Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: oF8Y5IP7XbhWv32W0dnr4PBRStj9il5O81/48KyZjF4=
Subject key identifier: F4:31:2E:B1:63:8E:D9:A2:57:2E:B6:32:AE:3F:0B:F1:1D:6C:3A:04
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 0194BC3BBE274E016AE1C9B4666E2240A491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 01FC
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: JHHBcRN2Um/7rUHujqKQR0A1HYW8uwsn7+tqlD/uhtU=)
2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:be:27:4e:01:6a:e1:c9:b4:66:6e:22:40:a4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=f4312eb1638ed9a2572eb632ae3f0bf11d6c3a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:ed:4e:68:99:ae:ca:98:9f:ac:78:eb:0e:
12:da:e9:3e:be:84:be:21:1d:23:fe:0f:c3:b6:1f:
ca:e3:a5:93:af:d4:66:f2:54:d4:56:6b:a0:ab:54:
a9:74:ac:03:80:0b:a9:89:dc:19:d1:c6:6a:17:2f:
d1:c4:08:b1:a1:dd:6b:32:50:13:ef:89:43:00:12:
ac:bd:46:57:eb:23:0b:4f:e2:f3:09:87:47:07:33:
e0:15:a8:1c:50:9f:c9:c9:b3:eb:04:02:42:40:e7:
2c:42:84:76:1e:4d:29:fa:8c:f5:53:42:90:a9:c7:
7f:db:35:a5:ec:7f:e4:c8:4a:56:cb:f6:57:43:63:
d8:3a:40:e7:43:61:90:a2:60:4e:8d:9f:6e:26:76:
26:d4:60:63:a2:54:bf:47:b9:58:79:39:6a:15:00:
c7:c1:f6:87:dc:c6:4d:06:4e:e4:a2:cb:06:47:a4:
ae:74:c7:9c:ef:ef:94:91:99:9c:43:4a:e9:3f:b4:
86:f5:e1:d5:9b:1f:f4:75:be:6c:6d:72:c5:8c:d0:
ad:5c:9d:22:1e:13:d8:93:b2:5c:aa:bb:cb:d7:39:
80:5a:55:52:c8:4a:4e:e5:d2:55:38:d1:ff:40:8e:
31:d1:ef:76:e9:68:23:33:73:f8:cb:62:c3:3f:c6:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:2E:B1:63:8E:D9:A2:57:2E:B6:32:AE:3F:0B:F1:1D:6C:3A:04
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:01:37:ed:c4:84:b2:ac:50:97:73:7c:f6:ff:e2:1f:a9:40:
ec:74:10:b7:e8:83:24:20:0f:c1:db:2e:20:df:86:22:35:72:
ba:f2:1a:8f:3d:9a:34:58:62:b1:36:42:ee:fd:48:66:b9:33:
33:a7:df:4e:89:a3:1e:80:42:70:1e:4f:c2:16:33:bf:35:03:
6b:35:53:17:ae:2d:46:75:97:79:1a:02:25:8a:02:47:ca:a8:
eb:5a:8b:58:cb:49:46:63:8d:76:5d:15:c6:ee:27:b8:16:79:
ed:b9:b4:0c:bf:73:28:5f:1c:da:04:ff:d2:94:2d:8a:2d:5e:
ad:8b:3d:4e:5c:83:c1:71:c1:97:93:bd:07:2d:d6:68:fa:f5:
ba:02:6b:b5:fe:28:6e:95:00:5a:c6:c3:b8:9b:95:cd:c2:24:
96:14:b1:3b:1a:5e:27:ed:a4:49:4a:29:ab:61:4f:bc:82:28:
34:41:cf:65:f0:40:1a:56:1a:c9:bf:ec:da:6a:a2:f1:00:39:
51:68:0d:64:79:95:d8:93:3d:fe:fe:ba:9b:c8:00:78:8d:79:
01:c2:45:6e:32:fc:b3:aa:73:f1:d8:44:d9:c7:d4:85:6b:00:
78:a9:62:03:d5:11:e8:73:ce:b0:f3:de:95:f3:f1:02:07:80:
1a:f3:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:48 2025 by rpki-client