Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier: Q5Svw1l3Y2vm/i5uuPov9M1syq3wMs6QvK9m+4ids1Q=
Subject key identifier: 45:43:B1:AB:D3:95:D2:BC:28:EC:43:95:21:05:53:72:B2:19:01:BD
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial: 0194BD4E4F09B08E7419B893F77412FF3941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number: 31
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: 6q7REgXTkfxeaGI7b1lQ5g+w8NN0jzYK8y4xo9YewyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4f:09:b0:8e:74:19:b8:93:f7:74:12:ff:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=4543b1abd395d2bc28ec439521055372b21901bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:1d:59:c5:15:fc:9e:8d:42:76:29:82:4a:
4e:29:3a:54:80:1f:14:f4:69:bc:a3:5a:b4:bd:4c:
d9:4d:7c:6a:a5:03:46:f2:a8:a4:6b:46:09:33:8a:
79:6b:97:b4:d2:b1:f3:6d:9b:cb:61:26:98:68:3d:
a0:d9:c2:aa:35:9e:99:18:f3:7c:70:f7:c9:d6:1f:
4e:51:5e:9e:4b:1b:f6:c4:53:d5:bc:13:4c:ff:d6:
4c:16:d2:3f:70:a9:ed:49:51:2b:a9:8c:72:f5:c7:
8c:42:c4:4c:ea:9f:ba:8b:ad:f6:68:85:c0:10:0c:
d2:de:d5:d1:53:9e:13:20:36:ab:bb:b0:b1:3d:d0:
6d:4d:14:6e:3d:70:98:01:fa:87:72:e4:9f:40:00:
51:a6:80:3d:8f:f0:98:6a:65:93:31:4b:1a:1a:93:
45:3e:77:a5:89:c5:d1:30:1e:94:f9:d7:3f:f4:27:
77:7c:a4:c7:56:66:9b:08:d3:51:71:a8:67:5d:48:
8b:0f:85:74:df:70:de:0a:1f:bb:82:13:77:3b:61:
56:c8:8c:87:d1:3b:ee:cc:49:40:c8:6b:a3:55:59:
68:f5:64:4b:51:09:79:d8:06:ad:cb:69:a5:13:3b:
32:c9:fa:b3:e1:cf:9c:ae:1a:c5:b6:ff:43:cf:01:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:B1:AB:D3:95:D2:BC:28:EC:43:95:21:05:53:72:B2:19:01:BD
X509v3 Authority Key Identifier:
keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:2f:7a:1a:02:b0:07:35:4e:ba:1a:01:39:0e:db:36:e9:d6:
5d:0a:a2:15:a5:9f:83:5b:9d:a5:98:be:71:49:5c:51:d8:07:
b4:e9:0d:3e:44:b9:a5:41:2e:ab:c4:7f:90:0d:d3:3d:23:6e:
3f:03:81:7d:21:33:72:2e:78:73:ce:fc:e3:94:1c:40:be:c9:
73:ec:16:16:86:5e:46:62:34:28:e8:a4:c2:4b:e5:b4:f6:ae:
5e:af:e0:ad:a7:0c:5e:7e:f0:a8:6f:e8:6b:12:13:60:5a:cc:
a1:d1:51:19:28:7a:88:be:1e:2e:20:15:c0:eb:29:7c:be:74:
97:1d:dc:0e:af:da:22:a3:47:4d:4e:dd:f0:f6:5d:05:4c:bb:
02:ce:37:80:2a:79:ec:9e:3b:b0:17:cd:88:ec:8c:d2:78:57:
3e:67:25:87:5f:2f:05:03:e5:3c:0b:b4:55:06:8e:82:26:8a:
95:ba:70:e3:f3:3a:67:1c:20:52:30:43:fb:f7:97:ab:e9:34:
51:48:34:d2:a1:31:6b:4d:56:f3:67:78:a6:3d:1b:10:11:55:
0f:96:37:c6:6b:91:37:c3:ee:e9:6b:74:96:28:85:c6:06:09:
8a:77:fa:1d:ae:65:df:bb:c6:80:54:2a:ba:4a:13:60:ed:a0:
80:64:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:02 2025 by rpki-client