0f:1a:8a:63:ed:9b:d5:d6:01:e8:d4:
a2:4c:2a:fe:34:9a:a4:2d:1c:c2:9f:ed:e2:13:b3:
b4:8f:3b:17:14:b4:3a:20:13:08:3a:83:e8:74:b8:
72:a9:93:e8:5a:ae:9b:9e:6d:7a:0d:07:91:46:0e:
f2:36:0e:f9:c0:b8:07:01:18:fa:ff:0a:ae:b2:75:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:7F:C5:91:75:05:56:47:C5:09:E3:D1:A9:B6:AC:99:59:02:65
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:06:ee:5a:d5:5a:a6:dc:44:c9:cc:e3:eb:21:f0:9c:36:fa:
ad:46:05:2a:5d:a4:5e:9c:4a:7d:d5:66:f6:c3:6e:cf:63:e4:
c0:e0:4f:3c:a2:06:c7:fa:d8:5e:33:40:d1:83:04:4f:1a:3d:
8a:88:0b:9f:9f:42:c3:1b:43:b7:80:79:60:e6:56:e7:3b:0b:
1a:44:ed:c6:45:bf:26:38:cb:13:c4:91:7e:d9:06:5e:8a:07:
e9:59:1e:a9:62:43:3c:2a:8d:07:43:4e:55:a7:dc:d7:35:6a:
b6:c4:9c:1a:1e:a7:75:0f:1d:62:56:df:01:41:63:84:32:02:
79:63:a0:9e:59:a9:1b:3d:f1:15:dc:81:9f:1b:af:b3:50:33:
b0:45:7d:97:82:b2:3e:23:f2:b3:58:8c:ea:ed:13:47:2d:fe:
b9:1f:96:e2:2a:77:a3:94:43:88:28:c0:cf:07:e4:79:78:a8:
98:03:20:63:31:b3:c7:b7:2a:db:f2:01:e7:06:9a:44:21:1d:
98:9c:9a:30:ed:dd:e8:f1:35:b7:ee:4f:21:35:b3:88:85:a4:
d0:11:fa:11:b4:1c:6c:5a:5e:2b:9a:d8:89:af:f2:65:89:28:
11:31:72:b8:c6:ef:a3:c6:11:b0:7b:7a:af:bd:b9:0b:94:a9:
da:bc:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:14 2025 by rpki-client