Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: wLURkYuH+C0KYCjkxcllG5sURMHKa/+JPvVQSm7ZrYs=
Subject key identifier: 2A:E7:EE:42:DD:A1:D2:99:B4:8B:23:30:60:4E:59:34:9D:B3:7D:25
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 0194BC3C567280FBD3944127F963039819FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 13CB
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: f2j5wJFjmfQrZWmxgpTQ16hKKWTbbvFGJljzs+txdmo=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:72:80:fb:d3:94:41:27:f9:63:03:98:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=2ae7ee42dda1d299b48b2330604e59349db37d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:29:c8:99:c9:f8:49:df:30:f6:5f:0c:6c:
8f:86:8d:30:2e:f7:7e:2d:60:94:c6:91:0e:aa:ae:
4c:43:fa:9d:5f:1a:d5:cc:ef:38:f7:7c:e5:78:75:
49:c0:5a:60:de:c3:98:ab:c3:b7:6a:92:48:14:d2:
80:3f:15:f2:b8:0c:b9:0a:66:ec:3b:dd:84:6b:76:
16:c8:f8:83:48:72:52:62:93:89:7c:0c:2a:dd:06:
0f:85:e2:bd:ea:82:7e:66:3c:d4:be:a4:49:29:0b:
9a:d5:d4:ac:69:b8:c5:bb:7d:5b:72:bc:ed:52:db:
7d:50:25:d9:96:a4:53:91:77:76:ca:7b:fb:24:85:
bc:d0:22:ab:c7:fd:b5:82:25:47:40:3d:07:62:54:
5e:09:1a:70:93:35:7b:41:90:54:b1:21:47:70:2f:
a4:f2:d9:ca:d9:13:f9:7f:5d:69:c0:ee:6d:5b:48:
31:5d:76:ce:f2:ca:18:32:9a:b0:cf:de:59:0a:1f:
40:8b:35:da:14:3f:27:b4:52:91:ab:56:32:43:8f:
ff:89:5f:b3:b7:d9:57:a4:fd:fe:b3:4f:b5:21:d0:
de:9a:62:cf:06:61:40:71:fe:17:9d:cc:ad:32:24:
1d:cc:52:a5:a6:e1:d3:e2:59:8b:a4:a5:6e:71:f6:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E7:EE:42:DD:A1:D2:99:B4:8B:23:30:60:4E:59:34:9D:B3:7D:25
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:e9:45:d7:f5:6d:4b:98:43:76:d6:43:d2:d6:52:03:24:
39:92:21:85:eb:58:df:0a:92:57:9e:09:32:ac:87:33:99:cf:
a7:d5:2e:23:61:4c:76:2d:4e:0e:0d:ea:16:56:da:a7:0f:4a:
ee:78:71:53:bd:ff:06:f4:ad:2d:e7:dd:c8:56:88:a8:42:45:
05:2e:f3:5e:85:a8:e1:02:76:65:74:6f:28:07:56:4c:e7:6d:
c1:3c:cf:6b:7d:54:40:d5:13:6b:24:ee:1a:90:8c:4c:62:b9:
7d:d7:36:6e:72:65:67:34:44:1f:b7:ef:83:8e:ca:3a:fd:a7:
8c:0a:0d:45:a5:12:56:ca:00:2e:d5:78:58:56:93:57:50:5f:
eb:39:f8:27:65:4b:e3:0e:57:72:64:3f:f9:10:8a:85:08:2b:
9b:4d:e7:31:f4:b7:d2:98:64:2f:a6:d8:91:e9:5b:ae:33:36:
40:3d:b4:00:1c:97:af:54:60:55:56:ba:d1:90:b9:89:d2:f5:
ee:e4:20:35:c4:16:59:2a:b1:ee:ac:ad:97:66:b0:70:7d:22:
bf:86:67:4c:ca:18:d8:05:5e:e9:d7:12:67:67:6c:84:f0:bb:
d3:65:29:57:cf:0f:d5:63:e6:ee:c8:43:2c:7e:b6:49:c9:bc:
cd:95:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:25 2025 by rpki-client