Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: PyI1BaB4EnF5pOlPAmHL5UtUKVh4nMEChXD/3OINQb4=
Subject key identifier: 50:86:84:10:3C:BC:70:59:AC:36:31:24:16:FF:16:38:57:E2:72:E5
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 0194BD17D5D8C86107BBFA5A94F42EBBC1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: hi3yDo9ceghJ6yYSt3C7tdy7yZYBZzaj9u0qLpRGySA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d5:d8:c8:61:07:bb:fa:5a:94:f4:2e:bb:c1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=508684103cbc7059ac36312416ff163857e272e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:2a:ec:48:46:c8:16:78:27:4a:89:92:65:
5e:b3:6a:e6:bb:a5:8c:3d:04:1e:37:dd:01:65:4a:
07:4c:e6:e4:91:4b:da:e6:24:60:70:17:3b:76:e6:
01:e0:dd:44:9c:36:6e:70:f6:8d:a3:4a:a2:c7:e5:
a0:30:f1:fa:b0:1d:89:0f:75:52:e5:35:0f:58:cb:
24:8b:93:f1:07:80:ec:56:62:74:18:62:fc:7d:50:
55:d6:66:de:1e:36:9b:a7:80:c0:11:21:da:47:62:
4b:02:47:89:db:76:25:33:9a:95:27:ed:36:20:63:
e0:5e:96:9f:f0:b6:71:07:34:0b:3c:75:81:52:5f:
0c:e6:7b:28:23:21:2e:60:f8:a0:80:e8:e4:31:57:
35:2a:0c:b1:52:aa:94:8d:dd:93:d1:4e:18:aa:86:
8a:55:82:36:d5:de:27:03:de:64:5f:de:fb:44:3a:
eb:f7:7b:39:02:5b:80:25:cc:d7:83:a2:97:45:f3:
ae:b3:a0:64:4c:07:5c:e1:30:a3:60:92:d2:4e:02:
2b:96:62:85:83:9f:ec:3a:62:07:57:33:89:b8:13:
e8:53:86:00:0e:a8:8c:1d:2c:57:e4:f6:66:8e:e3:
47:db:d5:fe:7a:63:25:a4:66:4d:24:7f:27:7c:b8:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:84:10:3C:BC:70:59:AC:36:31:24:16:FF:16:38:57:E2:72:E5
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c2:a2:03:74:b8:43:9f:90:c6:79:da:3f:1a:59:80:62:4b:
9b:78:51:90:4f:f2:37:99:77:e3:84:5a:ec:d0:84:5c:41:a8:
e8:1d:31:60:a9:35:69:2d:06:c5:57:bb:04:d0:03:78:aa:23:
fb:01:82:2f:45:36:01:60:54:05:ce:08:6d:22:8f:a2:af:36:
2d:f3:91:db:ca:05:6f:73:43:54:27:4b:1e:71:95:7c:7d:d5:
d9:da:55:4e:8a:66:d6:35:3d:18:e9:75:ba:86:e4:09:39:c5:
3c:d5:93:d3:47:db:1b:6e:1e:35:72:80:44:31:bb:8b:0c:49:
ec:a9:50:fb:f1:7c:5f:b1:41:ab:57:e9:5a:b8:2b:98:17:64:
1c:28:18:df:8f:fc:f7:c7:73:99:8a:35:b1:5d:7b:85:d8:9d:
9f:b9:9b:4d:57:e0:13:81:0f:09:ee:9e:7a:bd:7b:85:98:b5:
80:59:e5:1b:87:e4:ed:56:a2:86:90:54:b6:5b:f9:7f:9b:bd:
e9:00:e0:08:78:b7:c3:58:b0:e9:dc:dc:39:ea:65:53:65:3e:
ab:03:fd:a9:68:96:2d:1e:e9:f6:ca:82:e2:9b:ae:c8:59:b0:
d7:d2:42:38:7d:45:59:e5:93:d3:68:ae:73:96:a8:ec:50:1b:
f6:2e:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:07 2025 by rpki-client