Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: 9DXJ+OwGRTeGmhsTOanKqLzrpXvM5i9WJ3vEdlW0ujY=
Subject key identifier: 40:00:F9:99:95:F6:4D:B7:2E:07:5A:D0:64:DC:34:31:3E:6C:31:95
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 0194BCA9F98FAA98F34D4194AE337B743BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 9D
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: zyOGYPVi2/DbbZNxI5OH44uvD+aJtV9sHF0OsV2n+tU=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f9:8f:aa:98:f3:4d:41:94:ae:33:7b:74:3b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=4000f99995f64db72e075ad064dc34313e6c3195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:c3:ef:d1:09:87:1b:71:4e:a6:8a:2e:cd:
b7:b4:fe:76:e1:1d:6a:1b:f0:61:cb:5f:ca:ab:8a:
ba:4a:83:f8:cb:d2:b7:00:a0:e6:25:b4:fe:c7:c9:
7e:fa:fe:fd:2a:0a:7c:0c:d6:41:f6:ff:7a:5a:51:
db:55:54:b6:68:f8:1c:ce:35:d2:74:b0:3d:a0:16:
21:27:07:db:17:32:81:0f:8c:e9:2f:9f:10:24:59:
68:02:26:93:5c:a6:51:57:d5:ce:3e:db:52:c0:6d:
c6:b8:ae:9e:d3:85:85:fc:27:44:a8:3a:ca:b8:ad:
fd:3c:76:41:1f:b7:e4:58:cb:89:e0:74:41:4f:da:
59:9c:1e:ac:b8:f4:a2:10:05:05:01:3e:5d:33:fe:
26:27:a2:10:52:e1:7c:c7:c3:1a:a7:a5:4a:67:64:
fb:39:6c:2c:5c:02:f2:82:a0:d2:81:62:98:d9:18:
94:c8:48:c1:73:83:3d:4e:61:c2:ec:50:14:96:94:
9b:55:d9:35:48:53:c3:f5:eb:ec:21:f4:75:4f:cf:
59:29:88:84:26:89:ec:91:5a:a8:40:c1:b4:b9:4e:
93:15:46:15:7f:55:dc:a0:16:dd:eb:65:51:dd:55:
2f:45:ff:d9:ed:0e:92:18:8b:9f:5f:92:b9:5f:9b:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:00:F9:99:95:F6:4D:B7:2E:07:5A:D0:64:DC:34:31:3E:6C:31:95
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:99:18:10:de:04:e3:47:e4:99:3d:77:b5:6f:ac:00:e5:3c:
98:43:c3:cd:05:e2:e1:95:cd:29:f6:15:f1:1a:e0:bd:af:16:
ff:1e:67:a8:a2:96:6f:79:3e:94:9a:2d:94:ce:52:1e:16:c3:
b4:f1:02:af:e9:95:04:85:4f:53:bf:b2:37:08:31:9d:0c:2a:
7c:90:05:88:55:b3:3a:84:4e:c6:43:5a:63:5b:58:ba:a4:a0:
80:64:e9:79:d5:44:c7:85:4d:f3:57:c1:7f:e9:72:d6:2d:df:
bc:8b:b0:44:21:9d:15:ed:77:ce:aa:0b:bd:07:9e:3c:31:d8:
29:5d:f0:9c:97:85:37:b6:61:2e:11:96:49:7a:30:6a:e3:f6:
3a:7d:98:d4:18:d6:17:2a:a8:88:b8:32:50:54:b2:0e:a6:0e:
ed:7e:a0:01:79:b4:fe:d1:c7:83:b3:a1:bf:90:f4:b7:b4:94:
43:27:55:15:4c:9c:88:e2:d6:9a:5f:84:60:3b:2e:07:24:b0:
b0:ae:47:ab:26:dc:18:84:33:a9:11:c2:eb:af:bf:bd:47:f0:
68:06:be:41:6c:58:39:7a:1a:74:bd:f9:b6:ca:6f:46:94:0f:
17:af:ad:77:16:b6:b1:a7:4e:eb:8c:11:db:ca:d9:d6:3f:92:
54:4a:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:54 2025 by rpki-client