Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft
File: ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft (raw, json)
Hash identifier: mkL5lXGBOMKoLxYegwfzO75wJwftCFPCNbAapGrHREE=
Subject key identifier: D8:A2:AD:16:29:63:0E:32:9B:7B:44:8D:75:15:5A:88:23:F4:C4:CA
Authority key identifier: 95:A7:68:A9:5B:49:9B:D3:BD:67:C1:41:27:AB:6F:97:10:A0:3E:C4
Certificate issuer: /CN=95a768a95b499bd3bd67c14127ab6f9710a03ec4
Certificate serial: 0194BBCE5A9CC8F12719F602EA31E262DD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft
Manifest number: 0A30
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.crl (hash: bcfQ2io24P1LFDqZJ6jgoQoCWp+rqt/6XeuAPcQjTjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5a:9c:c8:f1:27:19:f6:02:ea:31:e2:62:dd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a768a95b499bd3bd67c14127ab6f9710a03ec4
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=d8a2ad1629630e329b7b448d75155a8823f4c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:cc:95:74:72:6a:54:c6:92:49:34:80:f2:
f7:d3:2d:42:d4:93:e4:79:77:8f:68:33:03:f0:62:
47:0e:e2:fa:5b:86:a8:a2:01:60:8a:4f:4f:cf:1e:
dc:4b:d5:f6:3c:06:11:73:ea:5d:a6:95:6c:4b:40:
18:b7:d3:9f:6c:a1:dd:28:1a:3d:53:9b:5f:b5:17:
4a:d8:25:25:01:4d:d9:f5:93:06:dc:99:95:ed:31:
9d:81:98:7c:55:c3:60:c2:23:09:08:8f:b4:01:65:
64:7d:1c:10:e6:34:00:2c:2b:8f:b3:00:ee:5f:09:
95:08:c0:00:30:66:d1:3d:ed:09:54:36:2c:b3:2e:
49:38:cd:80:69:1a:1e:ea:e9:97:d8:97:56:c3:4d:
9a:ca:bf:53:2b:f6:74:47:31:62:80:e6:c0:e8:6d:
29:13:54:ed:07:30:50:01:97:18:a0:66:95:33:cb:
86:54:cd:6a:d4:dc:ad:2f:0b:71:1f:a4:eb:28:bd:
99:ee:64:31:bb:cd:ee:b5:31:1c:83:93:f3:14:48:
90:76:68:70:40:9f:5d:69:2f:e6:5f:f5:32:08:1c:
c4:f3:49:a8:44:a8:3d:05:1a:7b:78:95:79:7a:3b:
ba:83:a5:95:3c:29:fa:0a:1e:53:38:6a:96:36:ff:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:AD:16:29:63:0E:32:9B:7B:44:8D:75:15:5A:88:23:F4:C4:CA
X509v3 Authority Key Identifier:
keyid:95:A7:68:A9:5B:49:9B:D3:BD:67:C1:41:27:AB:6F:97:10:A0:3E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dd:10:a4:72:f8:c8:59:ff:f8:79:73:55:86:e8:da:a1:42:
21:a1:c3:18:05:d9:54:67:65:6e:d1:33:50:93:4e:cc:72:bd:
58:24:e3:e3:4b:a5:51:c1:59:1f:15:c5:28:e7:1a:d3:24:58:
45:46:87:82:00:aa:d2:21:2c:fd:2d:12:ee:4e:9c:a2:a8:57:
e0:43:43:b6:c2:0d:5f:1a:b7:17:16:78:6d:d0:df:fb:fb:40:
63:d0:6e:22:0f:b1:15:c4:2d:b4:77:af:83:cd:68:90:34:4a:
52:63:a7:7c:fc:ce:71:92:5e:bb:02:78:df:cc:a5:8b:5b:8b:
7e:ec:2b:df:82:ec:01:78:58:0d:d6:c5:28:e0:58:3c:c3:48:
30:b8:11:ae:7f:83:67:4e:ea:08:65:f3:af:c8:41:6c:59:f5:
7e:19:7f:2c:f3:41:9e:40:b5:a0:04:4a:87:d2:d1:0d:5a:52:
07:37:86:4b:ee:b7:d1:fb:13:31:d0:b0:bf:ce:10:a8:d4:f0:
25:55:91:24:5c:78:41:75:9f:7e:b2:53:b5:aa:4c:70:d5:c6:
3f:d5:14:f7:8b:20:84:60:e3:87:ce:cf:5c:95:d5:b8:7b:69:
e7:e5:53:8d:56:2e:82:d2:88:04:33:3a:5f:14:d7:ec:b7:17:
8d:86:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:46 2025 by rpki-client